$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa File: 0d208647-11db-3f31-93dc-96e75ed04817.roa (raw, json) Hash identifier: 9kd+kFmnCRAK04Yl2DZXrt+2tVWJGMaoB0KNJtxNsdE= Subject key identifier: 35:62:57:48:3B:87:B7:F1:3B:BC:A4:3D:D2:23:40:23:17:D4:71:0C Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849955F244698B2E7B66C3D3440 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 13445 IP address blocks: 144.196.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:24:46:98:b2:e7:b6:6c:3d:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=cce30d6e-8853-466c-854d-325f50b6c34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:34:ec:35:18:82:76:fc:c1:22:c9:79:9a: 68:fe:49:2c:1e:5b:62:aa:65:a1:41:52:fc:a7:66: 36:ed:73:e3:f8:25:69:2a:60:b4:e7:2a:90:80:cc: 08:2b:cd:03:1d:0d:c1:29:50:52:33:cc:e3:36:84: 6a:1e:96:fb:eb:38:5e:c8:09:04:a7:d8:c2:14:49: 3b:f2:b2:01:89:e0:a0:49:4e:e4:43:13:30:a5:4c: c7:94:42:8d:df:b4:cd:62:64:f6:3e:49:9c:bc:0f: 12:81:0c:d0:dd:52:51:ff:49:76:e3:29:ef:81:4a: 01:3e:06:6c:0a:09:97:02:5a:a8:64:a7:9f:22:44: b6:b5:57:f8:8b:91:5d:18:af:67:e0:b1:ab:86:67: f2:32:74:65:17:83:b4:9e:06:b7:ba:c0:1b:c1:97: a8:2e:70:da:ab:db:7d:e8:00:61:50:a8:a6:d7:c5: 95:1d:1a:f3:32:51:ee:71:28:3d:1c:30:e6:9d:15: 32:df:a4:e8:80:29:d0:3b:21:3a:d8:90:a3:33:8d: 3a:1f:c5:e3:a6:b4:29:8f:5f:c0:83:c4:8b:87:02: ea:0a:e1:49:5e:7c:9e:50:f6:09:25:a7:61:32:35: f8:17:a2:73:97:89:75:1a:08:a6:2f:14:fa:8a:02: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:57:48:3B:87:B7:F1:3B:BC:A4:3D:D2:23:40:23:17:D4:71:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:53:64:e1:0b:0d:7d:44:5b:29:f2:99:8b:38:e2:72:17:2c: d2:4b:3f:64:70:57:36:6b:c3:19:84:d9:1c:5c:5e:d2:05:f7: bf:e8:c6:d8:9d:36:84:5d:13:df:4a:9c:8b:28:81:30:26:0f: 08:84:06:36:e7:70:f6:49:3d:5f:bf:dd:29:b6:81:f6:77:62: e8:a3:0d:0f:a6:cc:87:de:66:59:9a:1e:a2:5f:94:a7:25:34: 96:15:c8:03:89:2b:1e:17:20:fe:f9:1f:a4:a1:84:89:13:e1: 0d:73:7b:86:d1:0f:20:b7:d6:b2:19:34:1c:fe:0c:d6:81:37: 3b:dd:89:32:1c:a6:4f:d6:e2:fa:55:09:f7:b6:78:54:35:9a: 44:8b:1b:e7:bd:3b:07:e8:2d:c0:12:f3:c6:62:2b:b0:0e:4b: 44:b6:f5:c9:c5:13:ff:f8:39:78:85:83:32:4d:fa:b1:7c:32: 76:9f:b3:63:45:bb:99:af:67:37:5b:ff:49:f0:c5:34:df:aa: e7:50:d3:d1:f5:e0:4c:03:55:7e:0a:9c:b6:e6:88:d7:30:6c: b1:39:03:2f:c4:0d:57:51:30:e5:25:33:31:b4:cb:65:9b:bc: 44:19:c8:a9:ca:24:15:61:2d:7f:06:bd:44:89:87:4f:cb:1b: 07:b9:60:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyRGmLLntmw9NEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2NlMzBkNmUtODg1My00NjZjLTg1NGQtMzI1ZjUwYjZjMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gU07DUYgnb8wSLJeZpo/kksHltiqmWhQVL8 p2Y27XPj+CVpKmC05yqQgMwIK80DHQ3BKVBSM8zjNoRqHpb76zheyAkEp9jCFEk7 8rIBieCgSU7kQxMwpUzHlEKN37TNYmT2PkmcvA8SgQzQ3VJR/0l24ynvgUoBPgZs CgmXAlqoZKefIkS2tVf4i5FdGK9n4LGrhmfyMnRlF4O0nga3usAbwZeoLnDaq9t9 6ABhUKim18WVHRrzMlHucSg9HDDmnRUy36TogCnQOyE62JCjM406H8XjprQpj1/A g8SLhwLqCuFJXnyeUPYJJadhMjX4F6Jzl4l1GgimLxT6igKzOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDViV0g7h7fxO7ykPdIjQCMX1HEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMGQyMDg2NDctMTFkYi0z ZjMxLTkzZGMtOTZlNzVlZDA0ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1TZOELDX1EWynymYs44nIXLNJLP2RwVzZrwxmE2RxcXtIF97/oxtid NoRdE99KnIsogTAmDwiEBjbncPZJPV+/3Sm2gfZ3YuijDQ+mzIfeZlmaHqJflKcl NJYVyAOJKx4XIP75H6ShhIkT4Q1ze4bRDyC31rIZNBz+DNaBNzvdiTIcpk/W4vpV Cfe2eFQ1mkSLG+e9OwfoLcAS88ZiK7AOS0S29cnFE//4OXiFgzJN+rF8Mnafs2NF u5mvZzdb/0nwxTTfqudQ09H14EwDVX4KnLbmiNcwbLE5Ay/EDVdRMOUlMzG0y2Wb vEQZyKnKJBVhLX8GvUSJh0/LGwe5YNY= -----END CERTIFICATE-----Generated at Mon Apr 28 02:20:09 2025 by rpki-client