$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa File: ab844670-ed3c-32c6-85dc-3ed39dee509e.roa (raw, json) Hash identifier: 6zbheuNdirTRPg+21QXd5MTA0c6R3W4tI2yJqUUQT14= Subject key identifier: 0A:4D:6C:C1:9C:39:C6:7A:81:3B:92:6E:60:49:49:8D:4D:DF:A0:89 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858499DBF2ECA4E9D3F88DFB25900 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 13445 IP address blocks: 144.196.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2e:ca:4e:9d:3f:88:df:b2:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=3610c926-baf8-4ab3-877e-3c8b125a16ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:b3:d4:f0:46:41:79:6d:1c:69:4d:e2:18: d4:72:46:b0:a7:56:4f:a7:68:e4:d1:13:ee:ca:5d: 69:aa:fb:78:18:4e:7f:a1:ff:6a:17:7b:28:c8:7d: 99:3b:1c:0f:53:25:0b:77:c5:2e:4c:5b:b1:90:6c: 78:3f:7b:21:82:a4:94:dd:3d:02:6d:d8:fc:03:d5: 68:f5:ca:45:fc:1d:7b:07:50:09:da:51:f2:85:9f: a1:85:73:6b:7f:73:52:dc:ae:ae:15:bd:82:89:64: 3f:32:f4:1b:b7:04:40:7b:08:37:b7:06:76:6b:0b: c3:7e:08:ec:2b:84:41:f4:9c:d9:08:c3:14:83:c5: c4:bf:51:dd:be:81:31:aa:34:32:9d:45:fd:9e:f3: 5d:a0:10:89:08:83:76:85:d7:9b:fa:1c:c5:ab:a6: e3:c6:c9:c5:87:c6:4b:05:ce:ea:db:8b:c7:ec:d0: 69:eb:05:e0:4f:96:cd:53:ce:14:bf:bd:62:71:50: 8f:90:95:0c:62:6e:2b:97:1a:84:b7:67:e5:d5:cd: 51:e3:39:31:47:d0:73:5e:17:8e:19:db:8a:d2:d7: 5f:b4:6e:36:eb:68:38:d2:52:cd:0a:40:78:5c:09: e4:a4:37:8b:59:b6:7a:70:a4:40:ff:c9:f6:d9:90: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:6C:C1:9C:39:C6:7A:81:3B:92:6E:60:49:49:8D:4D:DF:A0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:84:20:e6:9e:f9:72:35:b4:7d:05:ce:ec:4d:71:7f:02:b0: fc:f0:09:69:b5:f0:16:a2:1a:b4:e8:27:bc:b0:b3:bb:24:65: 2e:2f:04:4d:8c:dc:b5:1c:3f:3b:26:e3:0a:76:68:13:ca:c5: d9:72:34:1b:74:5a:77:13:2e:9f:66:4e:40:52:f5:ad:56:04: 75:6a:7f:fa:04:dc:3c:7c:0a:06:ea:00:33:a5:6a:fb:af:c2: b1:05:84:b4:a5:fe:87:f9:01:47:94:e9:93:8b:b9:79:3b:82: da:b4:62:c1:9b:74:e5:ee:42:55:3c:51:4a:48:78:2a:01:94: 9d:d9:8b:d4:c8:ee:98:20:42:62:20:d7:1e:71:e5:dc:54:97: f4:6f:0d:87:c7:16:50:bd:ec:4f:03:5e:20:4f:d6:30:f2:50: 27:20:1b:4a:c8:52:78:37:dc:ea:b5:a2:b7:ca:24:01:af:91: 9c:f9:f5:92:b4:98:b4:d1:3b:85:4e:b6:0c:64:e9:57:e7:e0: 22:5e:05:25:48:2b:bc:97:64:3b:93:17:95:7b:ea:f9:4e:50: 98:63:3c:a8:d5:d0:e1:50:13:f0:89:8e:2c:ae:db:ef:5a:d2: 23:b8:57:f0:ed:05:90:c1:57:b5:d0:82:27:65:e8:f8:7f:bb: 0d:e3:38:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvy7KTp0/iN+yWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MzYxMGM5MjYtYmFmOC00YWIzLTg3N2UtM2M4YjEyNWExNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDez1PBGQXltHGlN4hjUckawp1ZPp2jk0RPu yl1pqvt4GE5/of9qF3soyH2ZOxwPUyULd8UuTFuxkGx4P3shgqSU3T0Cbdj8A9Vo 9cpF/B17B1AJ2lHyhZ+hhXNrf3NS3K6uFb2CiWQ/MvQbtwRAewg3twZ2awvDfgjs K4RB9JzZCMMUg8XEv1HdvoExqjQynUX9nvNdoBCJCIN2hdeb+hzFq6bjxsnFh8ZL Bc7q24vH7NBp6wXgT5bNU84Uv71icVCPkJUMYm4rlxqEt2fl1c1R4zkxR9BzXheO GduK0tdftG4262g40lLNCkB4XAnkpDeLWbZ6cKRA/8n22ZCUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApNbMGcOcZ6gTuSbmBJSY1N36CJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYWI4NDQ2NzAtZWQzYy0z MmM2LTg1ZGMtM2VkMzlkZWU1MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2EIOae+XI1tH0FzuxNcX8CsPzwCWm18BaiGrToJ7yws7skZS4vBE2M 3LUcPzsm4wp2aBPKxdlyNBt0WncTLp9mTkBS9a1WBHVqf/oE3Dx8CgbqADOlavuv wrEFhLSl/of5AUeU6ZOLuXk7gtq0YsGbdOXuQlU8UUpIeCoBlJ3Zi9TI7pggQmIg 1x5x5dxUl/RvDYfHFlC97E8DXiBP1jDyUCcgG0rIUng33Oq1orfKJAGvkZz59ZK0 mLTRO4VOtgxk6Vfn4CJeBSVIK7yXZDuTF5V76vlOUJhjPKjV0OFQE/CJjiyu2+9a 0iO4V/DtBZDBV7XQgidl6Ph/uw3jOKw= -----END CERTIFICATE-----Generated at Tue May 6 16:09:04 2025 by rpki-client