$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa File: 5cf198cc-9135-342f-8d0b-2253ba576eac.roa (raw, json) Hash identifier: BQ679Um8FPOBF72Gzfg91ZGBntpE9tsIBFZuxVizyYk= Subject key identifier: B2:A3:1C:AC:42:88:E2:ED:07:41:55:77:9C:80:CF:D3:2C:76:50:A0 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858491AA6D20B1FAA8061A93051E0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 36692 IP address blocks: 163.129.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d2:0b:1f:aa:80:61:a9:30:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=23a99b52-7913-40c6-8860-41b41eb5cd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:fb:01:85:4f:62:ff:bf:1f:2d:50:d5:62: 0f:1a:c0:c8:04:f4:1a:5b:09:28:77:98:05:f2:59: e7:3c:33:52:ba:c3:83:dd:6e:c2:ab:b0:c3:31:a9: 6b:2e:f0:32:40:64:5d:b9:1a:d1:9f:d1:bc:94:d6: c2:ca:9c:1a:74:f9:6d:5d:fb:7c:f8:1c:a3:c1:bf: fa:f0:5c:0c:b5:04:00:80:7a:19:ef:36:73:a7:be: 53:d4:d7:ca:70:8f:04:fc:27:94:74:e9:2e:e3:a1: c3:18:58:c7:70:d4:88:4a:e7:7d:50:1a:42:6c:01: 2b:e4:b1:04:19:43:ee:7d:be:5c:65:2d:52:00:15: ac:07:49:8b:66:17:fe:84:86:02:24:e2:34:44:30: df:62:27:c4:66:d1:5b:4f:01:3e:bd:00:cf:ff:f0: 40:19:a0:8e:6d:96:9f:09:43:b3:6a:05:18:51:48: e6:70:38:70:d4:d1:46:b8:58:f2:1c:11:7b:4e:11: a0:fb:15:7f:60:b7:32:99:de:27:8f:3c:6e:fb:5b: 28:24:bd:ca:12:30:f6:a2:72:45:6b:be:eb:af:3b: 4d:f3:80:b8:b2:35:6c:40:6c:e5:11:ff:dc:41:7c: 38:12:93:13:a7:27:3c:92:36:a8:e1:ba:4e:fd:f4: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:1C:AC:42:88:E2:ED:07:41:55:77:9C:80:CF:D3:2C:76:50:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:16:74:54:32:4c:7e:8d:c4:ce:f3:04:fb:38:af:74:fc:63: 04:e3:ce:04:c0:9d:51:b5:08:4f:df:e8:7d:46:33:cf:7c:52: 7d:ee:80:2d:6f:fc:0a:6d:b9:94:aa:67:25:e7:eb:4d:67:7c: fd:ea:22:bc:f8:53:f0:9d:23:39:0d:60:a2:87:6d:63:bc:cc: 3b:02:9f:02:17:33:e3:7d:54:34:9e:b0:75:e7:33:69:d8:70: 0a:35:47:b8:4e:f9:8b:c5:4d:b3:1f:8e:82:60:26:c7:56:20: 5b:e3:4d:07:38:b7:1e:5d:b7:c2:2a:43:b8:27:55:db:9f:86: e9:09:af:17:7c:66:fb:e4:81:03:d6:ed:ed:ea:52:7a:15:17: ce:42:b4:81:ce:6d:74:5d:8c:76:f1:98:42:5b:f2:bc:d9:a3: bf:9f:e6:67:96:5a:56:c9:6d:d8:3b:c8:14:e0:fc:41:10:d0: 0e:61:4d:2d:2b:9e:d2:29:3e:27:50:01:b5:b4:4f:b8:15:61: 25:84:e1:95:b8:c0:0b:59:36:db:9d:aa:d7:8f:68:5c:71:f7: 9d:23:92:f3:f7:b4:88:4f:17:49:db:64:0c:9f:78:0c:82:95: 7c:6b:d9:ff:e6:0d:12:79:70:39:1a:94:5f:89:e0:33:08:03: 19:61:a4:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaptILH6qAYakwUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MjNhOTliNTItNzkxMy00MGM2LTg4NjAtNDFiNDFlYjVjZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7X7AYVPYv+/Hy1Q1WIPGsDIBPQaWwkod5gF 8lnnPDNSusOD3W7Cq7DDMalrLvAyQGRduRrRn9G8lNbCypwadPltXft8+Byjwb/6 8FwMtQQAgHoZ7zZzp75T1NfKcI8E/CeUdOku46HDGFjHcNSISud9UBpCbAEr5LEE GUPufb5cZS1SABWsB0mLZhf+hIYCJOI0RDDfYifEZtFbTwE+vQDP//BAGaCObZaf CUOzagUYUUjmcDhw1NFGuFjyHBF7ThGg+xV/YLcymd4njzxu+1soJL3KEjD2onJF a77rrztN84C4sjVsQGzlEf/cQXw4EpMTpyc8kjao4bpO/fSlswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKjHKxCiOLtB0FVd5yAz9MsdlCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNWNmMTk4Y2MtOTEzNS0z NDJmLThkMGItMjI1M2JhNTc2ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcWdFQyTH6NxM7zBPs4r3T8YwTjzgTAnVG1CE/f6H1GM898Un3ugC1v /AptuZSqZyXn601nfP3qIrz4U/CdIzkNYKKHbWO8zDsCnwIXM+N9VDSesHXnM2nY cAo1R7hO+YvFTbMfjoJgJsdWIFvjTQc4tx5dt8IqQ7gnVdufhukJrxd8ZvvkgQPW 7e3qUnoVF85CtIHObXRdjHbxmEJb8rzZo7+f5meWWlbJbdg7yBTg/EEQ0A5hTS0r ntIpPidQAbW0T7gVYSWE4ZW4wAtZNtudqtePaFxx950jkvP3tIhPF0nbZAyfeAyC lXxr2f/mDRJ5cDkalF+J4DMIAxlhpMs= -----END CERTIFICATE-----Generated at Sun Apr 6 01:12:16 2025 by rpki-client