$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/861e816b-6efd-37cf-99b2-92f4d06fadbf.roa File: 861e816b-6efd-37cf-99b2-92f4d06fadbf.roa (raw, json) Hash identifier: vNEnxkzzL1DCKK1eKN5+8Jq9XcRoJQ+MXuEnQ4TUCns= Subject key identifier: 7F:4F:05:82:D8:F8:BC:9D:08:15:CD:2A:D9:D2:1E:73:DC:EF:FC:3A Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849955F248352D24E67E9800580 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/861e816b-6efd-37cf-99b2-92f4d06fadbf.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 13445 IP address blocks: 144.196.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:24:83:52:d2:4e:67:e9:80:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=5e7d4e00-73fb-49aa-966e-43b391bc5ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:e9:c4:db:65:7f:a0:9e:78:64:09:ca:60: 13:b7:0b:c9:ab:27:c8:a3:61:60:35:2d:5d:66:fd: fa:6b:88:c2:45:5a:1f:1b:0f:d4:cb:88:88:92:18: fb:2e:8c:36:e2:0b:6d:76:c8:e5:7b:70:84:08:0f: 68:a8:8f:44:f3:41:bb:07:0a:5b:8d:a8:67:f9:d1: f5:bc:da:e1:58:b3:db:20:7c:75:50:ca:96:bc:da: ae:ef:b6:40:7e:24:1e:30:34:d5:85:fa:b4:ed:da: a4:92:63:01:2a:55:14:3d:4a:60:cf:27:a5:2f:e1: 1b:0b:5e:42:a7:ad:65:14:8d:f6:97:2e:44:db:ec: 37:e9:bf:03:53:9a:6c:7f:b1:40:de:c4:12:ed:87: fe:e5:f0:71:06:e2:df:b6:13:4d:4b:ec:22:c7:61: 6c:6e:0f:1e:f6:70:d8:03:13:bd:ad:8e:fc:07:e5: 43:47:a7:e7:50:a5:a3:da:18:59:a8:7f:30:02:b4: 17:9a:7c:6a:d3:12:d0:4d:d8:3e:85:bd:8c:c6:69: 0b:8b:be:11:59:f7:6e:fc:95:3e:1f:6c:5f:49:35: 76:26:39:39:89:61:8d:3b:70:5c:1d:dc:ee:ec:ba: 35:ed:fd:7d:29:61:d9:52:70:3a:08:3a:65:6b:5c: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4F:05:82:D8:F8:BC:9D:08:15:CD:2A:D9:D2:1E:73:DC:EF:FC:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/861e816b-6efd-37cf-99b2-92f4d06fadbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e8:5f:5a:5f:f0:ed:43:ae:98:0b:44:de:20:50:fd:8d:21:21: 5b:d2:b2:5e:fc:c4:ba:ef:a7:a2:db:4b:d8:32:e5:01:22:97: 25:11:ae:ea:c2:12:6e:a2:7d:2e:22:a7:33:62:e9:3f:24:19: 71:a1:42:d9:30:3c:8d:b8:03:8c:24:51:e3:84:ac:3d:55:4b: 9b:9c:67:b3:e2:40:be:6a:29:8e:c3:a4:70:39:a3:ff:64:d8: 3b:0a:36:fa:d7:d9:e0:06:3f:8d:dd:25:81:3d:e2:12:8f:fa: 80:0d:9f:86:1d:f5:be:1b:d7:7e:e2:a2:38:4f:c9:23:77:5f: 56:1c:e7:73:47:13:20:63:e5:9a:57:b1:75:ed:2d:f2:ef:67: 69:53:be:01:78:b2:11:0f:87:65:ef:33:5b:dc:94:7a:23:e5: bb:b3:dc:23:20:99:c4:ff:46:38:37:03:3b:fc:45:a2:ce:f9: ba:74:e5:08:d6:8f:33:8e:87:36:b8:c2:c3:2a:59:26:ea:a4: a1:46:bd:36:a4:86:dc:53:d7:e9:06:94:8b:d5:44:48:9d:3b: 33:6a:6d:c0:83:2a:35:2f:ff:6d:ec:4f:fc:a8:47:d4:3e:f5: c9:9e:90:86:df:46:a7:15:24:ba:44:d8:de:09:e4:b9:15:a8: 30:34:cc:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXySDUtJOZ+mABYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NWU3ZDRlMDAtNzNmYi00OWFhLTk2NmUtNDNiMzkxYmM1YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH7pxNtlf6CeeGQJymATtwvJqyfIo2FgNS1d Zv36a4jCRVofGw/Uy4iIkhj7Low24gttdsjle3CECA9oqI9E80G7Bwpbjahn+dH1 vNrhWLPbIHx1UMqWvNqu77ZAfiQeMDTVhfq07dqkkmMBKlUUPUpgzyelL+EbC15C p61lFI32ly5E2+w36b8DU5psf7FA3sQS7Yf+5fBxBuLfthNNS+wix2Fsbg8e9nDY AxO9rY78B+VDR6fnUKWj2hhZqH8wArQXmnxq0xLQTdg+hb2MxmkLi74RWfdu/JU+ H2xfSTV2Jjk5iWGNO3BcHdzu7Lo17f19KWHZUnA6CDpla1wuswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9PBYLY+LydCBXNKtnSHnPc7/w6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvODYxZTgxNmItNmVmZC0z N2NmLTk5YjItOTJmNGQwNmZhZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOhfWl/w7UOumAtE3iBQ/Y0hIVvSsl78xLrvp6LbS9gy5QEilyURrurC Em6ifS4ipzNi6T8kGXGhQtkwPI24A4wkUeOErD1VS5ucZ7PiQL5qKY7DpHA5o/9k 2DsKNvrX2eAGP43dJYE94hKP+oANn4Yd9b4b137iojhPySN3X1Yc53NHEyBj5ZpX sXXtLfLvZ2lTvgF4shEPh2XvM1vclHoj5buz3CMgmcT/Rjg3Azv8RaLO+bp05QjW jzOOhza4wsMqWSbqpKFGvTakhtxT1+kGlIvVREidOzNqbcCDKjUv/23sT/yoR9Q+ 9cmekIbfRqcVJLpE2N4J5LkVqDA0zM8= -----END CERTIFICATE-----Generated at Sun Apr 27 23:01:07 2025 by rpki-client