$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa File: ffa2ee7a-93af-3463-84fd-957901863756.roa (raw, json) Hash identifier: PBxzj7Ug016kkHavVBq+fIbQ5f0UiMVGPAjb8kN2kfY= Subject key identifier: 5F:85:46:14:40:AD:D9:90:EB:24:A9:88:18:BD:ED:69:CC:48:C3:4A Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584BA0D260980F8F8B2A3E0BD280 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 13445 IP address blocks: 209.197.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:60:98:0f:8f:8b:2a:3e:0b:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=ebc34c1a-b9df-412b-a7d7-df441e7b858d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:1f:dc:69:e5:d2:2d:e2:af:19:b4:e7:63: c9:cd:90:56:04:7e:6f:be:e7:c6:69:a1:de:56:79: 01:88:69:e3:1b:e9:34:ba:a3:e1:08:82:77:99:f1: bf:71:aa:78:a8:1c:25:0a:63:02:b4:2d:4f:c0:57: d6:44:1b:f0:57:a6:31:68:96:8b:2a:c4:23:cd:f9: 4b:11:fb:10:f1:cd:d2:6a:28:6b:50:a0:ad:3b:1c: cf:8d:99:66:49:c3:6c:2f:8f:2d:d4:d3:34:13:e5: ef:7d:66:b7:d9:32:a8:db:48:c6:52:fb:c2:3c:a5: 64:26:c0:89:62:dc:1f:6a:fa:f2:26:b5:92:04:bf: 51:b3:e3:17:31:0c:13:6e:02:ca:a7:aa:7f:67:f7: 0c:98:b4:82:ae:98:58:f0:3d:d9:bf:cc:e8:4b:b0: 19:cf:8d:a0:46:9c:75:9a:38:0e:6c:66:bc:38:3a: 3e:62:9b:f7:7c:53:d7:28:fb:58:4c:aa:58:5e:ea: 6d:6e:fb:ed:f0:61:6f:42:b2:66:df:8f:c7:20:4b: ba:65:db:76:6e:27:4a:75:43:3e:22:7a:16:46:a8: 6b:9c:51:15:58:a7:22:8b:92:83:2a:9a:6f:51:2d: 4d:57:e5:de:6b:5e:1a:32:a3:4d:f1:26:92:15:ad: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:85:46:14:40:AD:D9:90:EB:24:A9:88:18:BD:ED:69:CC:48:C3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 209.197.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d7:f3:6b:b7:ae:e0:2f:31:bf:55:ff:88:81:ff:0c:10:a7: 27:f8:59:64:c3:37:0d:4f:61:53:39:c4:7e:db:d7:01:97:d9: 9a:5d:71:7b:e8:23:2c:7d:48:ba:be:31:12:59:19:33:6b:30: 8f:66:af:57:b2:54:6a:97:82:14:37:eb:df:ce:b0:91:f2:d2: d3:1c:98:39:93:07:7e:d5:a0:31:62:d5:9e:50:0c:32:e9:05: e6:10:a1:77:5f:10:89:e1:ea:f5:15:2d:67:a9:26:d9:bc:2c: d5:b0:41:d4:1b:00:23:85:42:41:e3:8a:54:9b:83:9d:45:f8: 3f:9f:f8:91:2c:e1:3b:fb:42:94:f3:d4:52:3f:e7:8d:b7:aa: 57:7d:2b:6d:c4:13:9a:1e:87:77:d5:91:9a:98:1c:df:2a:56: 9b:97:74:9a:cc:26:37:fe:44:8f:21:4a:35:0f:98:a5:74:72: bb:09:5b:20:2f:71:ad:ba:b8:c5:0b:fc:04:2f:7d:06:c4:19: dc:33:9e:f3:2e:08:b1:5e:67:61:47:8e:5e:24:48:48:58:28: 80:3f:0b:d2:9a:34:09:3d:7a:4c:3f:66:5b:de:a5:8f:fa:ef: d0:6f:b9:21:24:0a:13:0d:42:bb:c5:3f:c2:84:6b:1e:66:bc: ee:5d:73:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mCYD4+LKj4L0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZWJjMzRjMWEtYjlkZi00MTJiLWE3ZDctZGY0NDFlN2I4NThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAof3Gnl0i3irxm052PJzZBWBH5vvufGaaHe VnkBiGnjG+k0uqPhCIJ3mfG/cap4qBwlCmMCtC1PwFfWRBvwV6YxaJaLKsQjzflL EfsQ8c3SaihrUKCtOxzPjZlmScNsL48t1NM0E+XvfWa32TKo20jGUvvCPKVkJsCJ YtwfavryJrWSBL9Rs+MXMQwTbgLKp6p/Z/cMmLSCrphY8D3Zv8zoS7AZz42gRpx1 mjgObGa8ODo+Ypv3fFPXKPtYTKpYXuptbvvt8GFvQrJm34/HIEu6Zdt2bidKdUM+ InoWRqhrnFEVWKcii5KDKppvUS1NV+Xea14aMqNN8SaSFa2MwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+FRhRArdmQ6ySpiBi97WnMSMNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZmZhMmVlN2EtOTNhZi0z NDYzLTg0ZmQtOTU3OTAxODYzNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0cXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzX82u3ruAvMb9V/4iB/wwQpyf4WWTDNw1PYVM5xH7b1wGX2ZpdcXvo Iyx9SLq+MRJZGTNrMI9mr1eyVGqXghQ369/OsJHy0tMcmDmTB37VoDFi1Z5QDDLp BeYQoXdfEInh6vUVLWepJtm8LNWwQdQbACOFQkHjilSbg51F+D+f+JEs4Tv7QpTz 1FI/5423qld9K23EE5oeh3fVkZqYHN8qVpuXdJrMJjf+RI8hSjUPmKV0crsJWyAv ca26uMUL/AQvfQbEGdwznvMuCLFeZ2FHjl4kSEhYKIA/C9KaNAk9ekw/ZlvepY/6 79BvuSEkChMNQrvFP8KEax5mvO5dcxo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:57:29 2025 by rpki-client