$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/171978ca-3c08-39d0-96ef-69003af6daa6.roa File: 171978ca-3c08-39d0-96ef-69003af6daa6.roa (raw, json) Hash identifier: 68XLRBKl0EqXNoBVF0xOBc+oyQq/+awIh/ZTgn9X7I0= Subject key identifier: 55:D8:7C:59:3C:51:33:E7:6D:5F:7C:D4:EC:1E:02:55:9B:6A:14:D4 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F0B56DFAC39933C7E51A3D80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/171978ca-3c08-39d0-96ef-69003af6daa6.roa Signing time: Thu 22 May 2025 18:13:23 +0000 ROA not before: Thu 22 May 2025 18:13:23 +0000 ROA not after: Wed 20 Aug 2025 18:13:23 +0000 asID: 25893 IP address blocks: 172.252.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:b5:6d:fa:c3:99:33:c7:e5:1a:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 22 18:13:23 2025 GMT Not After : Aug 20 18:13:23 2025 GMT Subject: CN=228b9a51-1e64-4592-9922-2711dafc354d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:aa:21:81:04:dc:16:d9:32:57:c4:81:5f: 17:ac:b1:34:23:58:f6:53:d4:2f:0f:6a:12:66:df: 25:b3:68:ad:08:ee:7b:ec:94:e3:43:cb:60:f1:2b: 46:57:78:dd:52:3e:fe:fa:a3:9e:6e:bd:01:1b:2d: bd:3a:89:01:19:0e:cb:6b:79:76:27:e3:59:f2:7e: b6:67:7c:f3:bd:db:3a:65:62:ac:b0:98:34:aa:f7: a4:24:8f:be:c5:2e:c1:61:19:ba:4c:17:d1:2d:95: 57:17:e9:24:3d:73:58:ff:29:97:48:0c:10:27:16: 59:42:68:e8:cd:3f:4b:8b:97:27:66:62:ba:92:88: 17:7c:9e:45:10:a1:7e:08:d8:b0:29:5d:47:b4:91: 77:dd:21:01:5b:5d:2d:24:27:97:89:78:0f:91:97: 20:32:18:28:f9:e2:5b:e2:e7:58:2b:44:72:87:50: b5:1f:cb:8a:56:df:14:84:e9:4f:f2:01:e3:5d:2d: 1e:f6:c3:52:22:86:90:c9:28:1c:77:ae:b0:3f:dc: ac:b7:7f:67:66:ab:6e:95:86:c0:41:0e:f2:af:a0: 55:e7:2c:af:04:69:3a:96:18:43:ad:62:0d:6a:25: e1:41:6b:f8:8c:9b:c3:0e:8e:3a:81:99:5f:1c:7a: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:7C:59:3C:51:33:E7:6D:5F:7C:D4:EC:1E:02:55:9B:6A:14:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/171978ca-3c08-39d0-96ef-69003af6daa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:85:6b:d4:b5:b9:68:42:f5:23:57:9c:c3:da:e8:25:6a:7f: d5:70:7e:fd:11:70:50:49:77:f6:30:e9:80:bd:a8:b8:f6:69: a4:38:f0:c6:f5:9b:f7:60:9a:f3:8b:0f:73:e9:2f:54:4a:3a: ab:b8:16:a5:9f:bc:94:5a:d2:d7:e8:cb:51:de:53:ee:93:5e: 09:9f:25:b1:f1:d1:af:ed:b2:2c:2c:10:11:fc:02:3c:bb:1d: c7:9d:2a:9a:0e:e1:9f:51:96:d6:ed:86:31:be:1e:1b:95:fd: ff:fc:53:83:59:bb:30:7a:43:bb:4b:88:dc:ab:03:59:9a:d8: 2b:0f:cb:19:49:71:f2:4b:48:56:11:19:0c:55:fb:53:a0:c0: ae:05:6a:16:06:2e:d7:05:b6:4e:ce:b1:ac:b5:4a:bc:1d:14: 08:a7:8f:8a:e6:a0:fd:59:5e:a8:56:cc:8d:f6:75:de:ec:9f: 2e:6c:78:80:49:2b:8a:78:31:58:87:d0:ac:b2:98:cf:7f:aa: b9:06:af:28:d4:63:dc:bc:6a:49:62:ce:10:a8:dd:bd:f8:29: 66:91:05:52:98:21:cf:a3:08:a9:7e:f1:ff:be:62:07:63:63: 58:93:fd:d4:c3:7d:29:50:52:39:bf:48:3b:40:30:b9:a1:43: 7f:b8:b7:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwtW36w5kzx+UaPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyMjE4MTMyM1oXDTI1MDgyMDE4MTMyM1owLzEtMCsGA1UEAxMk MjI4YjlhNTEtMWU2NC00NTkyLTk5MjItMjcxMWRhZmMzNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8uqIYEE3BbZMlfEgV8XrLE0I1j2U9QvD2oS Zt8ls2itCO577JTjQ8tg8StGV3jdUj7++qOebr0BGy29OokBGQ7La3l2J+NZ8n62 Z3zzvds6ZWKssJg0qvekJI++xS7BYRm6TBfRLZVXF+kkPXNY/ymXSAwQJxZZQmjo zT9Li5cnZmK6kogXfJ5FEKF+CNiwKV1HtJF33SEBW10tJCeXiXgPkZcgMhgo+eJb 4udYK0Ryh1C1H8uKVt8UhOlP8gHjXS0e9sNSIoaQySgcd66wP9yst39nZqtulYbA QQ7yr6BV5yyvBGk6lhhDrWINaiXhQWv4jJvDDo46gZlfHHrCQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXYfFk8UTPnbV981OweAlWbahTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTcxOTc4Y2EtM2MwOC0z OWQwLTk2ZWYtNjkwMDNhZjZkYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqFa9S1uWhC9SNXnMPa6CVqf9Vwfv0RcFBJd/Yw6YC9qLj2aaQ48Mb1 m/dgmvOLD3PpL1RKOqu4FqWfvJRa0tfoy1HeU+6TXgmfJbHx0a/tsiwsEBH8Ajy7 HcedKpoO4Z9RltbthjG+HhuV/f/8U4NZuzB6Q7tLiNyrA1ma2CsPyxlJcfJLSFYR GQxV+1OgwK4FahYGLtcFtk7Osay1SrwdFAinj4rmoP1ZXqhWzI32dd7sny5seIBJ K4p4MViH0KyymM9/qrkGryjUY9y8aklizhCo3b34KWaRBVKYIc+jCKl+8f++Ygdj Y1iT/dTDfSlQUjm/SDtAMLmhQ3+4tzA= -----END CERTIFICATE-----Generated at Wed Jun 18 19:38:07 2025 by rpki-client