$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa File: f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa (raw, json) Hash identifier: BoQN8DUk1J9P0Vf4xkJFDYRAVPtJw+YA3P2w2diORXQ= Subject key identifier: AD:B4:5C:45:83:40:28:4E:10:80:B9:52:C9:00:F8:2D:44:7E:E2:7D Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848BE862E6D26477E03A919C200 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 13445 IP address blocks: 144.196.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2e:6d:26:47:7e:03:a9:19:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=a3748dd1-7594-4d8d-b501-3127c0a400cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:ed:f2:c2:c5:d7:66:8a:00:ec:e8:c1:2d: 02:75:a7:69:19:1d:c5:d9:4e:bf:d2:bf:43:bd:36: 5d:17:11:7a:5d:a7:4c:af:e3:b7:6b:64:76:a8:92: 73:ab:38:c5:3a:eb:0e:a7:9a:6e:4a:a0:57:f6:ad: 98:8a:2d:08:13:ec:4b:01:aa:f6:82:cc:aa:1e:e4: a2:8d:ab:76:8e:d6:30:f3:da:f5:78:a3:ae:5e:46: 62:b7:6a:dd:d3:40:24:11:29:03:a0:91:12:a2:97: e1:1f:dc:50:e2:1d:f4:22:33:c2:8e:be:35:15:97: d0:0b:60:f3:20:b6:b2:f8:e6:58:2f:e9:70:79:b4: e9:64:4c:d9:fd:53:6d:bb:63:6d:fd:2b:3b:75:e5: fe:49:51:8d:1a:6f:1f:71:f6:4c:14:1a:e7:1b:9c: 10:8d:d9:33:ba:7c:45:66:e9:b7:be:84:70:7c:ee: 44:c1:7b:6e:01:3d:fb:79:af:1b:32:4c:01:81:39: 8a:0f:65:f1:7e:15:e1:cf:5c:20:64:13:13:08:f4: 19:96:70:5e:40:c0:e8:54:24:80:e9:8b:bc:bd:65: 26:ee:e7:1d:85:e2:53:a1:36:3c:86:fe:98:5d:21: 07:97:07:b5:ee:db:5a:12:c8:08:3a:dc:03:27:54: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B4:5C:45:83:40:28:4E:10:80:B9:52:C9:00:F8:2D:44:7E:E2:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b4:93:d8:a3:79:0a:fc:6a:c9:29:63:b9:4c:ef:3e:7d:86: 42:cd:54:e9:c6:63:33:95:35:30:cb:52:90:ea:2d:e5:04:87: e0:ba:0b:39:fd:ec:29:71:70:df:2c:b9:4e:c0:73:a6:39:24: 2c:bd:76:29:8b:1d:4a:8f:65:8b:a6:03:b0:40:2a:ca:28:7a: 61:d7:51:9c:8c:0b:16:32:e9:36:5b:c6:a7:31:14:a6:cc:3a: 3d:f7:62:c9:de:5b:40:f8:69:72:38:29:68:75:91:40:05:6d: bd:ec:9b:7c:3a:c9:fd:52:9a:21:ab:18:ce:c4:50:bd:05:c7: 04:d0:96:16:2f:d3:75:7a:8d:48:25:79:5e:8d:24:86:20:22: 06:87:10:54:93:0c:06:85:b7:6d:ef:86:07:f2:6a:bd:a3:01: 6e:9a:37:9c:30:85:c5:f9:ee:89:ac:83:3b:0e:38:60:ac:a2: 5f:54:d3:d0:f6:21:4d:e7:0d:e1:35:c8:1f:60:8e:f6:dd:30: 39:d6:71:e2:f9:4b:3e:07:04:35:40:15:61:09:0e:b3:81:c7: 0a:82:4a:c5:3c:bd:93:99:11:9a:60:6c:0c:9a:0e:b8:70:28: 83:77:ba:70:66:92:c6:42:44:e9:48:6e:62:9a:dd:f8:cc:2a: 5e:e3:d5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hi5tJkd+A6kZwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk YTM3NDhkZDEtNzU5NC00ZDhkLWI1MDEtMzEyN2MwYTQwMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWvt8sLF12aKAOzowS0CdadpGR3F2U6/0r9D vTZdFxF6XadMr+O3a2R2qJJzqzjFOusOp5puSqBX9q2Yii0IE+xLAar2gsyqHuSi jat2jtYw89r1eKOuXkZit2rd00AkESkDoJESopfhH9xQ4h30IjPCjr41FZfQC2Dz ILay+OZYL+lwebTpZEzZ/VNtu2Nt/Ss7deX+SVGNGm8fcfZMFBrnG5wQjdkzunxF Zum3voRwfO5EwXtuAT37ea8bMkwBgTmKD2XxfhXhz1wgZBMTCPQZlnBeQMDoVCSA 6Yu8vWUm7ucdheJToTY8hv6YXSEHlwe17ttaEsgIOtwDJ1TTUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK20XEWDQChOEIC5UskA+C1EfuJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjkwNTk4YWQtN2RmNC0z OWU5LWI0MDUtZDcwZWI2OGM2ZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi0k9ijeQr8askpY7lM7z59hkLNVOnGYzOVNTDLUpDqLeUEh+C6Czn9 7ClxcN8suU7Ac6Y5JCy9dimLHUqPZYumA7BAKsooemHXUZyMCxYy6TZbxqcxFKbM Oj33YsneW0D4aXI4KWh1kUAFbb3sm3w6yf1SmiGrGM7EUL0FxwTQlhYv03V6jUgl eV6NJIYgIgaHEFSTDAaFt23vhgfyar2jAW6aN5wwhcX57omsgzsOOGCsol9U09D2 IU3nDeE1yB9gjvbdMDnWceL5Sz4HBDVAFWEJDrOBxwqCSsU8vZOZEZpgbAyaDrhw KIN3unBmksZCROlIbmKa3fjMKl7j1b8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:02 2025 by rpki-client