$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa File: cb2ce5ed-adbf-3c27-8560-b115662f08da.roa (raw, json) Hash identifier: oyjluk0zYteHTQV6TO/rb8tVFyU+WqzE5ne0shDhQ0Q= Subject key identifier: 3A:76:99:53:7D:AC:92:FC:03:0E:70:1F:EF:24:36:23:86:ED:20:46 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849DF5A7295A5141319918D6600 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 13445 IP address blocks: 173.243.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:72:95:a5:14:13:19:91:8d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=969bddaf-ad41-4c7a-b413-08d980cb25f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:20:01:5e:32:52:21:c8:de:59:04:06:3a: a0:fe:63:02:45:77:fd:86:f4:98:30:c2:ff:e4:d9: 02:0e:f9:91:da:02:d4:87:35:8a:08:b7:89:34:c8: cc:50:64:ab:9e:73:e3:e7:1e:d9:01:c3:94:61:a7: 10:31:58:28:2d:9e:8f:28:13:49:7f:a8:97:23:e1: 52:55:1a:6e:50:6d:8c:fc:70:0d:9a:15:3c:c2:62: f9:c2:c1:40:47:34:e8:47:3d:ae:34:9b:59:36:79: 88:af:24:7a:71:65:db:4c:a1:b4:43:6d:c9:4f:14: 8b:e2:2b:6c:61:74:51:6e:2b:67:31:8f:99:2f:f5: 02:61:3a:e9:6b:40:c9:58:f9:6b:b1:3f:ec:99:27: 5a:d4:ab:79:f8:76:d4:95:54:43:a2:9d:77:5b:78: a9:99:a2:47:e2:b3:b2:b4:83:27:31:00:dd:6b:20: ad:46:ef:bd:68:a4:14:8b:91:3c:51:1b:02:bb:8e: 27:56:84:2f:a5:13:bb:59:e1:d4:27:d3:94:85:3c: 49:10:8a:8f:37:e2:8b:9f:e5:65:03:2a:f4:62:0c: e0:10:24:9f:97:d6:7b:55:99:89:ce:09:0a:ec:9e: d9:60:ae:c7:39:a2:aa:d9:33:1b:59:73:8e:2e:4e: fe:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:76:99:53:7D:AC:92:FC:03:0E:70:1F:EF:24:36:23:86:ED:20:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 173.243.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:3c:c8:88:3d:c8:1a:7e:94:47:95:37:6a:b7:e2:d5:e9:45: bb:e2:25:89:b9:f6:4f:92:d5:72:16:a4:7e:12:d0:ee:f8:b1: 4e:33:65:66:03:e0:64:35:bf:7d:f1:5f:04:c1:ff:fe:73:bf: 36:e3:dc:dc:83:0b:e4:1f:15:ab:c0:af:57:99:02:bd:b0:1b: fa:a7:8c:ab:47:11:fd:fe:aa:da:5a:75:38:81:f7:f5:65:a6: b4:75:36:62:e6:ec:4b:e7:31:c1:0d:2d:e8:ee:8a:3b:e9:4d: 08:2f:3a:06:73:1d:45:0f:86:db:2a:12:8e:47:84:87:58:8d: 83:33:14:86:ef:1f:5b:bc:ad:93:c0:e2:94:0a:f0:98:84:10: cf:9e:f5:3b:a7:4f:04:94:a3:d5:c0:e9:20:2f:41:0c:79:3b: 58:4c:12:c4:d3:9e:e0:d3:fd:79:ba:b2:6d:71:77:1d:49:20: 3e:7b:b5:58:3f:73:20:17:94:95:9a:db:e5:5f:35:58:cd:aa: 33:f7:48:fa:2f:b4:ab:22:2d:6b:7a:74:c2:0c:3f:91:cb:6c: ca:5e:d7:e6:5d:85:96:77:52:90:9d:54:73:8a:87:da:c8:ed: 4e:60:32:15:5d:53:b8:96:c3:38:6c:1a:ae:22:5c:32:19:97: 4a:14:be:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnKVpRQTGZGNZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk OTY5YmRkYWYtYWQ0MS00YzdhLWI0MTMtMDhkOTgwY2IyNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38YgAV4yUiHI3lkEBjqg/mMCRXf9hvSYMML/ 5NkCDvmR2gLUhzWKCLeJNMjMUGSrnnPj5x7ZAcOUYacQMVgoLZ6PKBNJf6iXI+FS VRpuUG2M/HANmhU8wmL5wsFARzToRz2uNJtZNnmIryR6cWXbTKG0Q23JTxSL4its YXRRbitnMY+ZL/UCYTrpa0DJWPlrsT/smSda1Kt5+HbUlVRDop13W3ipmaJH4rOy tIMnMQDdayCtRu+9aKQUi5E8URsCu44nVoQvpRO7WeHUJ9OUhTxJEIqPN+KLn+Vl Ayr0YgzgECSfl9Z7VZmJzgkK7J7ZYK7HOaKq2TMbWXOOLk7+wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp2mVN9rJL8Aw5wH+8kNiOG7SBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2IyY2U1ZWQtYWRiZi0z YzI3LTg1NjAtYjExNTY2MmYwOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKw8yIg9yBp+lEeVN2q34tXpRbviJYm59k+S1XIWpH4S0O74sU4zZWYD 4GQ1v33xXwTB//5zvzbj3NyDC+QfFavAr1eZAr2wG/qnjKtHEf3+qtpadTiB9/Vl prR1NmLm7EvnMcENLejuijvpTQgvOgZzHUUPhtsqEo5HhIdYjYMzFIbvH1u8rZPA 4pQK8JiEEM+e9TunTwSUo9XA6SAvQQx5O1hMEsTTnuDT/Xm6sm1xdx1JID57tVg/ cyAXlJWa2+VfNVjNqjP3SPovtKsiLWt6dMIMP5HLbMpe1+ZdhZZ3UpCdVHOKh9rI 7U5gMhVdU7iWwzhsGq4iXDIZl0oUvhA= -----END CERTIFICATE-----Generated at Mon Jun 16 05:37:32 2025 by rpki-client