$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa File: 2a3dd29d-c7c4-3c26-822a-864742fe7486.roa (raw, json) Hash identifier: lfKti7EU1kwgovvilQdyQJfTYVc3QlRyVyavKl6/+zQ= Subject key identifier: 89:C0:45:8A:2E:BA:DE:32:66:8B:AA:97:E6:E4:A2:EF:B0:49:23:5B Certificate issuer: /CN=786ab4fb-a46d-40d6-8281-3c79061676da Certificate serial: 010D0C9F4328584B1806CD866FDED24DB4F37B80 Authority key identifier: A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 30263 IP address blocks: 216.7.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cd:86:6f:de:d2:4d:b4:f3:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786ab4fb-a46d-40d6-8281-3c79061676da Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=5a66c29f-938e-492c-a014-c836b8ce8cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9a:8b:6f:e5:e1:61:15:51:1b:66:9f:7a:f5: f1:bd:f9:54:04:0f:f4:26:09:98:c6:cf:8b:c1:d7: e7:da:10:f2:04:35:6f:c3:ea:96:77:b0:f9:3d:01: 52:e2:7a:61:f6:e2:ac:14:ea:02:8b:13:8a:17:2b: 1a:b1:d3:67:e2:26:c6:e5:b2:27:35:e7:36:68:11: 2c:4f:4e:6f:be:c5:ba:f0:1d:5d:64:8c:ea:3d:30: 23:2a:fc:73:6c:f1:4c:cb:35:2d:7e:70:8c:96:e1: 07:a1:69:24:11:fc:7e:d8:28:d6:06:6b:d9:a3:1d: c3:22:e4:68:d3:d0:27:7f:de:c6:9e:e4:a4:da:71: 79:de:60:a9:7a:57:7e:af:db:ee:3a:13:20:8f:5b: da:5d:55:89:d4:a1:1f:9b:df:35:e9:b5:ac:7a:82: 7a:6d:44:ac:b7:71:4c:b6:3d:08:08:38:7f:d5:50: 0e:fc:7c:5d:d5:fc:e9:5a:d4:cd:fa:d9:e4:33:ac: d2:18:a5:67:5f:e4:2f:34:a5:7f:1e:48:27:31:08: f6:8c:d3:14:b7:05:61:ea:5d:39:2f:4b:82:b1:1c: b0:ff:18:ef:7b:e5:46:77:d1:e1:3e:f5:d8:8c:dd: a6:08:fa:9f:fe:a6:fc:04:da:86:12:7e:15:bf:03: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:45:8A:2E:BA:DE:32:66:8B:AA:97:E6:E4:A2:EF:B0:49:23:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl X509v3 Authority Key Identifier: keyid:A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer sbgp-ipAddrBlock: critical IPv4: 216.7.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:7b:ea:3a:bf:e6:4d:97:19:40:f7:a7:8d:2d:1d:0f:77:79: c7:a1:f5:4e:ae:3e:55:eb:72:d7:0f:7c:fe:f4:50:c0:9e:cf: d6:71:04:e8:2b:f6:f4:0b:47:28:a9:ce:6c:e2:1a:8c:29:eb: 8f:27:e8:e0:91:b6:21:b0:62:7d:a4:d4:a5:e2:b5:4e:d5:5e: 29:e1:3a:0b:0b:b6:5c:eb:e4:ba:5b:e7:0a:fe:4c:f4:80:dd: 6d:14:44:ab:22:bf:62:29:65:54:45:a5:64:59:f5:6d:be:58: 79:5d:48:4c:23:34:f9:67:22:22:87:1b:0a:7d:3f:29:7b:8a: 50:4a:8d:40:a0:cc:7b:44:6c:23:e0:ba:d2:01:24:5f:89:02: fb:13:df:45:3a:de:08:37:58:7f:05:b8:15:6a:e9:1d:cf:54: ed:9c:0a:23:76:df:2d:fb:d7:62:a6:1e:8f:fc:8f:87:2f:1c: 76:b9:69:5e:1b:8a:bc:d9:d9:3f:7e:df:17:49:ba:b2:17:d9: 5d:f8:3b:45:3a:cf:70:7a:91:f7:27:c8:ae:81:81:26:4e:c8: ae:ff:40:e2:0a:08:42:78:79:62:2f:c6:f5:2f:b1:66:d5:97: 5f:9d:94:cb:b2:4b:51:4e:f1:4f:a7:02:c7:35:7f:76:3e:64: 9a:94:5e:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBs2Gb97STbTze4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg2YWI0ZmItYTQ2ZC00MGQ2LTgyODEtM2M3OTA2MTY3 NmRhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NWE2NmMyOWYtOTM4ZS00OTJjLWEwMTQtYzgzNmI4Y2U4Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5qLb+XhYRVRG2afevXxvflUBA/0JgmYxs+L wdfn2hDyBDVvw+qWd7D5PQFS4nph9uKsFOoCixOKFysasdNn4ibG5bInNec2aBEs T05vvsW68B1dZIzqPTAjKvxzbPFMyzUtfnCMluEHoWkkEfx+2CjWBmvZox3DIuRo 09Anf97GnuSk2nF53mCpeld+r9vuOhMgj1vaXVWJ1KEfm9816bWseoJ6bUSst3FM tj0ICDh/1VAO/Hxd1fzpWtTN+tnkM6zSGKVnX+QvNKV/HkgnMQj2jNMUtwVh6l05 L0uCsRyw/xjve+VGd9HhPvXYjN2mCPqf/qb8BNqGEn4VvwNjcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInARYouut4yZouql+bkou+wSSNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ODZh YjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5MDYxNjc2ZGEvMmEzZGQyOWQtYzdjNC0z YzI2LTgyMmEtODY0NzQyZmU3NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzg2YWI0ZmItYTQ2ZC00MGQ2LTgy ODEtM2M3OTA2MTY3NmRhLzc4NmFiNGZiLWE0NmQtNDBkNi04MjgxLTNjNzkwNjE2 NzZkYS5jcmwwHwYDVR0jBBgwFoAUpym4Sy5G2Sq7BGjUOx0Yofi46tYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ODZhYjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5 MDYxNjc2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN976jq/5k2XGUD3p40tHQ93eceh9U6uPlXrctcPfP70UMCez9ZxBOgr 9vQLRyipzmziGowp648n6OCRtiGwYn2k1KXitU7VXinhOgsLtlzr5Lpb5wr+TPSA 3W0URKsiv2IpZVRFpWRZ9W2+WHldSEwjNPlnIiKHGwp9Pyl7ilBKjUCgzHtEbCPg utIBJF+JAvsT30U63gg3WH8FuBVq6R3PVO2cCiN23y3712KmHo/8j4cvHHa5aV4b irzZ2T9+3xdJurIX2V34O0U6z3B6kfcnyK6BgSZOyK7/QOIKCEJ4eWIvxvUvsWbV l1+dlMuyS1FO8U+nAsc1f3Y+ZJqUXtg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:46 2025 by rpki-client