$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa File: 12f25d35-c636-31fa-a0b4-d96b47fb707f.roa (raw, json) Hash identifier: xURKmIc8w9cEMkIrgQOO0HZP5XrFAIY12fY3KUSGi4s= Subject key identifier: 7C:F7:49:54:18:44:B6:52:6A:F6:44:22:DE:70:A6:15:56:71:70:85 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584900216C4BB1CD2EA214ECF780 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 13445 IP address blocks: 170.133.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6c:4b:b1:cd:2e:a2:14:ec:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=4cb93942-5e36-4bff-8214-cdc72107c4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:a7:9a:14:31:f2:82:f1:2a:a8:a8:72:43: ec:d9:83:9b:c2:20:31:fb:36:04:d2:8f:09:7b:81: 36:7f:1a:e3:af:15:e3:92:d1:98:06:10:c9:55:09: 22:56:7d:31:16:a1:ab:56:7a:35:58:c8:d5:06:c4: 34:24:6f:ad:ec:7c:f7:02:21:93:e9:42:af:fe:20: 8b:b4:1b:5d:b5:4b:f9:12:29:01:3c:8d:17:92:53: 28:68:fa:de:97:eb:8c:38:75:5b:4d:05:44:ae:33: 9e:ab:8f:db:11:16:65:94:ae:0e:77:3c:91:64:4b: 7c:02:c1:32:5c:2f:26:2f:29:32:f1:15:ca:86:0a: 59:ad:4e:90:67:de:d2:47:df:56:d0:d1:ba:35:32: 1a:ee:56:99:68:83:13:78:67:d4:d6:f9:20:74:e8: 1f:cc:48:cb:6b:1b:da:cc:4c:9d:5f:10:44:2b:bb: 1c:b7:1f:33:59:2e:e7:06:bc:85:90:8c:cb:9b:5e: 80:47:87:1e:fe:f9:e6:22:5f:d7:76:9c:51:f0:d1: 12:df:49:26:63:01:97:5e:9a:f1:1b:b5:88:b0:05: 80:4d:df:78:a5:95:d9:90:8e:8f:98:0b:8c:ae:a6: d8:98:a1:54:3d:40:3c:b6:98:bc:2d:13:33:93:86: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F7:49:54:18:44:B6:52:6A:F6:44:22:DE:70:A6:15:56:71:70:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.133.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:02:ef:aa:2f:3f:8b:71:43:2a:32:f0:ae:10:31:76:30:db: db:bf:90:f5:14:f6:f6:6e:44:7e:99:41:be:39:0c:93:3d:99: 26:3b:8f:cd:d8:73:97:93:4e:af:46:80:37:27:09:c1:f7:59: d9:39:7d:87:fd:e2:67:4a:7d:3d:12:3b:5e:7e:93:4c:b5:22: bc:6b:c2:bf:dc:1c:4e:59:95:a7:e2:06:15:a3:0d:33:a1:8b: cb:b8:13:a8:e0:a9:04:35:3b:cf:40:a6:ae:58:a8:66:05:25: b6:f3:8c:1f:21:ed:7b:ec:63:43:8b:82:67:21:97:84:f8:ec: 85:ee:f2:05:69:0c:db:1c:c3:bd:e7:af:d3:cf:a5:27:4a:94: bf:05:5c:e8:b8:fd:d7:01:9f:10:a1:13:74:1e:08:39:39:37: d5:a0:eb:37:d8:42:fe:7b:e0:b1:66:4c:fe:10:d1:85:01:ab: ec:ee:13:ad:7d:36:7e:a8:7b:15:77:40:97:9e:e3:01:de:9f: e6:3a:4b:c8:3c:b4:bc:15:32:78:53:ac:73:ca:06:84:00:6e: 14:f1:1f:94:8d:69:e7:0d:65:88:2e:f4:ad:cb:6a:59:d8:e6: 26:e9:76:5f:0a:03:cc:ac:27:41:d9:98:07:ae:f3:93:f7:52: 74:bb:a4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWxLsc0uohTs94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NGNiOTM5NDItNWUzNi00YmZmLTgyMTQtY2RjNzIxMDdjNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IinmhQx8oLxKqiockPs2YObwiAx+zYE0o8J e4E2fxrjrxXjktGYBhDJVQkiVn0xFqGrVno1WMjVBsQ0JG+t7Hz3AiGT6UKv/iCL tBtdtUv5EikBPI0XklMoaPrel+uMOHVbTQVErjOeq4/bERZllK4OdzyRZEt8AsEy XC8mLyky8RXKhgpZrU6QZ97SR99W0NG6NTIa7laZaIMTeGfU1vkgdOgfzEjLaxva zEydXxBEK7sctx8zWS7nBryFkIzLm16AR4ce/vnmIl/XdpxR8NES30kmYwGXXprx G7WIsAWATd94pZXZkI6PmAuMrqbYmKFUPUA8tpi8LRMzk4bwmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz3SVQYRLZSavZEIt5wphVWcXCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMTJmMjVkMzUtYzYzNi0z MWZhLWEwYjQtZDk2YjQ3ZmI3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqoWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwC76ovP4txQyoy8K4QMXYw29u/kPUU9vZuRH6ZQb45DJM9mSY7j83Y c5eTTq9GgDcnCcH3Wdk5fYf94mdKfT0SO15+k0y1Irxrwr/cHE5ZlafiBhWjDTOh i8u4E6jgqQQ1O89Apq5YqGYFJbbzjB8h7XvsY0OLgmchl4T47IXu8gVpDNscw73n r9PPpSdKlL8FXOi4/dcBnxChE3QeCDk5N9Wg6zfYQv574LFmTP4Q0YUBq+zuE619 Nn6oexV3QJee4wHen+Y6S8g8tLwVMnhTrHPKBoQAbhTxH5SNaecNZYgu9K3LalnY 5ibpdl8KA8ysJ0HZmAeu85P3UnS7pFo= -----END CERTIFICATE-----Generated at Mon Apr 28 15:24:30 2025 by rpki-client