$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa File: cad83b52-8daa-3b10-b0c0-60affecd3629.roa (raw, json) Hash identifier: KH+SE4UEzndJ8Ss5HSiwIA5isc8I75CcEy9rPVAal+k= Subject key identifier: CD:89:C4:31:F8:4D:7E:1C:DD:5E:B4:16:17:3A:AB:19:C4:FD:CE:82 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584D15A2678B8B5A0873EE547500 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 13445 IP address blocks: 144.196.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:67:8b:8b:5a:08:73:ee:54:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=d309883f-cd91-4206-bf83-60e325635ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:e3:18:1b:92:a6:57:1e:7e:25:b8:1b:21: 6d:35:a3:27:60:8c:67:bc:a0:02:11:18:e8:8c:78: fd:f9:d6:6d:1f:85:37:5b:de:fc:df:44:d1:c8:ed: 29:db:be:a6:d0:d0:e0:ae:0c:82:67:42:da:51:ea: 85:5a:0a:dd:95:38:6e:59:5e:81:ce:60:d3:93:28: d2:8f:c8:2d:c4:be:1c:e7:54:61:b4:7a:44:30:dd: e9:57:55:4f:a5:f5:9d:77:17:bb:b8:c9:5d:03:fa: 52:fb:6b:d3:c0:d3:b1:cb:02:c0:91:c7:ac:5b:25: 0d:f0:31:a6:55:e9:ad:b5:2e:d0:2b:2e:89:a7:23: 99:87:f0:20:90:cb:7d:6d:88:8a:5e:2f:f7:55:c5: 84:95:ac:61:1e:78:c1:0a:5d:be:ef:a7:3d:de:9c: bd:22:26:6e:10:9a:fb:08:c3:8b:78:db:4a:7a:44: a1:85:d8:e4:89:52:de:7b:da:a3:fa:23:3b:c0:9b: 87:67:7d:0a:88:ee:77:28:27:88:90:ee:1b:84:e1: 81:63:45:89:84:27:d2:4c:a8:78:aa:d5:4b:37:f0: de:97:fa:5f:c3:df:79:25:43:2e:e3:01:22:76:27: 3c:a0:7d:35:00:bc:8f:68:ef:45:ff:90:7b:a4:e1: b8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:89:C4:31:F8:4D:7E:1C:DD:5E:B4:16:17:3A:AB:19:C4:FD:CE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e9:a0:71:29:31:b3:02:fe:91:5c:d4:95:e0:0d:6e:df:b8: b0:a8:12:28:7e:ea:e4:15:d5:4e:8e:0d:c9:e1:f8:ec:4b:26: 51:61:3d:b6:13:12:06:a7:7d:8e:62:57:2d:e7:40:11:99:5d: 37:b0:5c:37:b0:6d:c5:67:d4:54:bb:02:60:02:4a:ef:42:40: 5a:43:49:f1:07:30:24:2e:03:22:6e:46:0a:07:65:aa:00:18: 97:f5:71:eb:f2:5a:81:8e:a1:ca:fa:9a:b2:a3:bc:5f:ce:9f: bb:84:fd:f3:70:2c:f6:33:f4:2f:c9:c1:14:c6:65:40:49:80: a8:81:4b:7e:71:e0:43:41:2f:be:7b:08:0c:2e:65:77:96:06: 30:3b:e4:f7:80:0f:33:95:0b:12:e1:ce:6f:60:22:59:7f:b0: 02:19:90:96:40:99:f9:72:c4:20:33:ac:f4:b6:d5:42:55:7e: 52:7d:c8:72:b5:03:40:f3:6e:f4:e6:98:64:90:ca:2b:33:d6: dd:aa:19:05:b7:d3:3c:76:f3:06:93:87:5f:6d:41:50:f8:b3: c7:34:34:5e:af:ac:be:45:94:ec:59:0b:3d:3e:41:25:93:b3: c7:22:6f:70:2f:ad:af:9a:0c:b3:18:83:32:c4:92:43:54:9e: 95:2e:7c:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomeLi1oIc+5UdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZDMwOTg4M2YtY2Q5MS00MjA2LWJmODMtNjBlMzI1NjM1YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXjGBuSplcefiW4GyFtNaMnYIxnvKACERjo jHj9+dZtH4U3W97830TRyO0p276m0NDgrgyCZ0LaUeqFWgrdlThuWV6BzmDTkyjS j8gtxL4c51RhtHpEMN3pV1VPpfWddxe7uMldA/pS+2vTwNOxywLAkcesWyUN8DGm VemttS7QKy6JpyOZh/AgkMt9bYiKXi/3VcWElaxhHnjBCl2+76c93py9IiZuEJr7 CMOLeNtKekShhdjkiVLee9qj+iM7wJuHZ30KiO53KCeIkO4bhOGBY0WJhCfSTKh4 qtVLN/Del/pfw995JUMu4wEidic8oH01ALyPaO9F/5B7pOG4xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2JxDH4TX4c3V60Fhc6qxnE/c6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2FkODNiNTItOGRhYS0z YjEwLWIwYzAtNjBhZmZlY2QzNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfpoHEpMbMC/pFc1JXgDW7fuLCoEih+6uQV1U6ODcnh+OxLJlFhPbYT EganfY5iVy3nQBGZXTewXDewbcVn1FS7AmACSu9CQFpDSfEHMCQuAyJuRgoHZaoA GJf1cevyWoGOocr6mrKjvF/On7uE/fNwLPYz9C/JwRTGZUBJgKiBS35x4ENBL757 CAwuZXeWBjA75PeADzOVCxLhzm9gIll/sAIZkJZAmflyxCAzrPS21UJVflJ9yHK1 A0DzbvTmmGSQyisz1t2qGQW30zx28waTh19tQVD4s8c0NF6vrL5FlOxZCz0+QSWT s8cib3Avra+aDLMYgzLEkkNUnpUufHw= -----END CERTIFICATE-----Generated at Thu Mar 26 03:42:33 2026 by rpki-client