$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/816be7d2-db11-316b-809f-3169c82956d2.roa File: 816be7d2-db11-316b-809f-3169c82956d2.roa (raw, json) Hash identifier: CLwZgutVRX2CcVFXotETfnWL62PA9inoO4p9/WjbT/4= Subject key identifier: 13:D4:0B:E9:6F:D7:B3:FC:8E:24:30:CC:C9:73:D1:66:94:F1:4B:60 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848EDB0DA1D48FCD9987D158C80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/816be7d2-db11-316b-809f-3169c82956d2.roa Signing time: Tue 18 Feb 2025 23:29:48 +0000 ROA not before: Tue 18 Feb 2025 23:29:48 +0000 ROA not after: Mon 19 May 2025 22:29:48 +0000 asID: 14618 IP address blocks: 66.114.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:b0:da:1d:48:fc:d9:98:7d:15:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 18 23:29:48 2025 GMT Not After : May 19 22:29:48 2025 GMT Subject: CN=0a5a7478-4047-4de1-ad76-483ba4e06b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:57:0a:51:ee:6b:11:9a:c4:68:9a:c4:c2: f6:78:1a:a4:c4:d7:86:cb:eb:de:2f:ce:fc:98:17: 12:b2:92:31:83:cc:78:2e:36:c7:b6:3b:6c:42:3b: 5f:a7:8d:a9:4e:ab:3b:69:d2:a9:e7:9f:6f:fe:a2: 15:50:1e:66:45:06:97:18:ec:af:42:e7:65:a1:d3: 03:e5:3a:b1:1e:79:5a:13:a6:7e:20:6a:41:4b:6a: 46:b7:10:f5:87:41:44:66:fc:04:7b:02:fe:2f:7f: b5:16:b3:90:ad:76:a5:2c:e6:15:23:be:13:47:ea: ea:f6:25:90:19:f8:2c:da:af:8f:48:09:f1:ee:43: f1:fb:2c:65:4e:b2:87:52:57:20:da:84:fd:e7:6a: 8e:6a:f2:e1:04:c1:8e:71:86:5e:09:ec:58:53:a7: 90:a7:fd:a6:d8:62:af:bc:25:1b:c7:8b:93:77:9a: 71:df:8a:fe:d9:c7:31:b0:36:49:b1:6d:8f:47:b1: 0e:35:9a:7a:07:00:55:b2:dc:04:b5:0d:b7:6b:df: ac:fe:b2:29:0f:79:0b:22:a2:a2:00:3d:a9:9b:b2: 32:c3:b4:c1:62:c0:e6:93:14:c9:ee:bf:b8:0f:59: 82:13:93:b9:f1:50:ee:19:9f:29:62:8d:ad:3a:69: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:0B:E9:6F:D7:B3:FC:8E:24:30:CC:C9:73:D1:66:94:F1:4B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/816be7d2-db11-316b-809f-3169c82956d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 66.114.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:f5:6a:b2:00:df:dd:d3:b4:ff:68:41:04:88:80:91:d8:bf: 87:0c:d4:d9:82:81:b2:1f:f3:09:0a:91:2d:8f:d8:14:92:f5: 53:66:26:e4:b9:92:cf:48:44:3e:a5:6c:80:6b:b0:41:b7:08: 1f:45:28:03:6b:fd:b9:05:58:01:95:13:89:ad:ab:aa:37:5a: 99:db:28:af:31:e5:d2:ab:6b:3a:a3:a5:ba:03:84:e2:b1:2a: a6:6a:7b:78:33:69:8a:21:56:e0:ec:27:bb:47:4b:21:d6:43: b9:92:1b:b4:10:5f:4a:40:03:a6:3d:b6:8e:77:c6:14:6d:c4: f5:5b:08:ff:93:4f:99:f4:19:70:82:ef:36:7d:38:24:e1:99: 2a:9b:26:84:30:1f:82:53:56:70:c0:fa:45:c4:fa:8a:c2:68: 1e:62:c6:14:a6:30:7e:cc:ef:76:56:09:13:15:ac:0e:5f:32: ca:e4:38:62:f1:a5:1a:11:da:1b:fe:db:3a:53:a7:ff:c3:c0: 12:8a:86:f9:cc:3b:0b:ed:c9:9a:8e:cb:c5:a8:b6:ac:45:3f: b6:9e:23:02:9a:c8:9f:1f:f3:49:52:6d:5d:cd:ec:96:b2:2b: 67:e0:f4:7c:ce:7a:6f:93:46:3d:b1:c9:39:0e:a8:45:75:32: 09:23:10:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtsNodSPzZmH0VjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIxODIzMjk0OFoXDTI1MDUxOTIyMjk0OFowLzEtMCsGA1UEAxMk MGE1YTc0NzgtNDA0Ny00ZGUxLWFkNzYtNDgzYmE0ZTA2YjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIdXClHuaxGaxGiaxML2eBqkxNeGy+veL878 mBcSspIxg8x4LjbHtjtsQjtfp42pTqs7adKp559v/qIVUB5mRQaXGOyvQudlodMD 5TqxHnlaE6Z+IGpBS2pGtxD1h0FEZvwEewL+L3+1FrOQrXalLOYVI74TR+rq9iWQ Gfgs2q+PSAnx7kPx+yxlTrKHUlcg2oT952qOavLhBMGOcYZeCexYU6eQp/2m2GKv vCUbx4uTd5px34r+2ccxsDZJsW2PR7EONZp6BwBVstwEtQ23a9+s/rIpD3kLIqKi AD2pm7Iyw7TBYsDmkxTJ7r+4D1mCE5O58VDuGZ8pYo2tOmlvZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPUC+lv17P8jiQwzMlz0WaU8UtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvODE2YmU3ZDItZGIxMS0z MTZiLTgwOWYtMzE2OWM4Mjk1NmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMr1arIA393TtP9oQQSIgJHYv4cM1NmCgbIf8wkKkS2P2BSS9VNmJuS5 ks9IRD6lbIBrsEG3CB9FKANr/bkFWAGVE4mtq6o3WpnbKK8x5dKrazqjpboDhOKx KqZqe3gzaYohVuDsJ7tHSyHWQ7mSG7QQX0pAA6Y9to53xhRtxPVbCP+TT5n0GXCC 7zZ9OCThmSqbJoQwH4JTVnDA+kXE+orCaB5ixhSmMH7M73ZWCRMVrA5fMsrkOGLx pRoR2hv+2zpTp//DwBKKhvnMOwvtyZqOy8WotqxFP7aeIwKayJ8f80lSbV3N7Jay K2fg9HzOem+TRj2xyTkOqEV1MgkjEM8= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:07 2025 by rpki-client