$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21e5f600-043f-3057-9ad4-5516a4996dbb.roa File: 21e5f600-043f-3057-9ad4-5516a4996dbb.roa (raw, json) Hash identifier: OkQxizPMaifQyAWOaXA6SrZbJe6LPV+UekBmboT/Z5s= Subject key identifier: 41:D8:D7:5A:6A:3E:BF:86:5B:F3:38:23:DA:53:B7:E2:85:B3:EC:FD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D641258A477901FEE00DE280 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21e5f600-043f-3057-9ad4-5516a4996dbb.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 142.252.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:25:8a:47:79:01:fe:e0:0d:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=d6e9f70b-5c12-41c2-ac45-36030767869a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:cb:ce:d6:c6:75:65:cf:5b:70:a9:da:16: 1f:98:fe:fc:e0:5a:36:82:5e:2c:cc:38:66:56:3d: 77:8c:d2:ee:f6:9d:4c:37:23:a5:c4:92:86:31:2c: a9:14:c3:c4:4d:3c:55:61:fa:a8:f5:ea:db:5e:69: bf:4a:63:a6:fb:b7:56:79:5b:4b:ff:7d:52:d5:1a: 29:99:e0:d2:a9:95:99:f3:d5:74:7c:a6:89:c1:f4: fe:85:0a:11:6d:99:17:f0:a9:4d:23:6c:76:e8:a2: 38:41:13:d7:f7:01:98:8e:2c:6d:1e:9d:b1:7c:b9: e9:56:b6:d0:11:0b:17:12:5e:d5:2f:59:a4:c5:a4: 5d:5c:45:46:b6:58:a6:d0:d5:d0:03:da:8e:99:8c: ab:0b:c6:9f:59:d5:0b:79:8c:5c:84:5b:67:e1:bc: b8:7a:78:d8:85:57:92:13:32:50:5f:69:20:8d:22: 53:59:3f:d4:65:12:53:34:95:7e:30:fe:b8:cb:84: f2:30:27:2f:e8:7a:83:26:3c:bc:d8:34:e9:42:83: fb:f2:12:58:6b:c7:0f:47:a8:3f:9d:a5:11:22:ed: b7:e2:9b:5f:b1:00:78:3e:d0:12:27:4b:5e:f4:08: c4:e0:3a:a4:da:76:d2:b7:89:06:b0:d8:63:5e:53: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D8:D7:5A:6A:3E:BF:86:5B:F3:38:23:DA:53:B7:E2:85:B3:EC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21e5f600-043f-3057-9ad4-5516a4996dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b0:2a:6c:13:cb:d7:98:95:9c:68:f4:db:f3:33:12:2f:94: cd:12:0c:d8:07:bf:4b:63:ff:24:6f:34:13:bd:0e:c7:90:d8: 29:cb:3f:72:c9:f2:33:09:76:5d:4c:05:7a:f4:93:fe:de:2a: 18:3b:b0:11:60:8c:ac:f2:2c:e5:7a:e4:be:21:23:eb:1b:5a: 64:c8:ad:05:c4:81:36:0a:07:5b:5d:6a:df:ac:03:25:44:a1: 6e:93:f7:b4:3a:44:1b:7d:f9:5c:77:8d:1b:cf:a6:8d:15:a6: 77:51:dc:8b:5f:5f:8d:c2:35:21:69:19:18:7b:bf:21:48:3d: 52:a6:da:80:12:d0:24:1b:fc:b7:05:a7:8f:74:59:57:2c:80: 3a:18:e1:ba:40:01:76:1c:0c:b2:41:31:f8:15:74:74:bc:a0: cf:71:87:f7:49:46:93:b1:31:6d:cb:47:ef:b3:f9:8f:c4:87: 04:ca:bd:ea:72:30:4f:76:0f:eb:56:2b:02:bc:6a:f1:96:93: fa:18:9f:7f:b9:d8:4d:22:0e:47:d2:16:bd:e2:5e:c9:cc:76: 33:3d:f5:53:e8:fc:c1:16:18:eb:62:72:25:54:2a:79:a0:d4: 73:0d:df:2c:7c:15:06:6d:c2:62:0e:8b:a1:de:45:9e:fa:1c: 0e:7b:88:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSWKR3kB/uAN4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDZlOWY3MGItNWMxMi00MWMyLWFjNDUtMzYwMzA3Njc4NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOTLztbGdWXPW3Cp2hYfmP784Fo2gl4szDhm Vj13jNLu9p1MNyOlxJKGMSypFMPETTxVYfqo9erbXmm/SmOm+7dWeVtL/31S1Rop meDSqZWZ89V0fKaJwfT+hQoRbZkX8KlNI2x26KI4QRPX9wGYjixtHp2xfLnpVrbQ EQsXEl7VL1mkxaRdXEVGtlim0NXQA9qOmYyrC8afWdULeYxchFtn4by4enjYhVeS EzJQX2kgjSJTWT/UZRJTNJV+MP64y4TyMCcv6HqDJjy82DTpQoP78hJYa8cPR6g/ naURIu234ptfsQB4PtASJ0te9AjE4Dqk2nbSt4kGsNhjXlNpswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHY11pqPr+GW/M4I9pTt+KFs+z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjFlNWY2MDAtMDQzZi0z MDU3LTlhZDQtNTUxNmE0OTk2ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWwKmwTy9eYlZxo9NvzMxIvlM0SDNgHv0tj/yRvNBO9DseQ2CnLP3LJ 8jMJdl1MBXr0k/7eKhg7sBFgjKzyLOV65L4hI+sbWmTIrQXEgTYKB1tdat+sAyVE oW6T97Q6RBt9+Vx3jRvPpo0VpndR3ItfX43CNSFpGRh7vyFIPVKm2oAS0CQb/LcF p490WVcsgDoY4bpAAXYcDLJBMfgVdHS8oM9xh/dJRpOxMW3LR++z+Y/EhwTKvepy ME92D+tWKwK8avGWk/oYn3+52E0iDkfSFr3iXsnMdjM99VPo/MEWGOticiVUKnmg 1HMN3yx8FQZtwmIOi6HeRZ76HA57iCI= -----END CERTIFICATE-----Generated at Tue Apr 29 10:18:10 2025 by rpki-client