$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa File: fbec21b9-3c0c-3228-995d-b5367840be36.roa (raw, json) Hash identifier: 2ooSKMSkNIL7GVCco6FboyB+uC2U67Yqz3gvMpQnbOU= Subject key identifier: 45:0B:87:7C:92:7A:21:A4:73:F2:FF:2F:10:28:E3:F0:EA:37:D0:08 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858489D05E8CBB28F6BE45BE8C408 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 13445 IP address blocks: 163.129.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:e8:cb:b2:8f:6b:e4:5b:e8:c4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=3d98c7b7-dd67-4c79-b733-58efab978f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:2e:bd:f9:e1:e8:8a:8e:e0:cc:76:77:51: cf:bd:05:47:dc:c3:34:5b:6d:b0:08:c7:7b:59:9b: 7a:d7:1b:a4:b0:cf:3b:4b:b6:24:1c:12:9b:89:b7: 85:bb:0e:6f:39:f5:7b:e1:3e:be:df:fc:78:5a:fb: e1:8a:59:6d:37:f7:22:ba:a0:dc:6c:4f:af:2f:d2: 7c:75:6d:4c:7f:e8:9d:ee:1a:e3:90:c1:2f:1b:9c: 99:db:61:a1:ae:67:78:bd:39:51:11:e9:8e:1a:bb: de:ba:98:51:c1:b9:e4:c7:9a:d3:74:1e:65:99:05: ef:f4:9a:a4:44:76:09:5c:8f:20:84:ed:4c:57:61: 1c:0f:ac:87:81:d4:55:83:c0:01:ee:99:35:57:99: 1e:34:08:0b:df:fd:3a:d4:e1:28:fa:4b:be:ab:3a: e7:3f:82:90:54:82:dc:6f:b9:aa:99:45:bf:f5:58: c8:29:af:55:fe:e7:7c:1c:5b:ba:50:c4:d9:4a:f9: 18:53:86:76:70:30:70:ca:7b:30:e7:7a:08:85:4f: f4:e2:39:15:b7:f0:bf:c7:13:a6:76:f0:7f:cd:26: 1a:70:9b:dd:97:45:52:46:ba:00:18:48:53:56:f7: 41:e9:69:ca:ad:35:27:5f:ba:5d:0c:38:87:cb:2a: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0B:87:7C:92:7A:21:A4:73:F2:FF:2F:10:28:E3:F0:EA:37:D0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:83:b9:4e:f4:04:a7:32:16:a4:c8:e4:41:f5:5d:0c:0c:0d: da:2b:14:c8:df:76:5d:8b:29:96:d7:91:d0:de:f4:68:34:89: ba:7e:fe:c3:b9:63:92:de:96:63:26:01:ee:92:f7:6e:db:59: f0:01:36:f6:79:02:9a:b9:41:d9:e8:c6:91:fe:47:ec:dc:b6: 6f:ee:1a:ae:ee:19:44:15:db:28:4d:5a:7e:10:e2:40:41:fb: 13:ee:13:d9:2a:de:f5:1c:9e:86:9b:0f:bb:65:f8:83:66:c9: c1:9e:04:27:3d:61:4c:6d:a0:3a:24:2a:84:e9:fa:72:a2:34: 13:5f:10:f8:3e:f2:16:7a:9e:bd:5e:5b:b6:df:44:03:2c:94: 8f:ea:33:ef:e7:85:ab:21:e5:48:d6:9c:9c:fd:71:98:5a:b3: 4c:e7:ef:8f:12:48:54:a4:52:b4:be:b2:eb:a5:7d:39:7b:b2: 3a:ee:f1:99:08:f6:83:8b:de:15:9f:62:4d:b4:c5:0d:f8:37: 97:cc:bb:b6:8a:97:39:cb:25:b2:20:c4:7b:66:f1:e2:d4:0e: 13:f0:6d:1e:e0:66:4b:6f:0b:7d:8d:e5:1a:19:19:ec:aa:79: da:a3:83:d2:8c:ba:aa:06:8a:24:95:15:1f:24:65:cf:b9:44: dc:f4:0d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBejLso9r5FvoxAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk M2Q5OGM3YjctZGQ2Ny00Yzc5LWI3MzMtNThlZmFiOTc4Zjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkguvfnh6IqO4Mx2d1HPvQVH3MM0W22wCMd7 WZt61xuksM87S7YkHBKbibeFuw5vOfV74T6+3/x4WvvhilltN/ciuqDcbE+vL9J8 dW1Mf+id7hrjkMEvG5yZ22Ghrmd4vTlREemOGrveuphRwbnkx5rTdB5lmQXv9Jqk RHYJXI8ghO1MV2EcD6yHgdRVg8AB7pk1V5keNAgL3/061OEo+ku+qzrnP4KQVILc b7mqmUW/9VjIKa9V/ud8HFu6UMTZSvkYU4Z2cDBwynsw53oIhU/04jkVt/C/xxOm dvB/zSYacJvdl0VSRroAGEhTVvdB6WnKrTUnX7pdDDiHyyqTkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEULh3ySeiGkc/L/LxAo4/DqN9AIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZmJlYzIxYjktM2MwYy0z MjI4LTk5NWQtYjUzNjc4NDBiZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANKDuU70BKcyFqTI5EH1XQwMDdorFMjfdl2LKZbXkdDe9Gg0ibp+/sO5 Y5LelmMmAe6S927bWfABNvZ5Apq5QdnoxpH+R+zctm/uGq7uGUQV2yhNWn4Q4kBB +xPuE9kq3vUcnoabD7tl+INmycGeBCc9YUxtoDokKoTp+nKiNBNfEPg+8hZ6nr1e W7bfRAMslI/qM+/nhash5UjWnJz9cZhas0zn748SSFSkUrS+suulfTl7sjru8ZkI 9oOL3hWfYk20xQ34N5fMu7aKlznLJbIgxHtm8eLUDhPwbR7gZktvC32N5RoZGeyq edqjg9KMuqoGiiSVFR8kZc+5RNz0Deg= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:07 2025 by rpki-client