$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa File: f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa (raw, json) Hash identifier: cXymR1sAyYDhlu724scufyUG7ZQFnnzVVvTqRXcgjgg= Subject key identifier: 1E:47:7D:5E:89:28:B4:C3:25:A0:E8:F6:98:B1:BA:F0:CC:3B:99:6E Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584A74B5DFFE3449BA505D344780 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 13445 IP address blocks: 144.196.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:df:fe:34:49:ba:50:5d:34:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=836f721b-3d5e-45f5-9594-a7116522c3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d2:94:2b:96:32:2f:c5:2d:78:72:aa:40:b9: 18:60:28:ed:62:4b:9f:a1:32:e8:87:94:ee:df:8f: fa:9b:88:2e:92:15:c4:ee:1a:7c:71:dc:c4:41:a2: ec:7e:43:6c:6f:f5:f1:1e:ac:68:6e:e9:98:58:a6: 0b:4e:ee:f1:f7:4c:ca:89:ce:d9:5c:dc:98:f4:1b: a1:b3:37:64:95:68:49:c0:44:4c:69:c7:99:82:51: 29:c1:e3:9f:8c:75:74:a7:cf:33:60:1b:fa:ee:48: b9:4d:7d:29:4c:ee:18:14:0b:cf:72:c5:65:ac:69: 51:1d:54:ae:8c:9a:9c:9a:5a:f6:32:ab:f5:ac:19: 2a:4f:ce:c4:4a:bb:c3:05:95:e9:6f:62:0e:9b:5d: a4:ed:9b:84:8a:24:92:1f:8f:2a:68:5a:4a:44:c9: 19:9d:76:3b:f0:df:04:cb:c6:9c:bf:e2:8c:5e:94: 3a:90:0b:6a:58:b3:90:19:af:23:ac:e9:fc:e5:2f: c5:ac:61:13:5d:2b:62:45:7c:0e:ec:02:c8:8a:8f: 3c:4d:7b:c0:57:54:ed:35:d2:cd:44:ed:b0:52:8a: ee:1b:74:d6:00:82:c0:0b:51:52:bd:8f:59:5a:93: c1:87:ca:f0:19:dd:37:9b:e6:13:c7:d2:9d:33:95: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:47:7D:5E:89:28:B4:C3:25:A0:E8:F6:98:B1:BA:F0:CC:3B:99:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:5f:54:a6:87:b0:40:9c:41:3b:e9:cd:92:ac:6b:62:82:c4: 86:90:84:85:a8:10:19:39:df:e8:d6:1d:11:d8:45:74:be:22: 35:4a:09:e1:cc:61:58:d5:7f:87:ac:0f:2f:09:df:c6:ca:90: a9:5e:ac:bc:9e:cd:ff:47:62:8d:2b:28:f5:18:4b:d2:53:e7: fb:ed:2e:e8:89:1e:e5:ee:6f:0c:91:bb:46:06:f8:81:8b:3b: 4c:c9:45:f1:02:af:73:6a:82:79:76:16:ff:92:92:a6:ea:d7: 49:c1:13:f7:18:ed:eb:94:57:a5:2d:e4:de:9b:d8:f6:63:d1: d2:0a:f4:4b:eb:6b:e2:e3:f5:c1:32:f8:96:c9:1a:cd:bf:90: a5:45:64:c5:7c:55:42:ed:7e:87:ec:7c:da:d1:03:fb:0e:d6: b8:52:de:2e:08:b3:94:bf:ee:be:bc:a9:0e:7a:93:75:03:ae: 14:2d:e8:b1:b5:51:bc:00:34:6a:72:ed:9f:ff:92:a9:84:46: e1:d5:21:e8:aa:88:30:36:56:58:53:88:3c:89:d4:98:27:34: b5:3d:4c:be:21:c3:a3:ac:e9:3a:23:e2:9c:00:1a:04:93:2f: 36:a0:fc:be:ed:77:66:2a:8c:0a:07:4a:7f:f7:dd:a6:73:f9: fc:ac:2d:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0td/+NEm6UF00R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ODM2ZjcyMWItM2Q1ZS00NWY1LTk1OTQtYTcxMTY1MjJjM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdKUK5YyL8UteHKqQLkYYCjtYkufoTLoh5Tu 34/6m4gukhXE7hp8cdzEQaLsfkNsb/XxHqxobumYWKYLTu7x90zKic7ZXNyY9Buh szdklWhJwERMaceZglEpweOfjHV0p88zYBv67ki5TX0pTO4YFAvPcsVlrGlRHVSu jJqcmlr2Mqv1rBkqT87ESrvDBZXpb2IOm12k7ZuEiiSSH48qaFpKRMkZnXY78N8E y8acv+KMXpQ6kAtqWLOQGa8jrOn85S/FrGETXStiRXwO7ALIio88TXvAV1TtNdLN RO2wUoruG3TWAILAC1FSvY9ZWpPBh8rwGd03m+YTx9KdM5VSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5HfV6JKLTDJaDo9pixuvDMO5luMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjQyZjg1ZGMtMmQ3Yy0z MTg3LWI3ZGEtNTlmN2JhNDk1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9fVKaHsECcQTvpzZKsa2KCxIaQhIWoEBk53+jWHRHYRXS+IjVKCeHM YVjVf4esDy8J38bKkKlerLyezf9HYo0rKPUYS9JT5/vtLuiJHuXubwyRu0YG+IGL O0zJRfECr3Nqgnl2Fv+Skqbq10nBE/cY7euUV6Ut5N6b2PZj0dIK9Evra+Lj9cEy +JbJGs2/kKVFZMV8VULtfofsfNrRA/sO1rhS3i4Is5S/7r68qQ56k3UDrhQt6LG1 UbwANGpy7Z//kqmERuHVIeiqiDA2VlhTiDyJ1JgnNLU9TL4hw6Os6Toj4pwAGgST Lzag/L7td2YqjAoHSn/33aZz+fysLYM= -----END CERTIFICATE-----Generated at Thu Jul 10 19:02:00 2025 by rpki-client