$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa File: 518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa (raw, json) Hash identifier: Zn3Gj54Wu7aJ1mqpjel9taO7H7CI2SS2Odg20Vn9yPI= Subject key identifier: 96:D3:E7:02:B9:19:5F:0A:51:5A:E6:53:7B:6A:7E:31:40:57:21:F9 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584A7D15F9C66FA1863143CD1C00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 13445 IP address blocks: 144.196.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f9:c6:6f:a1:86:31:43:cd:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=1af6902d-c435-4def-8c14-db6160e28b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:97:10:d4:6c:7f:d5:b1:54:bc:af:17:1c: 95:11:8a:43:c9:a1:e5:2b:7c:ce:c6:45:58:56:4d: 5d:e3:54:00:52:ce:3d:38:23:63:df:af:9f:9e:f6: 33:7e:29:e2:65:2a:93:1e:1e:8b:c3:56:d7:c6:74: a2:1b:b5:3c:80:74:a2:78:46:99:90:aa:c1:52:b9: bd:64:5d:59:32:3b:df:1f:e8:3c:b0:3a:80:87:54: 09:42:70:89:7e:42:52:dc:ac:45:51:cc:06:63:c8: a5:5b:b1:24:04:2d:9b:4f:28:d8:7b:2e:09:81:ee: f4:79:69:8d:2c:3a:9a:f5:c6:93:19:c1:3e:95:ac: 9c:ab:dc:1f:97:54:4b:74:1d:f2:7d:7c:40:19:9c: 01:2c:f0:d8:71:ca:9d:d9:07:1c:ac:55:7b:ad:d6: 25:fa:46:4d:c7:3b:6c:22:b9:7f:d6:6d:50:53:6e: 2c:68:c4:d1:7c:cf:4a:3b:e1:f4:c1:86:1f:7d:15: 8d:8b:40:13:0c:2e:01:d2:98:54:d4:b2:16:39:45: 96:6b:8c:7f:69:c3:20:79:ca:15:85:66:1c:19:91: d1:99:52:c9:ce:c4:70:9c:e5:15:22:90:56:57:8f: c6:ce:95:06:67:58:85:f3:89:f1:89:de:ce:99:fa: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D3:E7:02:B9:19:5F:0A:51:5A:E6:53:7B:6A:7E:31:40:57:21:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d5:c0:a9:fe:2f:c2:59:df:fa:65:bf:5e:50:96:2f:43:9c: 7c:e6:9e:94:e0:c1:da:94:4c:ef:67:45:ea:cc:98:b0:21:f5: a6:1b:71:5e:9a:14:57:b0:1f:be:d8:c9:9c:7d:1d:25:40:40: 77:15:ed:09:f3:62:29:05:96:5f:6d:e8:55:51:39:b0:6c:c4: 45:6f:db:f1:c4:30:f2:2a:ec:ff:76:b2:60:d0:18:bd:5d:1c: f4:3e:9e:62:d7:93:18:62:31:06:ca:45:97:3b:b7:bb:d8:72: 0f:16:3a:5d:d1:e0:3a:67:29:20:5e:a2:1c:01:a0:f9:e5:82: f9:50:19:64:7d:64:94:8e:fc:8c:cd:15:ba:a3:83:24:66:ac: 69:9f:8a:75:1b:5f:03:f2:88:3f:83:cd:27:71:16:9d:3b:b5: 0a:43:6a:e6:40:88:f7:27:b1:2d:31:eb:f0:0b:31:e2:77:9c: c4:4b:4a:a7:89:26:64:28:75:fa:9f:62:5e:3f:26:46:53:3c: c8:c5:8e:69:a0:14:ec:85:a5:5f:53:97:14:01:b7:f8:68:c3: a5:fa:82:7b:44:a2:b9:43:39:96:24:05:d8:bc:d3:c9:40:50: 3f:0d:01:4a:b5:af:90:0a:48:f0:17:7a:96:78:00:81:f3:71: 7f:59:45:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfnGb6GGMUPNHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MWFmNjkwMmQtYzQzNS00ZGVmLThjMTQtZGI2MTYwZTI4YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizWXENRsf9WxVLyvFxyVEYpDyaHlK3zOxkVY Vk1d41QAUs49OCNj36+fnvYzfiniZSqTHh6Lw1bXxnSiG7U8gHSieEaZkKrBUrm9 ZF1ZMjvfH+g8sDqAh1QJQnCJfkJS3KxFUcwGY8ilW7EkBC2bTyjYey4Jge70eWmN LDqa9caTGcE+laycq9wfl1RLdB3yfXxAGZwBLPDYccqd2QccrFV7rdYl+kZNxzts Irl/1m1QU24saMTRfM9KO+H0wYYffRWNi0ATDC4B0phU1LIWOUWWa4x/acMgecoV hWYcGZHRmVLJzsRwnOUVIpBWV4/GzpUGZ1iF84nxid7OmfqD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbT5wK5GV8KUVrmU3tqfjFAVyH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNTE4ZDFiMWItNmNlMC0z YWRjLWEwYjQtMWE1MjhkODIwYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzVwKn+L8JZ3/plv15Qli9DnHzmnpTgwdqUTO9nRerMmLAh9aYbcV6a FFewH77YyZx9HSVAQHcV7QnzYikFll9t6FVRObBsxEVv2/HEMPIq7P92smDQGL1d HPQ+nmLXkxhiMQbKRZc7t7vYcg8WOl3R4DpnKSBeohwBoPnlgvlQGWR9ZJSO/IzN FbqjgyRmrGmfinUbXwPyiD+DzSdxFp07tQpDauZAiPcnsS0x6/ALMeJ3nMRLSqeJ JmQodfqfYl4/JkZTPMjFjmmgFOyFpV9TlxQBt/how6X6gntEorlDOZYkBdi808lA UD8NAUq1r5AKSPAXepZ4AIHzcX9ZRS0= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:52 2025 by rpki-client