$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/463fca7a-a784-3f07-b991-80227dcfd3aa.roa File: 463fca7a-a784-3f07-b991-80227dcfd3aa.roa (raw, json) Hash identifier: S6qHnuDz2luGwpkAN5scvIqt51OiXBnayUL91l/p/os= Subject key identifier: 38:88:E0:CA:7A:FC:A7:49:A8:19:77:FD:62:A3:51:56:2D:01:40:D0 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584D15A26740B344A305368576B0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/463fca7a-a784-3f07-b991-80227dcfd3aa.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 13445 IP address blocks: 144.196.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:67:40:b3:44:a3:05:36:85:76:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=724efd01-7b7c-4305-bd1e-2e1eaf0f2a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:3a:b7:08:da:8a:38:2b:a5:78:80:bf:ba: e9:eb:ff:21:72:71:20:36:6b:34:a0:f8:32:c3:2b: 8d:34:f8:81:40:ef:4a:66:03:8d:a1:5d:a1:c1:7f: a4:9f:9f:b7:21:48:57:45:5c:26:46:a2:4b:74:27: 37:81:9f:a5:e4:16:63:5e:cd:f8:e0:d7:d5:c4:d9: dd:84:85:9a:58:17:27:50:97:44:b7:f8:36:72:e5: 4f:c7:1a:f4:7c:cd:6b:33:42:99:95:41:96:e3:8a: 03:9b:9f:97:ff:be:5b:9c:3c:c4:70:8d:2a:f1:d3: aa:d1:27:05:d8:31:d3:80:d1:55:fb:c6:20:11:17: 9e:4f:b9:a4:b8:a9:07:9a:d9:32:16:42:90:4a:ba: 24:59:79:a8:e4:97:cb:89:97:0c:cd:35:43:51:ec: ab:ac:f9:80:d5:94:e8:01:5c:c9:bc:23:90:68:a9: 2a:37:7b:4b:95:03:55:ad:a6:81:23:54:dc:99:29: 14:23:a3:67:7d:0e:94:41:b0:86:42:73:80:1b:f2: 72:bd:26:a4:90:d6:70:bc:3a:b2:41:d2:76:4f:9e: 71:5a:e1:e1:4a:ba:5d:91:0b:60:a8:15:e1:93:c6: e1:83:d3:5d:68:22:d7:15:0b:ba:ae:32:41:69:63: 69:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:88:E0:CA:7A:FC:A7:49:A8:19:77:FD:62:A3:51:56:2D:01:40:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/463fca7a-a784-3f07-b991-80227dcfd3aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:02:ef:3c:6c:0b:6e:4b:01:d1:88:90:17:fb:3c:80:3d:36: 67:c8:2c:39:3d:4c:95:6f:1f:85:f7:cc:10:3d:17:60:72:0a: d8:3b:89:7f:c9:d7:09:e9:08:ba:7f:e5:b6:c7:3c:62:36:13: fd:53:c6:04:6d:09:bb:54:9a:80:b8:f9:28:21:e4:a5:ee:97: 3c:7b:16:1f:19:79:92:77:1c:df:18:7d:ef:ad:f2:4d:37:1d: fb:f8:b5:15:98:cc:fa:cf:3a:b1:45:57:98:d5:d6:64:5e:6d: 54:5e:b5:85:e5:a3:1d:38:88:09:a7:c6:7c:71:30:23:80:c4: 26:c5:e0:82:c4:47:12:56:b6:14:51:37:13:94:e2:50:a6:1a: 4c:54:d0:0a:50:f3:cc:bc:18:79:b2:d4:3e:ad:94:88:74:73: 32:54:da:a8:16:a1:f8:8b:e1:52:d4:45:d7:05:f1:b6:e1:09: 3c:4f:3f:fa:8a:72:3d:2f:1d:9e:94:67:f2:de:64:df:7c:e7: 72:c6:a6:da:89:0e:52:55:79:00:f5:ec:5a:79:48:a4:fa:9e: 04:8b:14:9a:ed:da:12:84:f1:38:3f:8b:77:9b:71:5e:14:2f: 57:49:55:54:02:d2:4c:e3:10:a6:61:eb:9f:04:2f:bf:5a:e9: c7:85:b3:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomdAs0SjBTaFdrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NzI0ZWZkMDEtN2I3Yy00MzA1LWJkMWUtMmUxZWFmMGYyYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+A6twjaijgrpXiAv7rp6/8hcnEgNms0oPgy wyuNNPiBQO9KZgONoV2hwX+kn5+3IUhXRVwmRqJLdCc3gZ+l5BZjXs344NfVxNnd hIWaWBcnUJdEt/g2cuVPxxr0fM1rM0KZlUGW44oDm5+X/75bnDzEcI0q8dOq0ScF 2DHTgNFV+8YgEReeT7mkuKkHmtkyFkKQSrokWXmo5JfLiZcMzTVDUeyrrPmA1ZTo AVzJvCOQaKkqN3tLlQNVraaBI1TcmSkUI6NnfQ6UQbCGQnOAG/JyvSakkNZwvDqy QdJ2T55xWuHhSrpdkQtgqBXhk8bhg9NdaCLXFQu6rjJBaWNpPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiI4Mp6/KdJqBl3/WKjUVYtAUDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNDYzZmNhN2EtYTc4NC0z ZjA3LWI5OTEtODAyMjdkY2ZkM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkMSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOUC7zxsC25LAdGIkBf7PIA9NmfILDk9TJVvH4X3zBA9F2ByCtg7iX/J 1wnpCLp/5bbHPGI2E/1TxgRtCbtUmoC4+Sgh5KXulzx7Fh8ZeZJ3HN8Yfe+t8k03 Hfv4tRWYzPrPOrFFV5jV1mRebVRetYXlox04iAmnxnxxMCOAxCbF4ILERxJWthRR NxOU4lCmGkxU0ApQ88y8GHmy1D6tlIh0czJU2qgWofiL4VLURdcF8bbhCTxPP/qK cj0vHZ6UZ/LeZN9853LGptqJDlJVeQD17Fp5SKT6ngSLFJrt2hKE8Tg/i3ebcV4U L1dJVVQC0kzjEKZh658EL79a6ceFs2s= -----END CERTIFICATE-----Generated at Thu Mar 26 15:00:40 2026 by rpki-client