$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa File: fbec21b9-3c0c-3228-995d-b5367840be36.roa (raw, json) Hash identifier: nTIiXCJl2Jt1ptOHQBeCX2sGYab5eEA3uuX/R7U0Xk0= Subject key identifier: 49:DE:C6:C9:B3:CE:6C:8E:9C:FD:10:95:6E:4B:EE:47:4E:57:EE:61 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B3C51ABA327D29A7F109CAA40 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 13445 IP address blocks: 163.129.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:ab:a3:27:d2:9a:7f:10:9c:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=52f5f062-7649-42f8-bd9f-a6089e4eb48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:a0:7e:92:cf:53:7e:5c:94:c1:a5:b8:a6: 64:0c:c2:22:2d:07:12:5e:ee:f1:6f:1d:34:0e:c6: 13:80:e2:b9:41:32:e2:a4:98:0b:2e:df:f7:9c:74: b5:fe:8c:14:13:5e:69:30:ac:2a:d9:5a:8b:6a:2a: 6b:ee:b3:6c:4d:af:ff:0a:c2:f7:11:84:26:83:c8: bf:38:37:c8:7b:81:05:38:1a:70:ba:fd:39:9e:4c: 8b:3a:0d:00:dc:a0:05:1f:86:4b:11:14:1b:e4:c5: 21:eb:ff:34:20:a5:a1:aa:39:88:07:ef:8e:1c:87: d1:13:f6:d2:82:5f:84:e9:17:ad:14:21:82:c2:23: 8f:c5:cc:f2:13:78:42:45:c5:b1:76:80:09:51:7e: 91:4b:96:75:e9:f0:2f:fa:27:d3:29:27:35:50:f3: 80:6e:82:74:df:0a:58:71:bb:db:a0:ad:d5:8a:17: 23:95:4b:fe:61:9b:79:67:c7:f8:3a:ad:58:56:53: ab:d0:b5:dc:81:4a:81:56:8e:30:ab:02:3c:32:05: 32:b5:0f:9a:4a:17:ec:25:ce:14:01:d3:ea:66:2f: 1a:ec:9e:b6:e0:bb:0d:5f:aa:74:78:67:2a:eb:a8: 91:2c:3a:42:0b:ff:e6:c9:25:47:91:db:e3:89:e4: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DE:C6:C9:B3:CE:6C:8E:9C:FD:10:95:6E:4B:EE:47:4E:57:EE:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:7d:72:5a:22:3d:25:ed:31:ea:f2:a0:46:d1:93:49:dd:a2: 35:f1:14:1a:10:dc:39:d6:9d:84:1f:f9:19:a0:85:e4:1c:47: e4:04:8d:25:0b:a4:2b:dc:7b:c6:f7:f6:25:dc:76:f0:80:4b: 84:a3:18:ba:e3:4d:83:61:a7:c7:f0:f6:a4:c7:f0:f3:12:76: 6d:97:b8:b6:4d:b4:e4:d6:6b:05:e6:74:37:a9:82:ba:30:d7: 92:50:32:ec:c7:81:71:80:9c:11:49:4f:6f:b6:34:0f:27:23: 8b:34:63:dc:47:54:c0:13:f5:7f:37:b3:aa:cd:ce:46:a7:60: f5:57:0a:ec:3e:4c:b7:72:bc:04:c8:39:20:61:9b:09:02:ac: 03:3a:ba:a0:74:cd:5a:b6:5f:f8:d3:a0:10:d6:22:43:d7:bc: 6b:14:83:a1:3c:1a:90:77:f8:f5:4f:e3:ea:d9:0f:cd:9a:b3: b5:cc:d2:39:83:49:3c:5d:c8:fd:7d:ae:92:a7:43:0a:fb:8d: b6:c7:b0:ed:16:22:db:05:c2:56:c5:6d:7e:a0:17:7c:b8:91: 27:3d:a8:8e:9b:49:23:51:ff:95:8b:de:e2:e3:7e:c5:97:c2: eb:ad:f5:c1:b7:52:e6:7e:f5:0a:a4:7c:ba:ed:1f:9d:56:53: 20:ec:67:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UaujJ9KafxCcqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NTJmNWYwNjItNzY0OS00MmY4LWJkOWYtYTYwODllNGViNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieugfpLPU35clMGluKZkDMIiLQcSXu7xbx00 DsYTgOK5QTLipJgLLt/3nHS1/owUE15pMKwq2VqLaipr7rNsTa//CsL3EYQmg8i/ ODfIe4EFOBpwuv05nkyLOg0A3KAFH4ZLERQb5MUh6/80IKWhqjmIB++OHIfRE/bS gl+E6RetFCGCwiOPxczyE3hCRcWxdoAJUX6RS5Z16fAv+ifTKSc1UPOAboJ03wpY cbvboK3VihcjlUv+YZt5Z8f4Oq1YVlOr0LXcgUqBVo4wqwI8MgUytQ+aShfsJc4U AdPqZi8a7J624LsNX6p0eGcq66iRLDpCC//mySVHkdvjieSavwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnexsmzzmyOnP0QlW5L7kdOV+5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZmJlYzIxYjktM2MwYy0z MjI4LTk5NWQtYjUzNjc4NDBiZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJ9cloiPSXtMeryoEbRk0ndojXxFBoQ3DnWnYQf+RmgheQcR+QEjSUL pCvce8b39iXcdvCAS4SjGLrjTYNhp8fw9qTH8PMSdm2XuLZNtOTWawXmdDepgrow 15JQMuzHgXGAnBFJT2+2NA8nI4s0Y9xHVMAT9X83s6rNzkanYPVXCuw+TLdyvATI OSBhmwkCrAM6uqB0zVq2X/jToBDWIkPXvGsUg6E8GpB3+PVP4+rZD82as7XM0jmD STxdyP19rpKnQwr7jbbHsO0WItsFwlbFbX6gF3y4kSc9qI6bSSNR/5WL3uLjfsWX wuut9cG3UuZ+9QqkfLrtH51WUyDsZ4M= -----END CERTIFICATE-----Generated at Wed Nov 5 14:42:21 2025 by rpki-client