$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa File: bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa (raw, json) Hash identifier: tST1tJTh0ZCOhtgcnYe4mAMKcvl1IcRUwEHvch4odNo= Subject key identifier: 13:13:AF:A5:81:5A:49:7E:E9:6D:B8:D7:F3:5C:32:B0:B0:3D:19:F6 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584DA6B0246165F5EB77C1A5D360 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 13445 IP address blocks: 163.129.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:24:61:65:f5:eb:77:c1:a5:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=376353a6-ba47-41a6-965a-ab6823aacacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:d9:42:eb:9e:72:27:2b:c7:f1:27:e3:dc: 81:70:2b:0b:11:e8:0c:dc:ea:61:ef:fd:27:6f:f2: 21:07:f2:39:65:37:a3:a9:a5:dd:12:61:b8:43:8a: 76:ae:0c:c5:c3:91:a9:2d:22:49:46:b8:85:3c:9c: c4:a7:fe:51:7c:d1:db:db:17:0f:2c:5a:f3:14:54: 6f:f6:76:02:44:28:d9:11:b4:5b:ca:50:62:24:fb: 12:a5:4c:88:26:28:89:4b:ba:1d:05:c5:4d:f4:fa: 9b:70:c8:e1:d2:64:39:11:ae:8f:b5:4b:1f:33:53: 13:d4:cb:06:cf:3a:7a:11:32:9c:35:e5:a5:04:18: 44:6a:e5:fe:d0:d4:88:04:3c:2c:32:cc:7b:31:dc: b5:25:9c:cb:7e:88:5d:68:83:be:e2:f8:d6:fd:83: ab:02:2c:ee:06:3a:60:6c:da:7a:78:5b:ba:c7:cc: 14:99:ba:d4:fa:de:cc:7f:d6:e1:14:64:70:d9:88: aa:06:fa:a6:95:3a:d2:75:ef:34:2d:14:94:98:74: 62:49:20:04:c1:2c:c4:bd:f0:c3:2f:24:55:df:90: bf:47:48:4f:47:16:17:4b:f9:13:29:d8:7f:6f:0f: 11:c5:c1:a0:16:cc:40:c0:3d:ce:6b:ef:39:8b:d3: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:13:AF:A5:81:5A:49:7E:E9:6D:B8:D7:F3:5C:32:B0:B0:3D:19:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a8:11:76:92:8c:58:08:58:b0:3f:61:13:cc:93:eb:19:46: 48:12:d2:a7:d7:2e:bf:8b:cd:3a:11:6e:07:56:20:d1:fb:b0: fb:72:db:74:07:c9:ac:d1:32:38:13:e5:72:24:9a:f0:db:04: 99:17:9c:bd:54:63:43:19:e9:cd:31:ff:f4:ca:be:4b:c0:02: e2:6b:33:c1:36:26:12:97:15:1e:1f:9a:74:63:c2:8c:94:f2: 39:5f:76:bd:3c:30:a8:96:fc:19:5f:a1:19:89:45:34:76:5e: 88:78:56:7c:d1:eb:92:48:2b:99:ca:7c:db:60:2f:ef:16:f5: 3a:73:20:3b:8d:72:45:68:11:b6:5d:9a:7f:63:51:b7:9d:0f: 82:b4:8e:90:21:ff:c4:67:34:91:34:75:8f:64:5a:50:7e:d8: 1a:10:6e:96:a5:06:67:7c:49:79:c6:63:2a:9f:a1:7e:46:a5: 36:89:5e:0a:7f:61:47:3e:9b:17:3d:f5:a1:93:86:eb:f9:aa: c2:6d:d3:8c:76:58:51:d6:56:6a:d1:e0:b9:ee:bc:3f:85:59: 58:03:bf:5a:f0:36:ca:be:57:d0:22:19:a8:d2:d6:a7:ed:0a: 97:80:5c:90:11:b5:32:c6:e4:39:53:00:0f:28:cc:cf:e8:19: 42:1e:d3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCRhZfXrd8Gl02AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk Mzc2MzUzYTYtYmE0Ny00MWE2LTk2NWEtYWI2ODIzYWFjYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnErZQuuecicrx/En49yBcCsLEegM3Oph7/0n b/IhB/I5ZTejqaXdEmG4Q4p2rgzFw5GpLSJJRriFPJzEp/5RfNHb2xcPLFrzFFRv 9nYCRCjZEbRbylBiJPsSpUyIJiiJS7odBcVN9PqbcMjh0mQ5Ea6PtUsfM1MT1MsG zzp6ETKcNeWlBBhEauX+0NSIBDwsMsx7Mdy1JZzLfohdaIO+4vjW/YOrAizuBjpg bNp6eFu6x8wUmbrU+t7Mf9bhFGRw2YiqBvqmlTrSde80LRSUmHRiSSAEwSzEvfDD LyRV35C/R0hPRxYXS/kTKdh/bw8RxcGgFsxAwD3Oa+85i9PNywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMTr6WBWkl+6W241/NcMrCwPRn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYmI1NDRhMDYtMGRhNi0z YzU3LWI5YWItMGQ3Njk0NTQ2ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo4EgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqoEXaSjFgIWLA/YRPMk+sZRkgS0qfXLr+LzToRbgdWINH7sPty23QH yazRMjgT5XIkmvDbBJkXnL1UY0MZ6c0x//TKvkvAAuJrM8E2JhKXFR4fmnRjwoyU 8jlfdr08MKiW/BlfoRmJRTR2Xoh4VnzR65JIK5nKfNtgL+8W9TpzIDuNckVoEbZd mn9jUbedD4K0jpAh/8RnNJE0dY9kWlB+2BoQbpalBmd8SXnGYyqfoX5GpTaJXgp/ YUc+mxc99aGThuv5qsJt04x2WFHWVmrR4LnuvD+FWVgDv1rwNsq+V9AiGajS1qft CpeAXJARtTLG5DlTAA8ozM/oGUIe0z0= -----END CERTIFICATE-----Generated at Wed May 13 10:03:18 2026 by rpki-client