$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa File: f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa (raw, json) Hash identifier: WD2qgkelD4qC7q5aOCG4CcQqgA7VQt6i1mch7y5vw0A= Subject key identifier: 45:22:13:FA:10:5A:6A:D4:EF:D7:36:53:5E:48:76:F7:FF:F7:0E:53 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858499DBF2EBA91E82CFC7901D180 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 13445 IP address blocks: 144.196.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2e:ba:91:e8:2c:fc:79:01:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=3d50f9cb-7754-45e4-8220-76f18d878eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:78:08:bf:e0:d6:84:b9:a9:82:4b:5a:9e: 72:2e:da:83:00:3b:b5:12:db:6c:a0:09:86:00:f8: 2b:e8:86:47:30:a4:cb:42:ad:f9:75:ab:d5:7f:5a: ce:31:0b:2e:bd:ad:cb:ab:d0:93:7f:c3:81:e5:dd: 59:87:b1:a4:03:43:0d:73:22:ff:95:ce:b7:54:03: 07:4c:8f:b6:6c:ee:39:5f:a5:a9:c6:97:fc:77:1d: 7e:be:c5:bd:02:d6:bd:34:65:04:fe:6c:76:27:0e: f9:53:ce:01:20:07:1f:33:89:42:0c:34:e2:9f:08: 67:f5:fc:31:64:b5:64:3a:39:25:bc:f4:36:87:77: f0:13:50:e2:69:5a:7a:8a:74:27:27:08:0e:8d:0e: 08:53:cd:b4:68:59:4c:8b:5e:8d:fe:5d:5c:92:82: ce:c5:45:d3:21:d5:12:97:6c:74:82:f0:0a:41:3b: 40:fa:1b:9e:6e:56:65:99:c7:8c:e7:53:9e:8d:d9: c7:1a:e7:c5:bd:c2:43:bf:15:8c:27:2a:b3:8b:42: 19:bf:5e:45:09:9b:a6:c5:31:ea:22:65:0a:1f:3d: 3e:a7:ec:08:6f:4d:b9:ca:b0:b6:2d:6a:e0:55:95: 13:1c:ad:f0:61:8d:b8:7d:32:c8:5b:dc:86:7a:db: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:22:13:FA:10:5A:6A:D4:EF:D7:36:53:5E:48:76:F7:FF:F7:0E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a7:94:b9:a8:54:d8:e1:09:f4:6d:71:9f:0b:bd:ba:25:ce: 0a:f2:3f:74:15:80:11:18:26:14:82:3e:34:31:7f:64:e0:23: ce:07:e2:5a:5e:66:cb:48:ff:3d:e4:67:fb:f4:0c:e8:c2:2d: fb:73:b7:16:8c:b1:29:ff:d9:7e:74:5e:24:5c:06:bd:8f:f5: c9:f4:06:c2:7b:26:f7:d6:b1:50:c8:7b:6b:b4:32:26:5a:0b: 46:a6:0b:1e:61:67:78:3c:6f:e3:51:db:7f:d3:63:ba:2a:9f: ae:cb:61:b0:c9:ae:dc:00:41:4b:d7:10:e7:de:3c:7b:3c:01: 2f:9f:df:24:10:18:7e:15:db:67:40:c4:64:eb:0b:43:8b:f6: 80:46:0a:6b:48:89:a7:08:1b:de:b7:e7:6e:be:8a:f8:fb:ad: 22:02:2a:42:bc:20:16:e1:11:1b:6e:35:14:23:2c:d6:7b:03: ba:9f:c5:87:aa:3f:f9:7d:50:7c:dc:7c:fb:d0:f8:56:43:5a: 64:25:96:92:d2:a7:cc:82:07:48:5a:01:92:56:32:64:ef:c4: a8:8b:0a:f3:78:be:b2:de:bd:08:a8:cb:46:11:72:07:b8:6c: 4e:1c:83:36:9a:e3:56:4f:27:55:3b:53:6e:ca:f7:59:97:26: c0:35:8f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvy66kegs/HkB0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk M2Q1MGY5Y2ItNzc1NC00NWU0LTgyMjAtNzZmMThkODc4ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw794CL/g1oS5qYJLWp5yLtqDADu1EttsoAmG APgr6IZHMKTLQq35davVf1rOMQsuva3Lq9CTf8OB5d1Zh7GkA0MNcyL/lc63VAMH TI+2bO45X6Wpxpf8dx1+vsW9Ata9NGUE/mx2Jw75U84BIAcfM4lCDDTinwhn9fwx ZLVkOjklvPQ2h3fwE1DiaVp6inQnJwgOjQ4IU820aFlMi16N/l1ckoLOxUXTIdUS l2x0gvAKQTtA+hueblZlmceM51OejdnHGufFvcJDvxWMJyqzi0IZv15FCZumxTHq ImUKHz0+p+wIb025yrC2LWrgVZUTHK3wYY24fTLIW9yGetucQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUiE/oQWmrU79c2U15Idvf/9w5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjkwNTk4YWQtN2RmNC0z OWU5LWI0MDUtZDcwZWI2OGM2ZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2nlLmoVNjhCfRtcZ8LvbolzgryP3QVgBEYJhSCPjQxf2TgI84H4lpe ZstI/z3kZ/v0DOjCLftztxaMsSn/2X50XiRcBr2P9cn0BsJ7JvfWsVDIe2u0MiZa C0amCx5hZ3g8b+NR23/TY7oqn67LYbDJrtwAQUvXEOfePHs8AS+f3yQQGH4V22dA xGTrC0OL9oBGCmtIiacIG963526+ivj7rSICKkK8IBbhERtuNRQjLNZ7A7qfxYeq P/l9UHzcfPvQ+FZDWmQllpLSp8yCB0haAZJWMmTvxKiLCvN4vrLevQioy0YRcge4 bE4cgzaa41ZPJ1U7U27K91mXJsA1j2Q= -----END CERTIFICATE-----Generated at Mon Apr 28 00:58:37 2025 by rpki-client