$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa File: 5f596c8b-f66f-38b2-bbfa-5462502cea09.roa (raw, json) Hash identifier: k8QxkWx47GmvuAagN0ygXVFmV/fec2FWug1cKChWjGs= Subject key identifier: 21:9B:93:B2:1B:FD:A7:9D:B6:0E:F7:D6:C8:D2:CA:54:8A:74:EE:06 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849955F24269E8934665DC4C880 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 13445 IP address blocks: 144.196.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:24:26:9e:89:34:66:5d:c4:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=bd7dbf68-3806-454c-a16c-930b568e5558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:5f:87:de:ea:6b:88:1c:86:11:1e:3e:00: a3:bb:f5:6a:88:d4:6c:99:58:ca:c2:10:51:8e:75: fe:5c:4f:32:68:39:50:47:ea:3c:35:b4:77:12:35: 34:2d:64:eb:dc:5b:a9:7b:0b:ba:c1:f4:07:9d:0b: ca:ba:8e:c8:63:1a:27:dc:72:51:5a:4a:eb:e4:8d: 17:3f:bc:6b:56:04:71:8c:c2:35:03:57:57:6a:56: d1:f0:13:70:70:11:b0:33:70:bb:20:eb:fa:43:20: ad:d6:61:64:73:d4:a3:0e:40:3a:3d:57:2f:21:13: 41:c9:34:cf:f7:a2:19:8c:96:dc:3f:4a:eb:c6:11: 6c:64:fb:ce:66:5d:1f:fc:ed:30:6a:64:5a:35:77: 72:28:37:46:c0:60:5b:21:da:90:1e:b3:e3:70:6f: da:6e:47:01:08:77:86:f3:5d:9f:0d:fb:53:4e:53: 08:c6:4b:18:16:3e:fb:15:25:a7:2a:cb:ee:01:cb: 44:59:33:de:b8:6a:0f:dd:ec:2c:89:be:78:ce:e2: 60:20:61:95:d1:0c:55:30:be:cb:7b:cd:58:d7:b0: ac:d4:4b:a3:34:be:3e:31:1c:d1:53:ca:ca:e6:3e: b7:74:02:81:63:4d:cb:77:f0:f9:b9:61:5d:39:e9: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9B:93:B2:1B:FD:A7:9D:B6:0E:F7:D6:C8:D2:CA:54:8A:74:EE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:95:29:24:26:c3:c9:09:3b:0c:50:c3:82:93:46:11:f3:17: eb:2c:5f:4e:e9:1a:39:45:46:16:4a:fa:2e:c2:67:c6:6a:39: 5e:1f:78:08:ec:9c:fa:05:d7:ec:18:37:7d:b1:fb:b6:b6:62: 90:48:00:a2:b3:a5:d8:7d:7e:0d:7a:14:65:fa:72:8c:1f:47: b2:32:b7:91:2a:6d:17:4f:c0:7c:c5:dc:6a:69:7f:95:56:83: 7a:0d:17:6d:41:db:aa:80:4e:42:5c:7d:1e:8b:2f:65:63:c4: 21:3a:23:5a:df:96:67:c2:b6:0c:00:c8:88:26:a7:a4:e6:1f: 1f:ac:fd:1a:a2:8e:a8:6a:5c:b3:ee:11:f0:fc:23:8f:f3:f9: 41:b9:d1:58:56:ff:77:86:55:cd:47:e1:31:bf:6c:17:56:ef: f2:bd:b6:b6:25:79:c2:cf:be:1a:12:78:b8:9b:7f:b8:cb:63: b9:30:e0:ea:01:a1:11:d8:a0:6c:44:0b:1a:bf:8a:c1:67:f8: cd:3c:a4:d2:f5:8e:e4:09:a6:59:cc:44:e4:9d:45:1c:08:94: 2e:bf:19:4b:32:d5:8b:93:d2:8f:e3:d2:3b:c9:c5:53:77:0c: d4:da:67:38:31:cb:fa:24:6c:1e:8c:e0:8b:ee:77:a7:6c:d4: 93:4a:a3:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyQmnok0Zl3EyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YmQ3ZGJmNjgtMzgwNi00NTRjLWExNmMtOTMwYjU2OGU1NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkstfh97qa4gchhEePgCju/VqiNRsmVjKwhBR jnX+XE8yaDlQR+o8NbR3EjU0LWTr3Fupewu6wfQHnQvKuo7IYxon3HJRWkrr5I0X P7xrVgRxjMI1A1dXalbR8BNwcBGwM3C7IOv6QyCt1mFkc9SjDkA6PVcvIRNByTTP 96IZjJbcP0rrxhFsZPvOZl0f/O0wamRaNXdyKDdGwGBbIdqQHrPjcG/abkcBCHeG 812fDftTTlMIxksYFj77FSWnKsvuActEWTPeuGoP3ewsib54zuJgIGGV0QxVML7L e81Y17Cs1EujNL4+MRzRU8rK5j63dAKBY03Ld/D5uWFdOencMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGbk7Ib/aedtg731sjSylSKdO4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNWY1OTZjOGItZjY2Zi0z OGIyLWJiZmEtNTQ2MjUwMmNlYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkMRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeVKSQmw8kJOwxQw4KTRhHzF+ssX07pGjlFRhZK+i7CZ8ZqOV4feAjs nPoF1+wYN32x+7a2YpBIAKKzpdh9fg16FGX6cowfR7Iyt5EqbRdPwHzF3Gppf5VW g3oNF21B26qATkJcfR6LL2VjxCE6I1rflmfCtgwAyIgmp6TmHx+s/RqijqhqXLPu EfD8I4/z+UG50VhW/3eGVc1H4TG/bBdW7/K9trYlecLPvhoSeLibf7jLY7kw4OoB oRHYoGxECxq/isFn+M08pNL1juQJplnMROSdRRwIlC6/GUsy1YuT0o/j0jvJxVN3 DNTaZzgxy/okbB6M4Ivud6ds1JNKo9g= -----END CERTIFICATE-----Generated at Wed May 7 21:34:57 2025 by rpki-client