$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa File: b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa (raw, json) Hash identifier: oSF1+rlvVlrWQjY5x4eIzZAKLxgjksZV2QcLDLDhrJ0= Subject key identifier: C7:A2:55:E2:33:98:11:9A:12:A2:31:20:F2:B0:44:F1:65:10:12:71 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848BE862A3997904409962C6BE0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 13445 IP address blocks: 144.196.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2a:39:97:90:44:09:96:2c:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=290664ab-8407-4544-8171-23ec0de9ac79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:80:0e:20:58:a2:7f:0e:fe:55:a5:f7:2f:cc: 3c:03:0c:b1:2f:34:99:3f:6c:84:62:d3:50:a2:33: 3e:af:ad:fd:1b:3e:96:81:61:40:ab:eb:bc:de:86: d7:21:9a:32:ec:40:a4:fd:a8:8c:a7:c7:4c:da:ef: 64:9b:79:ad:56:be:f2:05:25:17:a0:64:8a:9e:6f: c6:79:2e:27:f8:a1:7f:8e:ce:c6:9e:73:c3:fb:55: ba:f3:e5:c5:a1:cd:3f:61:db:5d:13:98:76:ed:18: 23:6a:a5:5e:8c:41:a9:40:4b:d7:a5:13:66:f5:f1: de:0a:b2:2e:7b:8b:5d:46:2c:ae:10:c7:9a:bc:c9: c7:3f:6c:8a:65:33:bc:b2:c3:a5:43:19:36:8f:ff: 4d:db:92:4a:ac:3b:6b:3f:85:85:be:63:b1:a8:b6: 94:18:29:af:7a:d8:c7:c6:5a:73:a0:b0:79:93:8c: 85:84:cb:50:18:bb:bb:fe:5b:76:21:66:7e:fc:70: 84:1b:e9:ce:79:b2:67:56:bc:e6:d1:31:af:18:55: 80:9c:df:55:75:e2:00:75:d6:40:7c:b3:3b:4b:4c: 97:5a:58:9f:6c:cc:3d:3e:b2:3b:bc:b9:d0:ff:15: 99:df:f4:65:7c:b7:43:68:2b:69:c5:c5:95:e5:24: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:55:E2:33:98:11:9A:12:A2:31:20:F2:B0:44:F1:65:10:12:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:89:74:3e:72:f1:47:fc:50:1c:a0:a8:8d:9d:4d:ae:fd:24: fe:c5:01:60:11:17:e1:7d:69:ca:28:5f:a3:39:08:43:37:01: 32:31:00:e6:f0:9f:00:11:59:fb:b4:1f:d1:fd:7f:38:34:2d: 04:f1:0f:cc:31:e1:fd:16:25:74:ff:95:ee:de:c8:87:a3:7b: 6c:1c:89:b6:76:f8:7a:e5:85:a9:75:e3:5e:fd:f0:47:dd:b0: b1:b5:33:25:71:67:d9:a8:eb:ba:dc:e1:74:19:a6:98:a5:de: 04:6f:3b:93:f2:9b:dc:fc:dc:c6:6d:a8:51:03:e3:e1:1d:e8: 5b:5b:b2:13:e2:ce:fb:17:61:54:ef:ca:e0:9c:b4:b6:8f:fe: f2:4a:32:09:ff:7d:d7:d1:d9:2f:0e:bb:df:0d:b6:84:e2:e1: ef:91:e9:f0:56:0e:22:3c:ff:2d:a6:1d:57:88:99:39:18:28: 1b:e0:49:fe:d1:36:12:60:0a:96:f6:d4:b5:f7:c2:85:a4:aa: cb:bc:e8:3b:b3:77:02:82:c5:7e:22:5c:52:52:4d:f0:ec:d7: 66:1d:52:ec:73:50:ff:1d:be:c1:da:8d:0f:92:23:5c:2d:11: ee:79:38:4d:c4:b6:9e:63:bf:c2:2a:5c:1c:d4:b9:e3:3a:5e: 45:74:61:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hio5l5BECZYsa+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MjkwNjY0YWItODQwNy00NTQ0LTgxNzEtMjNlYzBkZTlhYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIAOIFiifw7+VaX3L8w8AwyxLzSZP2yEYtNQ ojM+r639Gz6WgWFAq+u83obXIZoy7ECk/aiMp8dM2u9km3mtVr7yBSUXoGSKnm/G eS4n+KF/js7GnnPD+1W68+XFoc0/YdtdE5h27RgjaqVejEGpQEvXpRNm9fHeCrIu e4tdRiyuEMeavMnHP2yKZTO8ssOlQxk2j/9N25JKrDtrP4WFvmOxqLaUGCmvetjH xlpzoLB5k4yFhMtQGLu7/lt2IWZ+/HCEG+nOebJnVrzm0TGvGFWAnN9VdeIAddZA fLM7S0yXWlifbMw9PrI7vLnQ/xWZ3/RlfLdDaCtpxcWV5SQZeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeiVeIzmBGaEqIxIPKwRPFlEBJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjJjODdkMjQtM2ZiNi0z YjZhLTgzNzEtZmI3NWRjNWI2M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyJdD5y8Uf8UBygqI2dTa79JP7FAWARF+F9acooX6M5CEM3ATIxAObw nwARWfu0H9H9fzg0LQTxD8wx4f0WJXT/le7eyIeje2wcibZ2+Hrlhal141798Efd sLG1MyVxZ9mo67rc4XQZppil3gRvO5Pym9z83MZtqFED4+Ed6FtbshPizvsXYVTv yuCctLaP/vJKMgn/fdfR2S8Ou98NtoTi4e+R6fBWDiI8/y2mHVeImTkYKBvgSf7R NhJgCpb21LX3woWkqsu86DuzdwKCxX4iXFJSTfDs12YdUuxzUP8dvsHajQ+SI1wt Ee55OE3Etp5jv8IqXBzUueM6XkV0YTs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:15 2025 by rpki-client