$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa File: 12f25d35-c636-31fa-a0b4-d96b47fb707f.roa (raw, json) Hash identifier: iU9z5E3m9bd5VsmzwZN8pIa5QLSKYPjSmd5vCWjfrE4= Subject key identifier: FB:8B:B2:81:82:6E:F7:A7:14:77:0F:81:F9:1D:AD:65:D0:E9:35:D3 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849DF5A728818241E597695F480 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 13445 IP address blocks: 170.133.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:72:88:18:24:1e:59:76:95:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=0ad3f58e-9661-4791-88c2-b8812fe527ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:0f:db:15:5a:07:7b:a2:e5:bf:ab:19:5a: 5e:c6:e7:d0:35:94:a1:99:2d:a1:d0:e8:17:2b:ad: e6:20:a5:ee:2c:fb:8e:8c:80:2c:2c:f0:1f:57:ea: c9:af:cd:50:0f:69:88:5f:6e:97:7a:17:e1:86:bf: b8:0d:57:48:71:76:ec:19:44:b6:df:26:83:01:52: 6c:3d:ee:1f:6c:a0:37:a5:71:36:3e:25:c7:a9:b0: 6b:b7:33:34:06:c3:d9:1e:5c:a3:1f:5e:61:8f:24: df:e8:03:0d:b7:d9:0f:7a:12:bb:f3:33:ec:c1:80: 54:5d:a8:28:48:dc:60:97:5f:07:30:6f:25:1c:68: 82:a4:fe:34:17:1e:c8:f8:50:34:1d:03:97:f2:4e: ed:ec:ff:e4:a9:a8:a9:1b:65:f2:e6:e1:52:2b:b8: 3c:01:c9:12:0a:f8:e1:34:1b:77:de:86:dc:9f:ce: 2b:12:96:e3:46:e3:a0:d6:40:cb:83:5d:89:c4:06: 2a:d5:a3:94:70:f7:b6:a7:e8:e8:98:36:7d:79:4c: a2:7e:ab:39:92:be:93:09:1a:31:cf:42:ca:66:d6: ef:37:3c:59:5c:98:a7:60:80:41:5e:d7:02:37:0a: a5:34:96:1a:d9:79:ab:8b:42:b1:17:0a:2b:df:da: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8B:B2:81:82:6E:F7:A7:14:77:0F:81:F9:1D:AD:65:D0:E9:35:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.133.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:ae:a1:33:8f:a4:b1:f7:83:d6:c3:5a:02:e0:db:5f:f9:f8: 2c:01:f9:67:86:69:f8:0e:4e:46:58:55:9f:44:ab:b8:48:f9: 1d:c4:96:15:ad:fb:2f:e1:c2:57:e1:d7:45:4c:c0:5c:dd:5f: 7e:e4:29:98:6f:e6:fc:27:15:60:45:98:a1:41:56:b0:52:a8: 3f:e8:cf:ef:87:4b:02:79:20:7d:67:b4:3b:6e:12:02:36:c5: f6:fe:a7:97:ab:b8:05:6a:79:2f:4b:36:f4:84:7e:56:13:2b: cc:aa:26:e4:3c:db:15:f6:9b:73:12:22:03:b0:41:df:d3:dc: 33:a7:d1:41:02:a6:fb:bd:a5:37:22:78:66:51:37:ab:d7:0a: 22:5b:3d:a1:e2:df:a1:25:ba:31:ed:12:d2:44:ef:df:34:b3: b3:48:71:d0:c7:be:70:89:77:fa:2c:72:d4:28:95:8b:14:4e: 37:45:8a:e3:92:93:14:16:42:17:f8:a4:16:ba:d3:42:8f:e4: 55:b1:b4:65:b0:2e:87:3b:3e:2a:68:04:6d:5f:47:e0:30:ce: b5:71:3b:5c:c2:77:38:e3:d3:53:2f:3c:7a:32:f4:2b:b5:f3: 6b:38:de:6d:db:76:c5:03:3d:03:04:21:c3:96:0f:b0:09:e0: 4c:cf:e3:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnKIGCQeWXaV9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGFkM2Y1OGUtOTY2MS00NzkxLTg4YzItYjg4MTJmZTUyN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji8P2xVaB3ui5b+rGVpexufQNZShmS2h0OgX K63mIKXuLPuOjIAsLPAfV+rJr81QD2mIX26Xehfhhr+4DVdIcXbsGUS23yaDAVJs Pe4fbKA3pXE2PiXHqbBrtzM0BsPZHlyjH15hjyTf6AMNt9kPehK78zPswYBUXago SNxgl18HMG8lHGiCpP40Fx7I+FA0HQOX8k7t7P/kqaipG2Xy5uFSK7g8AckSCvjh NBt33obcn84rEpbjRuOg1kDLg12JxAYq1aOUcPe2p+jomDZ9eUyifqs5kr6TCRox z0LKZtbvNzxZXJinYIBBXtcCNwqlNJYa2Xmri0KxFwor39pmHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuLsoGCbvenFHcPgfkdrWXQ6TXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMTJmMjVkMzUtYzYzNi0z MWZhLWEwYjQtZDk2YjQ3ZmI3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqoWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiuoTOPpLH3g9bDWgLg21/5+CwB+WeGafgOTkZYVZ9Eq7hI+R3ElhWt +y/hwlfh10VMwFzdX37kKZhv5vwnFWBFmKFBVrBSqD/oz++HSwJ5IH1ntDtuEgI2 xfb+p5eruAVqeS9LNvSEflYTK8yqJuQ82xX2m3MSIgOwQd/T3DOn0UECpvu9pTci eGZRN6vXCiJbPaHi36ElujHtEtJE7980s7NIcdDHvnCJd/osctQolYsUTjdFiuOS kxQWQhf4pBa600KP5FWxtGWwLoc7PipoBG1fR+AwzrVxO1zCdzjj01MvPHoy9Cu1 82s43m3bdsUDPQMEIcOWD7AJ4EzP4+s= -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:09 2025 by rpki-client