$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa File: b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa (raw, json) Hash identifier: 95rfwAdzl6GGwVUwKIHGPfkFKbY5BLTGiiRgwWlBJxU= Subject key identifier: C1:40:48:2B:5A:F4:93:73:43:67:B3:84:A0:7C:76:E8:66:59:69:99 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858499DBF2A597B922BA13657AB00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 13445 IP address blocks: 144.196.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2a:59:7b:92:2b:a1:36:57:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=0fb690b0-5e35-445b-af43-5e4c675ed709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:32:e1:ab:09:6b:e9:8e:87:0b:d5:1a:86: e2:f8:3a:5c:2c:a7:80:f8:7d:78:b6:81:c2:fd:c9: 36:86:f6:27:a9:67:86:5e:ad:a2:1c:37:a6:83:e9: ad:4d:29:4a:7e:a0:45:05:26:73:e7:0e:e4:c5:f2: 56:f2:3f:4c:79:73:23:4e:e7:e0:50:9e:21:f7:11: 7f:6d:69:e0:8d:ca:91:6a:76:1a:7d:49:bf:ab:10: c4:96:17:f0:3e:7e:3c:1b:93:21:4b:b4:99:a5:ea: 3c:43:9a:71:28:aa:8a:a6:ae:3e:dc:89:2e:37:b8: 80:4b:d9:58:17:15:56:41:d9:11:d4:bd:2e:d1:9e: 0d:7b:3a:4b:d1:db:93:2e:6d:92:81:e6:bd:41:1e: cf:2f:73:ce:71:78:65:3b:b5:c6:8a:4f:ec:30:fe: 52:b9:b8:b2:07:05:41:8e:aa:57:cc:99:59:cc:9a: 73:e3:f8:60:78:47:61:00:18:a2:13:59:e7:ba:6c: ef:48:99:2f:17:d9:59:82:84:38:41:3d:46:69:03: 9b:54:ee:87:0a:9d:9d:75:21:f5:3c:fa:91:d9:6e: f3:2a:6d:14:d3:3a:be:2b:2a:63:37:bf:70:a6:cd: d2:62:de:9c:c3:dc:d5:09:2a:bc:78:59:2f:04:36: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:48:2B:5A:F4:93:73:43:67:B3:84:A0:7C:76:E8:66:59:69:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4f:80:d3:e3:b6:68:60:09:5c:f6:4e:22:54:4a:76:85:4f: 31:4a:bd:d8:57:af:68:12:b1:cb:23:c4:01:2d:1f:20:71:60: ee:90:aa:dd:69:3b:e8:d3:41:f5:96:af:54:1d:d5:a0:64:c6: 50:5e:42:7a:59:d6:17:94:de:12:a9:06:23:d7:8a:bf:63:8f: b3:ce:57:2b:19:f9:cc:02:bf:24:ce:f8:13:1f:33:c1:9e:e9: 3d:d6:77:88:69:55:e3:ff:e0:44:ba:38:43:ff:c2:b0:50:9d: 05:74:cf:dd:93:68:07:30:a3:9c:c2:ab:19:cc:39:1f:1f:81: 7a:66:35:78:e1:d0:5f:ec:61:6a:9d:3d:9e:97:93:bd:68:b7: 38:d9:36:d2:4e:63:f6:02:df:78:06:3b:dd:52:31:84:09:95: f6:bd:9b:ef:c2:67:13:c1:c3:17:0a:5b:2d:08:6a:f1:05:e0: 4b:dc:1a:52:1e:89:cc:a6:54:3f:52:9a:46:68:fa:bf:2c:cf: ac:c3:fe:af:80:66:f3:1d:7c:1b:56:0b:ef:ae:fc:53:6e:72: 55:7c:0a:8f:30:bc:98:00:66:35:05:77:bd:26:ed:76:14:69: c5:96:a6:5b:60:11:0c:2a:42:98:ae:2f:98:0f:e7:f4:8b:7d: 5c:e4:d8:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvypZe5IroTZXqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MGZiNjkwYjAtNWUzNS00NDViLWFmNDMtNWU0YzY3NWVkNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosgy4asJa+mOhwvVGobi+DpcLKeA+H14toHC /ck2hvYnqWeGXq2iHDemg+mtTSlKfqBFBSZz5w7kxfJW8j9MeXMjTufgUJ4h9xF/ bWngjcqRanYafUm/qxDElhfwPn48G5MhS7SZpeo8Q5pxKKqKpq4+3IkuN7iAS9lY FxVWQdkR1L0u0Z4NezpL0duTLm2Sgea9QR7PL3POcXhlO7XGik/sMP5SubiyBwVB jqpXzJlZzJpz4/hgeEdhABiiE1nnumzvSJkvF9lZgoQ4QT1GaQObVO6HCp2ddSH1 PPqR2W7zKm0U0zq+KypjN79wps3SYt6cw9zVCSq8eFkvBDY1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFASCta9JNzQ2ezhKB8duhmWWmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjJjODdkMjQtM2ZiNi0z YjZhLTgzNzEtZmI3NWRjNWI2M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhPgNPjtmhgCVz2TiJUSnaFTzFKvdhXr2gSscsjxAEtHyBxYO6Qqt1p O+jTQfWWr1Qd1aBkxlBeQnpZ1heU3hKpBiPXir9jj7POVysZ+cwCvyTO+BMfM8Ge 6T3Wd4hpVeP/4ES6OEP/wrBQnQV0z92TaAcwo5zCqxnMOR8fgXpmNXjh0F/sYWqd PZ6Xk71otzjZNtJOY/YC33gGO91SMYQJlfa9m+/CZxPBwxcKWy0IavEF4EvcGlIe icymVD9SmkZo+r8sz6zD/q+AZvMdfBtWC++u/FNuclV8Co8wvJgAZjUFd70m7XYU acWWpltgEQwqQpiuL5gP5/SLfVzk2EM= -----END CERTIFICATE-----Generated at Sun Apr 27 23:12:54 2025 by rpki-client