$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa File: 574e841f-42ab-3391-8e83-8d72c3a905d3.roa (raw, json) Hash identifier: S3ZxhChIQ5M33IHhLkg7HD8F9oRKXtNGRSBQe3esUXs= Subject key identifier: CB:6B:AE:79:BF:58:CB:3D:B3:59:D0:71:49:0D:98:46:2C:64:84:05 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858491AA6D1EE64EEDFD0D7509740 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 163.129.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d1:ee:64:ee:df:d0:d7:50:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=c2d96f98-9ae9-4280-b2c6-afae5199472c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:1c:27:68:cd:63:d2:b9:8b:da:2e:f8:48: c3:88:b3:be:75:f9:f1:f2:47:97:2e:08:d4:31:c3: 44:6d:a1:5a:08:3c:78:2b:e4:e8:ac:08:56:4f:26: af:e1:b1:29:a7:34:0d:c4:db:60:ef:06:a1:d5:97: 52:4c:d9:87:66:e1:be:51:77:32:44:aa:17:06:bc: 9f:b0:5b:f3:1e:9d:e2:3d:22:09:c7:b5:2b:7c:8f: 46:59:40:62:ca:bd:e0:95:9d:79:f8:b2:e8:7b:f3: 84:e0:0b:ef:7b:d7:a5:24:a0:80:66:78:4e:16:11: 86:2a:75:78:f9:9c:f2:fe:d9:ea:28:0a:53:3e:1d: f8:6c:02:21:3c:57:50:b4:3a:69:33:f1:cd:f6:58: 18:28:4f:03:63:b4:de:1c:ff:0f:87:bb:a0:3c:1b: ce:bd:4b:95:64:75:da:ca:66:ae:ec:8b:78:2f:a5: d8:0d:d1:27:a5:23:49:32:18:9a:29:d6:b2:25:32: 98:bd:67:49:ba:4a:a2:d6:40:68:fc:a4:8b:f9:a4: 77:ab:c5:39:7d:3e:61:28:ad:cf:15:cd:fd:50:bf: 4a:3b:d8:51:84:bb:f5:f2:7d:fa:02:ad:1c:56:96: 80:06:5e:4e:5c:fb:31:7b:7a:99:93:80:e9:50:b0: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6B:AE:79:BF:58:CB:3D:B3:59:D0:71:49:0D:98:46:2C:64:84:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:19:0e:1c:49:89:e3:b7:c5:54:cd:d5:b2:60:fd:df:89:a3: 6a:db:de:c1:30:2a:a7:74:b4:66:73:d2:03:97:46:36:91:dd: 5d:05:6a:e4:25:13:67:d6:8a:0d:e8:e8:f9:bb:e3:e3:52:2d: 55:9d:f4:e9:ee:86:55:44:81:8f:1d:b5:6a:37:85:16:89:26: 9b:70:16:e0:77:b6:5c:65:f5:b1:e0:35:ea:7c:5a:da:69:ab: 62:7e:c1:a3:8d:19:77:9a:4d:82:1b:a7:21:79:1b:c7:87:7a: 51:b4:e4:13:c4:db:b8:7f:20:df:ce:78:a7:2d:77:1b:65:5e: 9d:74:48:91:71:7d:2c:17:de:20:13:c9:bc:f1:52:55:b3:24: 62:32:6d:dd:07:d2:12:bd:5b:9d:17:74:a6:62:66:98:11:34: 50:46:39:fc:7e:e2:b3:df:1e:02:60:21:32:1f:05:3a:a1:74: af:b3:bb:1a:2f:38:a7:4d:ed:d4:9b:dc:c6:31:a4:32:2a:a7: 9b:55:e9:af:7e:b8:6e:f8:c4:28:73:4e:b2:b2:5f:62:0e:8d: 3d:1f:9a:83:4b:90:f7:d3:dc:13:bc:3d:b8:12:6d:fb:95:07: 2a:e9:c4:f5:47:aa:23:55:1f:22:15:f6:42:d2:c1:f3:34:2f: 94:f3:03:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaptHuZO7f0NdQl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YzJkOTZmOTgtOWFlOS00MjgwLWIyYzYtYWZhZTUxOTk0NzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb8cJ2jNY9K5i9ou+EjDiLO+dfnx8keXLgjU McNEbaFaCDx4K+TorAhWTyav4bEppzQNxNtg7wah1ZdSTNmHZuG+UXcyRKoXBryf sFvzHp3iPSIJx7UrfI9GWUBiyr3glZ15+LLoe/OE4Avve9elJKCAZnhOFhGGKnV4 +Zzy/tnqKApTPh34bAIhPFdQtDppM/HN9lgYKE8DY7TeHP8Ph7ugPBvOvUuVZHXa ymau7It4L6XYDdEnpSNJMhiaKdayJTKYvWdJukqi1kBo/KSL+aR3q8U5fT5hKK3P Fc39UL9KO9hRhLv18n36Aq0cVpaABl5OXPsxe3qZk4DpULAB6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtrrnm/WMs9s1nQcUkNmEYsZIQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNTc0ZTg0MWYtNDJhYi0z MzkxLThlODMtOGQ3MmMzYTkwNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYZDhxJieO3xVTN1bJg/d+Jo2rb3sEwKqd0tGZz0gOXRjaR3V0FauQl E2fWig3o6Pm74+NSLVWd9OnuhlVEgY8dtWo3hRaJJptwFuB3tlxl9bHgNep8Wtpp q2J+waONGXeaTYIbpyF5G8eHelG05BPE27h/IN/OeKctdxtlXp10SJFxfSwX3iAT ybzxUlWzJGIybd0H0hK9W50XdKZiZpgRNFBGOfx+4rPfHgJgITIfBTqhdK+zuxov OKdN7dSb3MYxpDIqp5tV6a9+uG74xChzTrKyX2IOjT0fmoNLkPfT3BO8PbgSbfuV ByrpxPVHqiNVHyIV9kLSwfM0L5TzA20= -----END CERTIFICATE-----Generated at Fri Mar 14 13:56:41 2025 by rpki-client