$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa File: eac293e3-1805-34d4-a60a-cdd9145a0f52.roa (raw, json) Hash identifier: uEKiJ3iosL5N+xXM9sXwblaLWRe3czNMM09TXDEtzrg= Subject key identifier: 3B:19:43:25:2A:F8:57:17:F4:2D:4E:58:DE:FD:37:23:CE:D3:DD:3E Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848B6261F2A9E015A8BC4AD9280 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 13445 IP address blocks: 144.196.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:1f:2a:9e:01:5a:8b:c4:ad:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=f7a14a31-b2a9-4f98-8365-6a45639aa5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:41:2d:6a:cb:cf:1c:bd:19:ea:ba:41:fb: 5d:6c:0d:45:91:19:53:bd:5e:b3:92:51:32:c6:f8: b2:e0:cd:4a:26:23:8f:14:7a:a7:8c:12:45:fc:dc: 8d:d7:f7:1a:b0:ee:08:67:3a:2d:e9:09:ac:87:2d: 55:b2:fd:8d:04:94:b8:80:12:10:13:df:a2:0f:62: 58:f9:80:b6:06:e3:18:70:1d:7d:b0:83:a3:aa:1a: 63:02:a0:e2:84:3c:b8:10:82:df:1d:33:f1:c9:b4: 30:9d:dc:55:30:37:7f:0e:2b:8b:5c:1c:ef:04:19: 3d:27:82:f4:7b:25:46:d4:17:6e:60:f6:b6:b0:64: cb:94:3a:97:f7:da:62:2a:07:6c:fc:f6:e2:b6:67: b4:22:d3:72:c2:45:2d:4a:fd:9d:21:81:38:10:35: 48:b0:ce:f3:64:d4:40:eb:6a:f4:44:13:60:a6:72: ca:17:ef:65:cd:9e:98:1c:27:4a:88:8d:88:27:f3: d4:36:22:36:f4:74:e5:ac:b6:13:fa:5d:70:05:4b: 1a:1b:60:ea:c3:ca:3b:4b:2b:d7:11:aa:ee:0f:e6: 60:17:c1:d8:91:4a:47:d5:08:26:37:7c:c0:bb:b6: 5e:83:c0:44:bc:8b:07:3a:df:ca:a6:37:10:fd:f6: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:19:43:25:2A:F8:57:17:F4:2D:4E:58:DE:FD:37:23:CE:D3:DD:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e6:a9:25:0a:fc:ec:da:a5:4b:2e:30:5e:a6:b8:78:6c:23: 35:3c:ec:b9:97:c1:d9:c6:ee:73:72:55:ee:8d:62:50:27:1e: 09:ae:be:f5:59:76:85:09:9e:8a:ba:92:85:74:a9:e5:17:33: fd:10:b7:f9:9b:6a:9f:18:15:99:48:ac:6f:59:c6:67:de:ab: d5:e3:5c:70:33:87:62:9f:1a:05:01:58:81:a8:07:5d:a0:b1: b8:a3:27:66:b1:2f:a1:b0:01:76:eb:94:b7:3d:c0:21:fe:11: 26:a0:5f:37:28:73:74:a0:ff:60:e3:5e:63:77:6d:41:f4:5b: f0:73:e4:56:6b:a5:35:80:be:ce:4e:40:76:54:6e:5e:8d:ed: a6:dc:56:fe:1e:df:91:ba:f4:94:40:a3:3a:76:c2:41:13:3f: 40:09:53:23:c4:36:3a:4e:97:bd:79:f0:8a:23:d1:0d:63:ff: 6f:39:59:e9:75:b8:52:a4:86:f9:14:87:e8:4e:bd:62:7b:f4: b5:6c:fe:14:c4:0f:ae:b0:65:7a:f9:6e:b1:e0:41:31:bf:3a: 8f:33:3c:90:44:1b:3b:0f:84:11:b8:7c:66:74:c1:37:81:cd: 8e:74:7c:e7:ad:73:19:70:ee:34:aa:f2:27:76:f5:bb:10:dc: 39:de:a1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2Jh8qngFai8StkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk ZjdhMTRhMzEtYjJhOS00Zjk4LTgzNjUtNmE0NTYzOWFhNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAFBLWrLzxy9Geq6QftdbA1FkRlTvV6zklEy xviy4M1KJiOPFHqnjBJF/NyN1/casO4IZzot6Qmshy1Vsv2NBJS4gBIQE9+iD2JY +YC2BuMYcB19sIOjqhpjAqDihDy4EILfHTPxybQwndxVMDd/DiuLXBzvBBk9J4L0 eyVG1BduYPa2sGTLlDqX99piKgds/Pbitme0ItNywkUtSv2dIYE4EDVIsM7zZNRA 62r0RBNgpnLKF+9lzZ6YHCdKiI2IJ/PUNiI29HTlrLYT+l1wBUsaG2Dqw8o7SyvX EaruD+ZgF8HYkUpH1QgmN3zAu7Zeg8BEvIsHOt/KpjcQ/fZedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsZQyUq+FcX9C1OWN79NyPO090+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZWFjMjkzZTMtMTgwNS0z NGQ0LWE2MGEtY2RkOTE0NWEwZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITmqSUK/OzapUsuMF6muHhsIzU87LmXwdnG7nNyVe6NYlAnHgmuvvVZ doUJnoq6koV0qeUXM/0Qt/mbap8YFZlIrG9Zxmfeq9XjXHAzh2KfGgUBWIGoB12g sbijJ2axL6GwAXbrlLc9wCH+ESagXzcoc3Sg/2DjXmN3bUH0W/Bz5FZrpTWAvs5O QHZUbl6N7abcVv4e35G69JRAozp2wkETP0AJUyPENjpOl7158Ioj0Q1j/285Wel1 uFKkhvkUh+hOvWJ79LVs/hTED66wZXr5brHgQTG/Oo8zPJBEGzsPhBG4fGZ0wTeB zY50fOetcxlw7jSq8id29bsQ3DneoZQ= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:15 2025 by rpki-client