$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b5538f10-b353-3fb6-878d-7e2200f45766.roa File: b5538f10-b353-3fb6-878d-7e2200f45766.roa (raw, json) Hash identifier: bs+p5cnZd2SRK/S8FX+VghIRMhD7+ca0rBSSsnc2OLE= Subject key identifier: 56:3A:9D:34:EF:E2:BD:B8:CA:17:E5:31:C1:64:4A:89:64:C6:1E:66 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858493DB12D9F44EBE078BAEDA740 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b5538f10-b353-3fb6-878d-7e2200f45766.roa Signing time: Wed 19 Mar 2025 15:15:08 +0000 ROA not before: Wed 19 Mar 2025 15:15:08 +0000 ROA not after: Tue 17 Jun 2025 15:15:08 +0000 asID: 13445 IP address blocks: 144.196.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3d:b1:2d:9f:44:eb:e0:78:ba:ed:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Mar 19 15:15:08 2025 GMT Not After : Jun 17 15:15:08 2025 GMT Subject: CN=2c5fb809-5be3-4dd6-8fa8-7e74cd4e3d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:06:6c:24:a6:c6:6d:3d:01:e9:57:a0:69: 1c:64:e2:34:ee:a5:09:57:34:8c:45:14:fd:32:4d: 3d:5e:d7:0f:09:51:d9:f3:c3:69:b4:8f:80:66:ae: 3e:35:d4:31:1d:57:3b:85:38:59:8e:d3:e5:61:1c: e7:e9:ad:6e:9d:c4:d7:97:5f:95:e6:ba:cf:55:6a: cd:75:3b:cb:c7:00:90:29:d5:18:c5:99:33:64:52: 1d:12:07:e8:5c:0c:03:db:14:31:34:1d:64:42:95: f7:1d:5e:48:e0:ac:dd:41:f8:11:5f:1e:5b:f1:ec: 21:b3:be:6b:bd:66:3e:0c:26:a5:53:c8:5d:0c:94: f0:68:38:c7:79:78:97:69:44:2a:d2:3b:ac:d9:52: ee:44:18:04:b2:6f:c1:1c:aa:3a:f7:00:ee:a6:ae: 9a:5d:dc:1e:cb:00:85:f1:47:17:3c:78:1f:07:1c: a1:ba:f7:84:90:e8:ba:a0:8c:b7:2c:76:78:eb:03: 20:6f:8f:67:4f:3e:ca:c9:fd:ca:d5:7b:1c:81:91: f0:dd:cf:62:8c:bd:26:aa:35:fc:60:88:cf:b7:39: 34:aa:66:16:2e:fc:bf:3e:af:51:8b:d2:f8:08:0f: 55:09:bb:bc:c4:00:cb:2f:bd:46:d3:5a:9c:12:f6: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3A:9D:34:EF:E2:BD:B8:CA:17:E5:31:C1:64:4A:89:64:C6:1E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b5538f10-b353-3fb6-878d-7e2200f45766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:29:ff:5f:20:43:f4:6e:05:c1:7c:21:98:d8:bd:2d:3a:e3: fd:c8:d9:57:f5:47:cb:b2:50:94:55:0d:3b:e7:63:d0:52:d0: 9c:3f:a0:da:7a:ea:08:f0:08:ea:45:eb:92:c8:1e:8b:a2:f7: d7:9b:2b:93:83:b7:11:f9:c0:30:94:34:79:76:5f:09:18:b9: 0a:e6:0b:13:f7:4c:85:7e:e6:1c:7c:87:dd:c8:6f:79:f7:94: 89:15:e8:99:75:1f:b3:cc:ce:c9:36:2b:60:67:65:f6:82:d8: ef:31:5b:b2:3e:d2:14:01:0e:6b:a0:54:d8:57:db:80:8e:77: 83:ee:8f:0c:72:90:7e:66:c5:84:a7:db:23:1a:69:2f:94:3f: 23:e7:9d:9b:9d:d3:e5:ac:da:be:64:28:a9:fa:4f:11:63:39: fa:f2:d9:b4:0f:ec:6e:84:80:52:06:1e:05:8c:dd:19:e4:5b: 76:66:64:c8:03:a5:5c:92:05:b3:52:6c:1a:76:31:2d:50:19: da:7b:17:a2:d7:3e:0b:b2:70:94:fc:2d:89:06:3b:64:c7:b1: a5:e2:8b:15:90:46:95:9c:05:3b:31:2e:65:2b:68:d5:fd:39: 02:63:1f:be:c9:92:3f:07:3c:18:f6:31:2e:50:3c:8b:f3:94: f3:27:9d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk9sS2fROvgeLrtp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDMxOTE1MTUwOFoXDTI1MDYxNzE1MTUwOFowLzEtMCsGA1UEAxMk MmM1ZmI4MDktNWJlMy00ZGQ2LThmYTgtN2U3NGNkNGUzZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/MGbCSmxm09AelXoGkcZOI07qUJVzSMRRT9 Mk09XtcPCVHZ88NptI+AZq4+NdQxHVc7hThZjtPlYRzn6a1uncTXl1+V5rrPVWrN dTvLxwCQKdUYxZkzZFIdEgfoXAwD2xQxNB1kQpX3HV5I4KzdQfgRXx5b8ewhs75r vWY+DCalU8hdDJTwaDjHeXiXaUQq0jus2VLuRBgEsm/BHKo69wDupq6aXdweywCF 8UcXPHgfBxyhuveEkOi6oIy3LHZ46wMgb49nTz7Kyf3K1XscgZHw3c9ijL0mqjX8 YIjPtzk0qmYWLvy/Pq9Ri9L4CA9VCbu8xADLL71G01qcEvagpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY6nTTv4r24yhflMcFkSolkxh5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjU1MzhmMTAtYjM1My0z ZmI2LTg3OGQtN2UyMjAwZjQ1NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkMR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEp/18gQ/RuBcF8IZjYvS064/3I2Vf1R8uyUJRVDTvnY9BS0Jw/oNp6 6gjwCOpF65LIHoui99ebK5ODtxH5wDCUNHl2XwkYuQrmCxP3TIV+5hx8h93Ib3n3 lIkV6Jl1H7PMzsk2K2BnZfaC2O8xW7I+0hQBDmugVNhX24COd4PujwxykH5mxYSn 2yMaaS+UPyPnnZud0+Ws2r5kKKn6TxFjOfry2bQP7G6EgFIGHgWM3RnkW3ZmZMgD pVySBbNSbBp2MS1QGdp7F6LXPguycJT8LYkGO2THsaXiixWQRpWcBTsxLmUraNX9 OQJjH77Jkj8HPBj2MS5QPIvzlPMnnYU= -----END CERTIFICATE-----Generated at Sat Apr 5 19:11:01 2025 by rpki-client