$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa File: cb2ce5ed-adbf-3c27-8560-b115662f08da.roa (raw, json) Hash identifier: tCY39Ylplp28xEiDu+MAPUxH2ZF2VbD1LhQVO4XDjTM= Subject key identifier: F4:CC:60:F0:CB:64:C8:0A:F2:2D:93:13:C8:8F:9E:75:90:E4:B0:D5 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584900216C59C6905AC98EB03380 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 13445 IP address blocks: 173.243.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6c:59:c6:90:5a:c9:8e:b0:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=a3e2e97f-1408-4d0e-814a-c2b58007f95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b9:62:ea:e6:7f:a1:d2:1f:25:7e:e6:54:89: ba:96:b1:b8:48:22:f1:88:be:7a:70:04:71:d9:2a: f5:4d:9b:c7:c0:e5:db:41:f1:e1:60:0c:a5:41:10: b2:8c:59:9d:d2:11:07:fd:e1:a6:09:a8:30:f1:b8: 0b:80:ee:a5:f1:e7:2b:99:b5:ed:46:bf:5b:2a:ff: 43:1d:05:59:fc:89:6b:89:12:e2:0a:c9:91:ba:9d: 1e:fb:f5:60:42:fd:78:ea:5c:31:d8:f3:cb:5d:fb: ef:b2:20:0a:e0:a7:d5:e4:0e:fe:6e:a8:d4:97:70: e0:2b:4a:fd:a7:72:a6:be:0b:ab:b2:4a:ed:b2:4d: 0f:77:ad:09:41:53:af:89:b9:6a:9a:64:b9:04:80: 7e:d1:92:2d:63:0d:a8:6c:28:4f:c8:ae:0a:be:fd: 34:73:b1:32:44:7c:77:f0:a2:c6:33:cc:41:b8:32: 27:83:e5:6d:45:8d:0c:4e:e1:60:ee:a2:91:3a:07: a6:7b:1e:63:11:35:e8:7f:e4:ae:3f:ab:07:ed:d0: 45:f3:b8:b1:10:fc:9a:d3:87:fe:7a:35:6b:20:04: 4c:3b:69:43:0d:78:a0:51:68:cd:61:59:47:f5:c7: 3e:c4:7d:10:f6:eb:9f:5e:91:63:b7:79:d9:be:c1: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CC:60:F0:CB:64:C8:0A:F2:2D:93:13:C8:8F:9E:75:90:E4:B0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 173.243.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:70:80:f9:4a:f8:f6:7b:6f:ef:b1:f4:48:24:86:fa:23:4c: f2:1a:cc:77:50:a7:37:fc:64:3f:c3:01:b1:e1:a1:e0:55:38: 0b:48:2d:08:84:72:cd:10:c3:ea:77:18:ed:41:1a:48:02:cd: 1d:c8:d8:94:bb:e2:8c:09:2a:e7:cd:11:06:73:94:85:dd:56: 65:87:d1:3d:ae:c3:68:da:5a:27:1e:0b:7a:11:35:24:2f:77: 4b:c2:f3:2b:94:f1:f2:b1:be:bb:bc:fa:3d:f5:99:a3:68:8f: 0c:2d:e7:d1:e9:1d:96:85:fb:3e:33:6a:d4:26:d2:3f:76:60: 6e:da:ae:f7:39:f7:eb:0f:7b:b3:b5:f2:b0:2c:73:07:f9:17: a4:37:9d:41:d3:e2:32:b0:e0:e7:6e:15:6b:4d:5a:a9:ef:d7: 2d:7a:74:d3:da:0d:65:1d:8a:9d:c3:26:87:0c:df:b8:bd:04: 9d:98:63:1c:3a:26:e4:52:07:b9:a1:89:52:48:4b:8d:b1:8f: d8:04:26:6d:6b:b4:af:d2:de:60:ec:ef:93:fb:94:9d:19:4e: 38:e9:46:71:8d:59:bb:ab:c5:58:b8:b9:74:37:e4:c5:99:5a: 66:fb:11:66:82:7c:26:7a:5d:17:cc:6d:85:e7:92:8b:e5:7c: cd:53:32:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWxZxpBayY6wM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YTNlMmU5N2YtMTQwOC00ZDBlLTgxNGEtYzJiNTgwMDdmOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrli6uZ/odIfJX7mVIm6lrG4SCLxiL56cARx 2Sr1TZvHwOXbQfHhYAylQRCyjFmd0hEH/eGmCagw8bgLgO6l8ecrmbXtRr9bKv9D HQVZ/IlriRLiCsmRup0e+/VgQv146lwx2PPLXfvvsiAK4KfV5A7+bqjUl3DgK0r9 p3Kmvgurskrtsk0Pd60JQVOviblqmmS5BIB+0ZItYw2obChPyK4Kvv00c7EyRHx3 8KLGM8xBuDIng+VtRY0MTuFg7qKROgemex5jETXof+SuP6sH7dBF87ixEPya04f+ ejVrIARMO2lDDXigUWjNYVlH9cc+xH0Q9uufXpFjt3nZvsGHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTMYPDLZMgK8i2TE8iPnnWQ5LDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2IyY2U1ZWQtYWRiZi0z YzI3LTg1NjAtYjExNTY2MmYwOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtwgPlK+PZ7b++x9EgkhvojTPIazHdQpzf8ZD/DAbHhoeBVOAtILQiE cs0Qw+p3GO1BGkgCzR3I2JS74owJKufNEQZzlIXdVmWH0T2uw2jaWiceC3oRNSQv d0vC8yuU8fKxvru8+j31maNojwwt59HpHZaF+z4zatQm0j92YG7arvc59+sPe7O1 8rAscwf5F6Q3nUHT4jKw4OduFWtNWqnv1y16dNPaDWUdip3DJocM37i9BJ2YYxw6 JuRSB7mhiVJIS42xj9gEJm1rtK/S3mDs75P7lJ0ZTjjpRnGNWburxVi4uXQ35MWZ Wmb7EWaCfCZ6XRfMbYXnkovlfM1TMts= -----END CERTIFICATE-----Generated at Sat Apr 5 19:10:38 2025 by rpki-client