$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa File: dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa (raw, json) Hash identifier: naxes5r7W0CZsgtoBl8qA0OwoP7PKEJtRJTrPEagnVY= Subject key identifier: D5:B0:52:DA:F8:75:CC:16:F8:67:35:01:F4:FB:94:1A:33:08:06:50 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849DF5A784CC5A71AFDBD5A0E80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 13445 IP address blocks: 216.151.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:78:4c:c5:a7:1a:fd:bd:5a:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=101dc2ae-0c22-4445-8551-8b1aa4577c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1c:f1:a4:ab:7b:e9:0f:f8:2e:7c:ba:a5:39: 64:9c:bc:3d:cd:86:b0:a2:a0:2d:49:ae:5b:5d:32: 2a:7c:01:c4:26:56:84:58:10:2c:df:dc:77:02:12: ae:31:c1:ed:a4:10:a8:6d:ee:44:2c:e2:ac:82:5f: 61:fa:0e:99:18:8e:1b:55:a6:21:09:b9:b9:91:35: e9:a3:4c:cf:d5:88:10:65:94:8b:de:09:9c:4c:7f: 47:c7:51:68:e3:03:f2:d3:a4:01:aa:dc:ae:3d:23: ea:fe:25:5b:ad:10:8c:2d:c0:58:aa:e7:96:7a:00: 5d:84:e2:78:31:40:6e:3c:e2:b0:dd:20:39:5c:42: 64:da:60:70:c7:b5:84:df:08:cd:82:e4:1f:30:9e: 17:06:75:b8:45:1f:83:2e:f6:58:03:1b:a7:5a:b8: 0d:6c:d6:86:89:2a:e4:45:27:ac:55:2b:76:df:fd: 35:24:43:e0:13:5a:14:0f:bb:55:e2:16:e5:fa:a1: c5:7d:f5:5a:8a:24:6b:8b:25:a4:6d:26:61:ec:ea: e7:ee:a9:5c:25:e8:ad:29:cb:9e:9e:05:75:db:6c: cc:78:41:0a:3a:02:70:88:bb:75:39:55:12:05:3b: f9:22:fc:23:a3:cc:83:05:63:d5:5d:ff:c4:3a:80: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:52:DA:F8:75:CC:16:F8:67:35:01:F4:FB:94:1A:33:08:06:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 216.151.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:93:27:ca:83:99:5b:85:c6:41:e4:10:69:39:14:d8:ee:8b: 16:76:f9:f4:7e:6a:62:84:4f:36:91:4c:93:07:1f:ef:69:6f: 2b:dd:e6:24:27:27:7d:ec:76:7b:49:d1:be:01:bb:a5:fd:eb: 45:13:df:63:44:e8:5b:91:f6:ed:69:37:f0:77:01:45:d5:3e: 05:88:70:59:9f:f5:79:68:48:f5:c1:90:48:36:90:2a:aa:bf: 16:91:c0:2c:48:59:45:83:f9:38:a9:b0:c5:c9:d6:53:c9:e7: a0:37:0c:f0:e0:b1:28:e6:c7:c7:54:31:07:20:2b:7f:80:1d: bf:2a:8b:79:4d:c5:f1:bc:c9:a5:ac:ac:71:42:c8:76:e2:31: da:83:6a:7e:0e:88:47:a5:4b:e6:07:d9:ed:3b:bd:12:a2:d1: 22:65:d2:bd:69:5e:70:a7:93:f0:93:7f:83:a4:9d:e5:04:06: a5:64:ac:44:69:c2:50:c6:52:52:0a:a5:e2:5d:f7:ad:d0:ed: 98:82:aa:a5:f3:a0:96:71:f7:8c:0a:79:a9:f6:55:a5:ba:ff: bb:9b:88:ee:c5:82:57:ba:ee:3c:82:26:ff:39:dc:ab:ae:cc: 4e:3d:5e:7d:95:5a:9f:ca:dc:4c:3a:9e:cb:6b:c0:b4:2e:ac: 94:04:da:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnhMxaca/b1aDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTAxZGMyYWUtMGMyMi00NDQ1LTg1NTEtOGIxYWE0NTc3Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRzxpKt76Q/4Lny6pTlknLw9zYawoqAtSa5b XTIqfAHEJlaEWBAs39x3AhKuMcHtpBCobe5ELOKsgl9h+g6ZGI4bVaYhCbm5kTXp o0zP1YgQZZSL3gmcTH9Hx1Fo4wPy06QBqtyuPSPq/iVbrRCMLcBYqueWegBdhOJ4 MUBuPOKw3SA5XEJk2mBwx7WE3wjNguQfMJ4XBnW4RR+DLvZYAxunWrgNbNaGiSrk RSesVSt23/01JEPgE1oUD7tV4hbl+qHFffVaiiRriyWkbSZh7Orn7qlcJeitKcue ngV122zMeEEKOgJwiLt1OVUSBTv5Ivwjo8yDBWPVXf/EOoBt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWwUtr4dcwW+Gc1AfT7lBozCAZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZGM4ODBkMmMtOGNlYi0z Y2I0LTlkZjgtNjQ1NTc1M2IxY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2JeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCTJ8qDmVuFxkHkEGk5FNjuixZ2+fR+amKETzaRTJMHH+9pbyvd5iQn J33sdntJ0b4Bu6X960UT32NE6FuR9u1pN/B3AUXVPgWIcFmf9XloSPXBkEg2kCqq vxaRwCxIWUWD+TipsMXJ1lPJ56A3DPDgsSjmx8dUMQcgK3+AHb8qi3lNxfG8yaWs rHFCyHbiMdqDan4OiEelS+YH2e07vRKi0SJl0r1pXnCnk/CTf4OkneUEBqVkrERp wlDGUlIKpeJd963Q7ZiCqqXzoJZx94wKean2VaW6/7ubiO7Fgle67jyCJv853Kuu zE49Xn2VWp/K3Ew6nstrwLQurJQE2m0= -----END CERTIFICATE-----Generated at Sun Jun 15 16:03:29 2025 by rpki-client