$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa File: cb2ce5ed-adbf-3c27-8560-b115662f08da.roa (raw, json) Hash identifier: jcIOLuQZj6w+ehXA5uxyJGIFDXLoAnSY2aFDlaCwzXk= Subject key identifier: 52:07:06:C0:78:10:2A:A2:F8:CF:E3:9F:B0:E0:AA:A7:51:A7:B5:45 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584AC016438761DB4DED6DC14100 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 13445 IP address blocks: 173.243.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:43:87:61:db:4d:ed:6d:c1:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=c758e81c-523d-4c0c-bd8c-46c50760df3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:b9:c4:cf:89:cf:71:c6:7f:2c:3d:42:15: cc:be:32:37:a6:4e:82:ec:c0:34:be:3e:0e:c5:1d: 68:a2:99:51:89:25:64:31:4c:df:fd:b9:c4:04:b1: 02:e4:e9:b2:d1:b9:12:f5:15:c9:e5:38:d1:a6:42: 5a:fb:3a:4d:a7:9e:f5:e0:1e:69:5b:22:1f:a2:fe: 03:ce:08:25:80:17:47:ee:cd:b8:34:30:97:d1:48: 18:3a:cd:6f:bf:73:3b:4b:6a:bb:01:c5:51:f8:b4: 40:e9:43:85:cb:4c:27:9c:dd:76:02:31:2d:e6:67: 31:ea:99:0b:59:cf:f5:47:0b:63:2b:f9:e5:4a:7f: 05:94:ca:62:24:18:c0:dd:4a:14:f4:c0:48:50:e3: 04:b8:61:cb:a0:9d:65:9c:4c:75:1b:88:f1:0c:bc: 66:b3:68:99:ad:a6:85:33:e3:e1:0a:81:c8:36:59: 4b:f0:8e:6a:82:83:75:e5:39:e0:c7:01:8a:f5:1f: 22:09:1b:1a:52:00:fa:6f:c2:42:5a:fe:5f:f6:cf: bc:2a:2e:4b:4d:58:16:12:f5:1f:71:31:14:81:3a: 6d:7f:ba:02:81:94:0a:04:69:0c:d9:53:16:5e:84: b7:5f:6c:cc:3c:3d:60:3f:68:b2:26:fc:52:d5:d7: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:07:06:C0:78:10:2A:A2:F8:CF:E3:9F:B0:E0:AA:A7:51:A7:B5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 173.243.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f6:46:46:05:65:32:54:d7:2c:3a:c4:4b:a4:e7:13:aa:00: f7:c7:a8:0a:b1:54:4a:0e:0b:11:49:10:08:80:67:b3:b5:74: 28:92:0d:e9:91:2a:97:8c:77:a8:3e:d3:1b:b1:6c:c7:00:e7: 5d:f3:e6:1e:9d:c8:f4:5f:75:27:46:0d:12:d4:26:6d:b2:e7: 0e:cb:3e:16:23:c3:ad:01:dc:3a:81:a8:78:12:d7:0d:17:03: 60:cd:b2:cd:24:e4:d7:2c:e3:d2:d7:d8:27:91:c3:dd:c0:64: 60:aa:c3:b0:25:30:a3:64:4b:5b:d7:42:b7:6f:7a:5b:8d:8c: e5:40:ce:16:31:14:77:da:63:bd:da:b6:19:3a:61:c0:5a:80: 64:6f:9e:d3:6f:55:34:1e:f8:44:dc:7b:06:1f:1d:3b:e9:6d: 4f:e2:4c:ba:6d:d3:2e:a7:db:fd:f5:07:0e:7b:cf:59:24:14: 75:60:f3:4c:c2:b6:31:41:92:84:a7:87:c6:92:fd:72:02:17: f9:af:c8:1c:22:d4:5c:9d:21:0a:69:32:84:47:9f:07:eb:6b: 43:04:1d:e2:c5:d4:71:e2:f9:c1:92:ad:f2:4f:ef:af:88:10: c2:28:8b:61:cd:b5:41:67:18:f2:1c:cd:a1:e5:bb:9f:f7:38: ae:4d:3d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkOHYdtN7W3BQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Yzc1OGU4MWMtNTIzZC00YzBjLWJkOGMtNDZjNTA3NjBkZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+G5xM+Jz3HGfyw9QhXMvjI3pk6C7MA0vj4O xR1ooplRiSVkMUzf/bnEBLEC5Omy0bkS9RXJ5TjRpkJa+zpNp5714B5pWyIfov4D zgglgBdH7s24NDCX0UgYOs1vv3M7S2q7AcVR+LRA6UOFy0wnnN12AjEt5mcx6pkL Wc/1RwtjK/nlSn8FlMpiJBjA3UoU9MBIUOMEuGHLoJ1lnEx1G4jxDLxms2iZraaF M+PhCoHINllL8I5qgoN15TngxwGK9R8iCRsaUgD6b8JCWv5f9s+8Ki5LTVgWEvUf cTEUgTptf7oCgZQKBGkM2VMWXoS3X2zMPD1gP2iyJvxS1deUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIHBsB4ECqi+M/jn7DgqqdRp7VFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2IyY2U1ZWQtYWRiZi0z YzI3LTg1NjAtYjExNTY2MmYwOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC32RkYFZTJU1yw6xEuk5xOqAPfHqAqxVEoOCxFJEAiAZ7O1dCiSDemR KpeMd6g+0xuxbMcA513z5h6dyPRfdSdGDRLUJm2y5w7LPhYjw60B3DqBqHgS1w0X A2DNss0k5Ncs49LX2CeRw93AZGCqw7AlMKNkS1vXQrdveluNjOVAzhYxFHfaY73a thk6YcBagGRvntNvVTQe+ETcewYfHTvpbU/iTLpt0y6n2/31Bw57z1kkFHVg80zC tjFBkoSnh8aS/XICF/mvyBwi1FydIQppMoRHnwfra0MEHeLF1HHi+cGSrfJP76+I EMIoi2HNtUFnGPIczaHlu5/3OK5NPdQ= -----END CERTIFICATE-----Generated at Thu Aug 7 01:09:51 2025 by rpki-client