$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa File: fbec21b9-3c0c-3228-995d-b5367840be36.roa (raw, json) Hash identifier: phTxPfuHgWpp6WhGKPcPKWiNYZ7rh96JQql8WYZH5H4= Subject key identifier: E2:D1:FA:B0:B8:EF:E2:F6:9E:BE:50:22:CE:43:08:09:76:F0:50:C7 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858497C3EEE0B814A8BBB8122AB80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 13445 IP address blocks: 163.129.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:ee:0b:81:4a:8b:bb:81:22:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=f2d1ec94-bb09-4199-806c-42472d3f26d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c2:dc:ab:60:1c:2b:6f:9c:63:96:74:da:63: c1:e2:09:b7:6c:f5:fd:4c:71:71:0b:61:0c:db:b8: 21:b1:0d:82:0a:a3:d5:f0:91:52:3b:c8:0e:72:3e: 4a:df:ee:dc:78:52:fc:0a:d9:1b:0e:ac:93:27:c1: 29:0d:1f:c0:ec:60:87:2d:45:9a:27:cc:62:4e:bc: 78:5a:ff:db:57:89:cc:02:6e:9b:67:19:77:ea:e0: 2b:93:c1:3b:3e:64:6f:f7:52:7d:7a:1c:44:7b:a7: 80:49:7a:9e:ab:34:ec:cf:12:d1:cc:5e:6a:bf:4a: 5b:6f:06:0a:b2:15:64:19:85:ea:87:c7:e9:e4:a4: e6:e6:f4:3d:6a:ea:aa:03:6c:6a:fe:e2:49:db:3a: 74:ac:c1:08:71:be:30:61:4b:c7:b2:ba:a6:6f:43: 04:da:3a:0d:8a:40:87:98:84:84:90:d5:76:ec:a4: 37:f4:2e:f4:8f:57:a4:12:78:65:83:76:ee:b1:e2: a4:a6:0d:71:1c:0a:15:f6:a3:5e:04:9b:3e:87:aa: 6c:4f:2f:07:41:e7:f2:dd:f2:f9:55:f0:49:18:d0: ea:81:f6:fa:44:73:0b:71:12:c8:79:46:10:08:f9: b5:e7:b7:e6:8f:1e:a5:e6:78:56:48:58:87:6c:6a: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D1:FA:B0:B8:EF:E2:F6:9E:BE:50:22:CE:43:08:09:76:F0:50:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbec21b9-3c0c-3228-995d-b5367840be36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:1d:a2:4a:b6:ef:ba:5b:34:9e:57:d2:5f:99:4f:a2:41:6a: 4c:37:5a:b7:93:1f:c5:c5:9d:b7:c2:d1:24:92:9c:a8:eb:69: e7:0a:ba:2c:f1:a6:08:48:7e:bc:bf:1c:0f:09:61:ad:4c:9d: b2:d7:69:41:7c:d0:cc:0e:50:56:03:c7:65:15:df:a0:a1:8e: e7:ec:4d:c6:c5:5a:84:f7:b5:3d:34:fa:b2:61:59:1a:85:2a: ec:e7:24:a2:b7:c9:61:0e:3f:01:41:dd:66:11:56:be:07:43: 83:1e:9c:ae:a7:74:50:a1:d5:8d:5d:d9:db:03:15:32:c2:b6: 5e:ef:33:a9:bc:33:a9:55:93:fc:a6:ef:65:b1:ea:7a:58:79: 31:1b:bd:78:08:1e:01:0d:cc:cc:d8:60:09:b9:a7:52:cd:51: 35:08:54:1b:67:f6:86:9a:fb:40:d9:d0:a2:cd:6c:e1:45:b5: ce:de:c1:d8:85:5f:e0:04:a2:87:e8:70:62:50:2d:cc:a6:48: 36:82:a5:1d:e0:5b:19:c8:fb:08:62:73:ff:cf:ae:d6:1a:3e: 8a:bd:5d:24:d2:be:0e:c1:1f:25:f6:05:35:59:7e:06:b6:6b: 7a:3f:c6:4d:cd:bf:72:1c:9b:96:2e:61:77:86:c9:c5:88:36: dd:87:a4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8Pu4LgUqLu4Eiq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk ZjJkMWVjOTQtYmIwOS00MTk5LTgwNmMtNDI0NzJkM2YyNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Lcq2AcK2+cY5Z02mPB4gm3bPX9THFxC2EM 27ghsQ2CCqPV8JFSO8gOcj5K3+7ceFL8CtkbDqyTJ8EpDR/A7GCHLUWaJ8xiTrx4 Wv/bV4nMAm6bZxl36uArk8E7PmRv91J9ehxEe6eASXqeqzTszxLRzF5qv0pbbwYK shVkGYXqh8fp5KTm5vQ9auqqA2xq/uJJ2zp0rMEIcb4wYUvHsrqmb0ME2joNikCH mISEkNV27KQ39C70j1ekEnhlg3buseKkpg1xHAoV9qNeBJs+h6psTy8HQefy3fL5 VfBJGNDqgfb6RHMLcRLIeUYQCPm157fmjx6l5nhWSFiHbGpjaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLR+rC47+L2nr5QIs5DCAl28FDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZmJlYzIxYjktM2MwYy0z MjI4LTk5NWQtYjUzNjc4NDBiZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYdokq277pbNJ5X0l+ZT6JBakw3WreTH8XFnbfC0SSSnKjraecKuizx pghIfry/HA8JYa1MnbLXaUF80MwOUFYDx2UV36ChjufsTcbFWoT3tT00+rJhWRqF KuznJKK3yWEOPwFB3WYRVr4HQ4MenK6ndFCh1Y1d2dsDFTLCtl7vM6m8M6lVk/ym 72Wx6npYeTEbvXgIHgENzMzYYAm5p1LNUTUIVBtn9oaa+0DZ0KLNbOFFtc7ewdiF X+AEoofocGJQLcymSDaCpR3gWxnI+whic//PrtYaPoq9XSTSvg7BHyX2BTVZfga2 a3o/xk3Nv3Icm5YuYXeGycWINt2HpO8= -----END CERTIFICATE-----Generated at Sat May 10 19:39:45 2025 by rpki-client