$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa File: bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa (raw, json) Hash identifier: HQD0uTL6d7f4drtovlsh/ne1vXGIFgDEMqYIWIHI+gc= Subject key identifier: 11:7E:46:2E:DE:A2:43:F4:65:D5:53:D9:A1:5B:58:7C:4A:5B:DD:46 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584865303ECF9F20C8A443B06080 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 13445 IP address blocks: 163.129.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3e:cf:9f:20:c8:a4:43:b0:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=9c491da0-6c5b-443a-8133-1567ca9e1475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:8c:c0:70:7a:bf:bf:c6:50:3c:e3:04:83: e8:2a:55:b4:3d:ef:c5:84:a0:77:c7:1b:43:68:bc: 85:35:aa:a5:dd:a0:71:13:f2:a8:51:ac:1f:60:e9: 4b:b1:a3:35:9c:b8:e7:39:13:6b:9e:92:e1:b5:e5: 43:04:be:ce:7d:28:67:0b:18:b0:23:35:64:13:30: 9f:ef:14:fc:97:a4:66:b1:2c:43:69:68:04:44:21: ed:cb:c0:f6:53:44:f7:6e:2f:3b:7f:c6:3d:6d:24: ca:8f:79:73:7d:97:9b:93:59:75:16:40:ef:1f:11: b0:fb:42:f4:f8:b3:22:04:31:37:64:86:31:d9:c9: 5c:b8:d8:9d:b1:ab:5c:68:66:0d:63:99:ce:43:64: 35:c1:0b:6a:09:5a:3c:7c:1c:ca:11:c3:99:91:11: 4a:28:1e:1c:0c:6e:8f:95:96:b6:cb:2c:99:40:14: ea:f4:e4:9a:f1:db:5f:d0:6d:af:d0:9d:37:38:35: c2:07:41:6e:3a:0e:99:7a:e7:69:af:f0:29:67:d9: 52:82:6b:73:09:a9:a1:af:69:9c:4e:53:6b:24:c7: 25:48:0b:59:9d:f9:d9:d6:cd:3f:c8:54:8a:a4:9c: 6c:f9:87:d4:25:a9:e4:74:92:18:85:41:72:e0:06: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7E:46:2E:DE:A2:43:F4:65:D5:53:D9:A1:5B:58:7C:4A:5B:DD:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:01:5d:f1:cb:0c:92:5f:1f:36:c7:be:19:ed:61:b5:a5:6b: 18:51:d5:1c:ad:c6:db:d7:a5:97:81:6c:3c:11:ad:d3:49:fb: d3:74:7a:95:17:c0:61:33:75:7a:f1:a8:06:eb:7a:60:36:bd: ea:d1:34:61:47:dd:eb:c4:9d:89:73:70:b3:38:ed:1a:69:0e: ac:9b:95:12:b2:03:ad:f8:28:73:cd:92:ae:33:61:ce:db:32: 9e:72:54:c4:36:60:a3:45:da:43:ad:35:7d:b6:ed:00:dc:b0: d9:e5:9f:4b:18:86:52:cf:1f:3c:a7:9e:f7:0e:38:d5:ec:40: f8:54:7a:c0:70:b2:51:2c:ae:a8:d4:fe:5c:fc:44:10:9e:60: d7:cf:2a:60:27:b0:9d:e5:ed:9c:54:05:8a:24:25:8b:a9:f5: 4a:f6:d7:45:9b:1d:3d:e5:1c:c5:4f:55:46:04:f6:bf:6e:a8: 2c:76:f3:05:d8:ec:8c:34:81:3a:eb:da:bb:b8:c7:ea:16:36: 7f:96:c6:da:8b:7c:b2:c1:d1:0b:3b:7f:ff:9a:fc:2c:ec:65: 7c:d7:f3:98:a4:d7:e9:73:32:a7:5c:42:96:20:53:56:3e:37: d2:cd:88:2b:7f:a3:f0:11:e4:13:0d:df:bd:07:68:ed:40:4c: 49:69:22:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMD7PnyDIpEOwYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk OWM0OTFkYTAtNmM1Yi00NDNhLTgxMzMtMTU2N2NhOWUxNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAqMwHB6v7/GUDzjBIPoKlW0Pe/FhKB3xxtD aLyFNaql3aBxE/KoUawfYOlLsaM1nLjnORNrnpLhteVDBL7OfShnCxiwIzVkEzCf 7xT8l6RmsSxDaWgERCHty8D2U0T3bi87f8Y9bSTKj3lzfZebk1l1FkDvHxGw+0L0 +LMiBDE3ZIYx2clcuNidsatcaGYNY5nOQ2Q1wQtqCVo8fBzKEcOZkRFKKB4cDG6P lZa2yyyZQBTq9OSa8dtf0G2v0J03ODXCB0FuOg6Zeudpr/ApZ9lSgmtzCamhr2mc TlNrJMclSAtZnfnZ1s0/yFSKpJxs+YfUJankdJIYhUFy4AaEUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF+Ri7eokP0ZdVT2aFbWHxKW91GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYmI1NDRhMDYtMGRhNi0z YzU3LWI5YWItMGQ3Njk0NTQ2ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo4EgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQBXfHLDJJfHzbHvhntYbWlaxhR1RytxtvXpZeBbDwRrdNJ+9N0epUX wGEzdXrxqAbremA2verRNGFH3evEnYlzcLM47RppDqyblRKyA634KHPNkq4zYc7b Mp5yVMQ2YKNF2kOtNX227QDcsNnln0sYhlLPHzynnvcOONXsQPhUesBwslEsrqjU /lz8RBCeYNfPKmAnsJ3l7ZxUBYokJYup9Ur210WbHT3lHMVPVUYE9r9uqCx28wXY 7Iw0gTrr2ru4x+oWNn+WxtqLfLLB0Qs7f/+a/CzsZXzX85ik1+lzMqdcQpYgU1Y+ N9LNiCt/o/AR5BMN370HaO1ATElpIqk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:48 2025 by rpki-client