$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa File: 3e608f82-082e-3625-8820-3883ef973c0c.roa (raw, json) Hash identifier: juTlls/X5ss6W4cbgjNG9N6jik/QT0FVJZsCT0xEYKM= Subject key identifier: EE:38:E6:EE:B0:D4:F4:99:1C:1C:F7:E2:EE:94:0C:BD:64:7B:A3:F0 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584F4976F76218B81D5B2FABFFB0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13445 IP address blocks: 170.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:f7:62:18:b8:1d:5b:2f:ab:ff:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9d31e191-44c8-4cd7-86dc-a78e3b013427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0b:17:98:ee:3e:9f:1e:da:92:5c:bd:2d:00: ca:b6:80:7e:12:02:c9:ce:46:5b:a0:c3:46:5a:0d: 75:8c:1a:47:05:c8:f6:c8:48:90:3f:a0:d2:1d:75: 44:3e:d8:19:73:e9:6b:06:5a:d4:13:c6:e4:af:cd: 5d:75:42:79:bc:c2:99:87:7a:fe:6a:47:58:cf:6c: 7b:15:2e:95:f6:1c:01:04:2f:c2:75:fb:bb:f0:ef: b8:55:9d:72:51:e7:6a:b6:68:8e:ff:04:2f:ca:05: 74:ba:69:17:e0:78:ba:c1:52:6f:cf:36:09:21:a8: a6:dc:99:e5:88:63:a9:d9:6e:d0:94:84:67:95:8a: a2:08:cc:24:6b:e2:39:1c:c3:27:6f:e0:a2:56:2d: 32:26:71:99:08:ed:3f:a7:3c:15:49:32:64:6b:a7: b5:c5:7b:67:b7:15:88:40:10:de:5a:96:05:31:81: d2:2e:7e:73:d2:ae:39:20:36:43:3e:0c:89:3f:cb: 3d:bb:db:9f:b3:80:4e:d6:0d:cf:b9:13:8f:5c:58: f2:5e:8e:a6:c8:07:de:55:32:c4:74:10:03:8b:13: 24:be:f3:cb:5e:90:3b:98:89:a6:b1:1e:ef:a8:d3: b1:95:87:db:ad:38:ce:1d:ef:fc:87:36:9b:31:e7: 16:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:38:E6:EE:B0:D4:F4:99:1C:1C:F7:E2:EE:94:0C:BD:64:7B:A3:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:e0:ba:20:71:51:63:bf:35:48:78:32:4a:01:b6:3f:d9:bd: bb:d1:5d:c1:c3:11:1c:c1:6d:50:d3:40:78:98:9e:89:d2:77: e7:00:d0:e8:ae:59:2b:78:8e:e6:05:75:f4:cc:fe:29:e0:51: 7a:53:97:ce:37:b4:7a:92:7a:80:92:fd:11:a4:61:39:a4:2c: 5d:c9:03:d5:9a:da:15:3e:85:09:62:9d:56:82:45:7d:40:13: 19:95:3c:0f:83:3f:7d:d8:61:29:12:e6:b2:d2:41:69:e3:69: 71:9a:49:05:83:98:06:8f:52:4c:24:2d:ea:6d:95:5a:77:e7: 88:cb:77:5d:55:52:7e:15:f1:c5:ff:b8:b6:66:44:c1:8a:20: d0:77:0d:79:9a:0a:d5:2f:14:9e:d5:73:8d:d3:28:22:d2:a9: 2a:01:75:26:50:e4:5c:50:21:b5:82:c2:c1:1a:29:36:ac:cf: af:af:8c:35:b1:13:9f:09:95:ab:a0:fa:5a:fd:c9:5b:d2:db: 88:d8:c0:03:e6:3c:ab:49:14:ca:dd:3b:7a:cb:09:1d:32:73: 3c:a4:44:06:02:ea:3e:6c:a2:59:96:d8:0f:0b:d9:47:7c:de: 36:42:57:a2:26:a5:51:8a:eb:6f:f2:76:df:1b:bd:3a:34:63: 87:cd:0e:62 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdvdiGLgdWy+r/7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWQzMWUxOTEtNDRjOC00Y2Q3LTg2ZGMtYTc4ZTNiMDEzNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QsXmO4+nx7akly9LQDKtoB+EgLJzkZboMNG Wg11jBpHBcj2yEiQP6DSHXVEPtgZc+lrBlrUE8bkr81ddUJ5vMKZh3r+akdYz2x7 FS6V9hwBBC/Cdfu78O+4VZ1yUedqtmiO/wQvygV0umkX4Hi6wVJvzzYJIaim3Jnl iGOp2W7QlIRnlYqiCMwka+I5HMMnb+CiVi0yJnGZCO0/pzwVSTJka6e1xXtntxWI QBDeWpYFMYHSLn5z0q45IDZDPgyJP8s9u9ufs4BO1g3PuROPXFjyXo6myAfeVTLE dBADixMkvvPLXpA7mImmsR7vqNOxlYfbrTjOHe/8hzabMecWGwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO445u6w1PSZHBz34u6UDL1ke6PwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvM2U2MDhmODItMDgyZS0z NjI1LTg4MjAtMzg4M2VmOTczYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqkgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAveC6IHFRY781SHgySgG2P9m9u9FdwcMRHMFtUNNAeJieidJ35wDQ6K5Z K3iO5gV19Mz+KeBRelOXzje0epJ6gJL9EaRhOaQsXckD1ZraFT6FCWKdVoJFfUAT GZU8D4M/fdhhKRLmstJBaeNpcZpJBYOYBo9STCQt6m2VWnfniMt3XVVSfhXxxf+4 tmZEwYog0HcNeZoK1S8UntVzjdMoItKpKgF1JlDkXFAhtYLCwRopNqzPr6+MNbET nwmVq6D6Wv3JW9LbiNjAA+Y8q0kUyt07essJHTJzPKREBgLqPmyiWZbYDwvZR3ze NkJXoialUYrrb/J23xu9OjRjh80OYg== -----END CERTIFICATE-----Generated at Wed Sep 30 20:00:11 2026 by rpki-client