$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa File: b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa (raw, json) Hash identifier: UH/XoXmfgs2dBPGygl+mSAUa7KHMuevlmaRwNM7pU2w= Subject key identifier: 77:9D:70:FA:92:51:95:4F:A3:60:4B:02:72:D0:3E:35:C6:D5:AE:79 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584D1F4A0DCE9B55A2BDA822EF80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 13445 IP address blocks: 144.196.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:0d:ce:9b:55:a2:bd:a8:22:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a2e14c1b-a60d-4137-b664-1eef603742e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:df:82:15:72:5b:96:32:5b:ed:c3:ca:f7: f9:14:50:4f:77:35:87:c1:b9:0c:1f:30:cf:47:b9: 66:df:80:40:5b:f8:50:4f:17:23:47:f1:77:0d:2b: 2f:25:76:8c:06:31:0f:f6:07:4f:00:b2:59:3b:e1: 55:38:bd:30:d4:1d:3c:59:98:35:f2:d7:e2:9b:4a: 95:bd:f1:88:4e:16:e6:a0:37:2c:74:03:63:56:96: ac:b4:41:11:04:17:62:90:cc:dd:55:66:34:cb:2d: e1:98:1e:26:7f:70:37:e9:e2:33:b4:73:3f:70:52: 87:e9:0e:e4:95:d7:3f:27:d3:44:9b:e7:d5:09:ac: 95:2e:26:5d:b9:f1:89:46:37:1c:2e:52:f1:59:f1: 83:72:6c:0c:02:15:fc:c5:dd:82:5a:da:c8:69:61: 58:e7:45:f1:5b:2c:af:41:92:db:52:d1:20:82:80: 3c:cc:0b:86:cb:6f:4a:6a:24:46:49:a5:22:bd:35: a5:bb:ac:96:5c:cb:88:86:b0:93:2e:a6:45:a1:c6: 30:56:fb:73:09:27:a5:99:f5:65:3c:f9:67:59:f5: 8e:cb:7e:41:1b:44:c6:20:c2:ec:8b:a6:4f:35:4b: 04:4f:29:6d:f6:61:c7:d4:e8:69:91:f6:b5:d8:22: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9D:70:FA:92:51:95:4F:A3:60:4B:02:72:D0:3E:35:C6:D5:AE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:7e:d8:6d:35:1c:ec:13:96:3d:0e:3e:8f:18:6f:b4:f7:e2: 56:eb:4a:44:e8:e3:e9:16:9d:70:f1:6b:ce:5f:a1:ee:d3:51: 78:ef:4f:a6:c1:f5:ed:d7:2f:fb:3a:5d:6c:6a:17:e4:05:60: 09:fa:5f:21:fe:25:f9:ea:1f:3b:ed:77:a1:a8:67:82:72:1e: eb:7a:39:27:d8:92:e5:76:d2:c0:cc:cd:cd:62:d1:63:2e:31: d3:3c:29:b4:58:4f:3c:9d:3a:b9:7d:85:48:71:52:65:2c:3e: 19:bf:3c:d0:18:db:13:b7:17:f2:90:d7:c2:7e:eb:14:bd:94: bc:28:97:9b:0a:1f:37:da:aa:d1:44:94:58:cb:74:4a:08:2f: eb:b1:90:75:d1:28:3f:f0:4a:ae:0c:7e:93:84:2c:02:d7:54: 6e:58:b0:2a:6a:1e:75:73:bf:18:dd:a1:d6:f8:67:7d:43:98: 20:11:6b:2c:0e:5c:c8:bb:a8:47:3d:e5:69:40:6f:03:43:71: c2:00:a9:7c:b0:6a:82:91:98:02:2a:15:fb:c3:b1:57:87:57: 96:a9:a6:e0:40:3c:ee:bb:c4:00:ff:18:04:11:34:13:ec:eb: 23:3c:20:0e:5b:33:29:1a:10:a7:2d:83:eb:8a:b6:13:a2:51: cc:4f:fa:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSg3Om1Wivagi74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTJlMTRjMWItYTYwZC00MTM3LWI2NjQtMWVlZjYwMzc0MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGffghVyW5YyW+3Dyvf5FFBPdzWHwbkMHzDP R7lm34BAW/hQTxcjR/F3DSsvJXaMBjEP9gdPALJZO+FVOL0w1B08WZg18tfim0qV vfGIThbmoDcsdANjVpastEERBBdikMzdVWY0yy3hmB4mf3A36eIztHM/cFKH6Q7k ldc/J9NEm+fVCayVLiZdufGJRjccLlLxWfGDcmwMAhX8xd2CWtrIaWFY50XxWyyv QZLbUtEggoA8zAuGy29KaiRGSaUivTWlu6yWXMuIhrCTLqZFocYwVvtzCSelmfVl PPlnWfWOy35BG0TGIMLsi6ZPNUsETylt9mHH1Ohpkfa12CJNowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHedcPqSUZVPo2BLAnLQPjXG1a55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjJjODdkMjQtM2ZiNi0z YjZhLTgzNzEtZmI3NWRjNWI2M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALd+2G01HOwTlj0OPo8Yb7T34lbrSkTo4+kWnXDxa85foe7TUXjvT6bB 9e3XL/s6XWxqF+QFYAn6XyH+JfnqHzvtd6GoZ4JyHut6OSfYkuV20sDMzc1i0WMu MdM8KbRYTzydOrl9hUhxUmUsPhm/PNAY2xO3F/KQ18J+6xS9lLwol5sKHzfaqtFE lFjLdEoIL+uxkHXRKD/wSq4MfpOELALXVG5YsCpqHnVzvxjdodb4Z31DmCARaywO XMi7qEc95WlAbwNDccIAqXywaoKRmAIqFfvDsVeHV5appuBAPO67xAD/GAQRNBPs 6yM8IA5bMykaEKctg+uKthOiUcxP+ik= -----END CERTIFICATE-----Generated at Thu Mar 26 02:00:26 2026 by rpki-client