$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa File: f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa (raw, json) Hash identifier: i6LBOAEaPXjojN2yI4hyGp05xr9PLw6CXp7SA8RfBP8= Subject key identifier: DA:4D:74:26:B6:7E:70:AD:85:10:E8:BE:79:90:1B:1F:C2:CB:CB:98 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849955F2490E405467E300B0B80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 13445 IP address blocks: 144.196.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:24:90:e4:05:46:7e:30:0b:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=73b8bfdf-3232-4a2b-9fa4-fbdb2838cde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:aa:99:c0:8a:e7:2d:59:d0:69:ac:6d:30: 50:79:f8:c6:ec:8a:5c:bd:af:36:9f:22:51:56:c1: 75:0d:dc:75:cd:2c:22:da:57:f0:5a:35:20:5e:cc: ed:4d:fd:89:08:46:48:e2:0c:ce:f8:15:cd:f6:fb: 97:6e:76:e0:2f:be:05:31:4d:fd:bf:c9:e6:25:2d: 38:21:8f:27:3c:d7:d5:7f:41:ee:53:dc:33:f4:fd: 31:dc:46:27:07:7a:f3:2d:b0:20:d9:bd:97:52:d9: be:57:02:5b:66:6f:f6:05:19:f1:a6:1b:7c:f6:79: 8b:aa:6a:15:a3:fd:8b:ac:4a:72:b7:16:87:63:d4: 2c:66:10:71:61:7c:d2:74:63:65:a3:86:85:6b:36: 9e:bd:21:e6:93:98:c6:d6:8d:b2:a3:45:fb:d2:21: 10:dd:e4:ab:ca:cd:23:b1:8e:1f:fc:1e:f3:c9:1b: 6a:2a:16:53:05:3f:dd:b7:81:6a:fe:26:9f:7c:df: 80:b9:91:59:a2:a0:98:6c:4d:fa:36:50:fe:91:4d: e3:12:3b:ec:d7:df:94:07:7d:6d:03:60:c6:00:4c: ca:b4:9b:77:39:f9:17:30:b8:c8:24:db:cf:95:39: 4c:0a:f9:3e:32:0f:f5:f2:f8:8b:e4:54:18:8e:1b: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4D:74:26:B6:7E:70:AD:85:10:E8:BE:79:90:1B:1F:C2:CB:CB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:67:e4:1d:f9:30:1f:34:90:11:7c:9a:5a:02:ba:9a:09:84: aa:fa:e6:f3:8a:53:04:b4:15:f9:75:8b:5d:c3:e1:82:14:1e: 2b:47:93:d1:b1:05:8f:87:35:b7:70:6a:5c:28:be:1f:d6:12: 76:44:07:b7:d1:45:30:68:29:9f:57:b4:b2:b6:f2:ae:e7:09: ee:23:8e:4a:10:0c:2c:e8:d1:e1:99:94:3c:95:8a:91:f4:b1: c4:c4:1b:b2:d2:97:22:7f:c8:06:bb:10:43:82:32:a0:22:ca: 26:f9:06:be:1b:ca:8e:b5:2b:a7:f9:d6:5f:51:31:52:f1:df: 2b:7c:b0:64:56:c6:65:4d:f9:eb:18:e9:74:5d:44:03:17:1a: ac:b3:87:6c:82:00:32:db:7e:0e:b7:e7:e1:03:b0:74:3f:0d: 4d:28:63:4f:28:92:80:a4:d9:45:d4:3c:5e:00:1e:32:af:ec: 43:99:82:bb:56:37:ba:b7:22:88:37:04:a6:c7:ba:90:ac:3e: 91:20:6d:d3:94:40:83:a8:92:6c:21:71:df:d5:ef:b3:b4:bb: f0:8e:34:87:80:66:ba:27:8b:48:7a:c1:d7:c6:41:13:44:97: e2:80:cb:80:bf:40:21:e5:76:f7:aa:10:64:2b:50:14:7c:7a: b2:29:b7:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXySQ5AVGfjALC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NzNiOGJmZGYtMzIzMi00YTJiLTlmYTQtZmJkYjI4MzhjZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L6qmcCK5y1Z0GmsbTBQefjG7Ipcva82nyJR VsF1Ddx1zSwi2lfwWjUgXsztTf2JCEZI4gzO+BXN9vuXbnbgL74FMU39v8nmJS04 IY8nPNfVf0HuU9wz9P0x3EYnB3rzLbAg2b2XUtm+VwJbZm/2BRnxpht89nmLqmoV o/2LrEpytxaHY9QsZhBxYXzSdGNlo4aFazaevSHmk5jG1o2yo0X70iEQ3eSrys0j sY4f/B7zyRtqKhZTBT/dt4Fq/iaffN+AuZFZoqCYbE36NlD+kU3jEjvs19+UB31t A2DGAEzKtJt3OfkXMLjIJNvPlTlMCvk+Mg/18viL5FQYjhuYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpNdCa2fnCthRDovnmQGx/Cy8uYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjQyZjg1ZGMtMmQ3Yy0z MTg3LWI3ZGEtNTlmN2JhNDk1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFn5B35MB80kBF8mloCupoJhKr65vOKUwS0Ffl1i13D4YIUHitHk9Gx BY+HNbdwalwovh/WEnZEB7fRRTBoKZ9XtLK28q7nCe4jjkoQDCzo0eGZlDyVipH0 scTEG7LSlyJ/yAa7EEOCMqAiyib5Br4byo61K6f51l9RMVLx3yt8sGRWxmVN+esY 6XRdRAMXGqyzh2yCADLbfg635+EDsHQ/DU0oY08okoCk2UXUPF4AHjKv7EOZgrtW N7q3Iog3BKbHupCsPpEgbdOUQIOokmwhcd/V77O0u/CONIeAZroni0h6wdfGQRNE l+KAy4C/QCHldveqEGQrUBR8erIpt9U= -----END CERTIFICATE-----Generated at Sun Apr 27 23:52:56 2025 by rpki-client