$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/87b78743-99f6-35f8-bc43-759390adb71e.roa File: 87b78743-99f6-35f8-bc43-759390adb71e.roa (raw, json) Hash identifier: xbwj8P1eGrXY3ba5fgK+Ag7lWj+lUHCqZNcBSwhZZNQ= Subject key identifier: 5D:5F:32:C8:50:65:48:4B:BD:95:AE:E7:BF:F5:92:13:AD:0F:5A:C2 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848BBBB8297023666FF72A30780 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/87b78743-99f6-35f8-bc43-759390adb71e.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 13445 IP address blocks: 64.68.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:82:97:02:36:66:ff:72:a3:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=203eae2d-c25a-486f-b209-2e99705f9454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:67:87:80:5f:6d:a5:d5:5c:40:2d:45:38: 31:8b:e1:fe:76:10:79:49:cd:c4:1c:9b:64:7f:a8: 40:a9:6e:b5:e6:13:f1:c0:52:e1:7c:68:9b:0e:a5: e0:de:8c:2f:d8:a3:bd:07:39:ff:86:0d:ba:22:0a: 7b:cd:11:10:c0:b8:9c:11:f7:0a:8e:e7:37:a3:26: 65:c7:63:51:bf:42:4d:73:ab:05:77:f8:a4:be:a0: b2:b1:36:a6:4d:ee:18:2d:0a:a6:25:49:ca:69:19: f9:cb:07:05:a6:f1:bb:ea:4c:61:7e:8e:df:1a:02: df:2e:9b:3e:6c:83:18:90:00:8c:5a:a1:76:3d:1c: b1:8d:a9:89:65:82:d9:83:f2:01:17:79:95:27:08: f7:77:8e:88:4a:e1:20:7f:0d:52:c1:c8:38:7c:3b: fc:e4:99:49:1c:4d:99:6a:65:25:83:f9:1e:39:18: 53:36:5f:5b:db:47:be:43:58:29:24:66:2e:40:df: 4d:e0:ce:14:16:c7:8a:bf:5a:c2:5d:c2:5f:f0:59: f6:00:0e:e4:d0:17:ba:cb:82:12:50:e7:99:33:95: f8:b7:37:b3:05:b2:69:bb:8b:cf:6e:c8:29:ed:84: 00:cc:7b:c9:b7:40:03:b9:78:19:d4:d4:88:66:1e: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:32:C8:50:65:48:4B:BD:95:AE:E7:BF:F5:92:13:AD:0F:5A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/87b78743-99f6-35f8-bc43-759390adb71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 64.68.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d1:50:30:98:83:21:bf:34:a3:a8:1f:93:60:e2:86:e1:51: 75:b7:e4:a8:ee:cb:e9:1f:db:5b:c1:65:6e:9f:80:57:f3:31: 3a:ec:b5:0b:7d:94:5c:a2:f6:ce:31:03:08:de:ba:74:79:51: e6:47:4f:50:74:42:69:f1:2c:02:d7:f1:db:5c:c2:dd:89:bc: 09:a0:fa:57:21:ae:2e:3e:b3:30:7b:08:87:d9:48:e8:bc:21: 9e:67:96:ff:a9:9b:de:e3:a0:72:c6:02:b5:c0:f4:ae:57:04: 68:5e:89:3a:1c:19:54:34:74:e8:88:e0:98:ae:46:cd:34:62: 9f:ca:3d:4f:fc:4e:07:b0:4d:9e:45:f8:e4:89:b7:5c:fa:24: 7a:6e:4b:dd:a0:22:cf:9c:12:a5:38:33:43:0d:ee:b1:1a:a0: bd:43:04:a6:83:af:fc:11:19:b4:82:40:fe:f3:69:3d:ed:8d: 79:90:82:c6:fe:c7:ab:a9:a9:ab:f8:84:7b:94:66:66:11:7a: c2:eb:60:32:d1:a3:5b:27:52:25:7d:33:2c:ab:39:4f:5e:81: b6:3f:9d:38:e7:24:05:3c:e3:d8:d3:5b:88:e1:1d:93:5d:eb: 0b:b9:7a:11:98:1b:ec:5e:cd:75:6b:20:7b:a1:4c:d2:bd:af: 59:7f:a9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4KXAjZm/3KjB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MjAzZWFlMmQtYzI1YS00ODZmLWIyMDktMmU5OTcwNWY5NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWZnh4BfbaXVXEAtRTgxi+H+dhB5Sc3EHJtk f6hAqW615hPxwFLhfGibDqXg3owv2KO9Bzn/hg26Igp7zREQwLicEfcKjuc3oyZl x2NRv0JNc6sFd/ikvqCysTamTe4YLQqmJUnKaRn5ywcFpvG76kxhfo7fGgLfLps+ bIMYkACMWqF2PRyxjamJZYLZg/IBF3mVJwj3d46ISuEgfw1Swcg4fDv85JlJHE2Z amUlg/keORhTNl9b20e+Q1gpJGYuQN9N4M4UFseKv1rCXcJf8Fn2AA7k0Be6y4IS UOeZM5X4tzezBbJpu4vPbsgp7YQAzHvJt0ADuXgZ1NSIZh5/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1fMshQZUhLvZWu57/1khOtD1rCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvODdiNzg3NDMtOTlmNi0z NWY4LWJjNDMtNzU5MzkwYWRiNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQERgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXRUDCYgyG/NKOoH5Ng4obhUXW35Kjuy+kf21vBZW6fgFfzMTrstQt9 lFyi9s4xAwjeunR5UeZHT1B0QmnxLALX8dtcwt2JvAmg+lchri4+szB7CIfZSOi8 IZ5nlv+pm97joHLGArXA9K5XBGheiTocGVQ0dOiI4JiuRs00Yp/KPU/8TgewTZ5F +OSJt1z6JHpuS92gIs+cEqU4M0MN7rEaoL1DBKaDr/wRGbSCQP7zaT3tjXmQgsb+ x6upqav4hHuUZmYResLrYDLRo1snUiV9MyyrOU9egbY/nTjnJAU849jTW4jhHZNd 6wu5ehGYG+xezXVrIHuhTNK9r1l/qR8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:01 2025 by rpki-client