$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/255596c4-8d7c-35d6-b537-ad1861614dd6.roa File: 255596c4-8d7c-35d6-b537-ad1861614dd6.roa (raw, json) Hash identifier: 4KPDoYXfenLKsZKS+pbGwFvC73pgas4yKzxgQz5DhJc= Subject key identifier: 90:1A:AB:72:05:81:92:45:C7:A1:91:38:3D:06:29:85:8D:85:41:5E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858498A3459C25A90D70244C82480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/255596c4-8d7c-35d6-b537-ad1861614dd6.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 18779 IP address blocks: 172.121.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:59:c2:5a:90:d7:02:44:c8:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=40831e87-890f-43a2-8506-1ed8fda284e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:90:4d:5c:1a:e6:df:f6:6b:c5:29:6b:71: 8c:04:69:b8:f5:e5:a0:fe:fe:11:c4:46:ba:dd:cb: 73:03:a6:86:7e:41:47:5d:87:fa:6d:9d:26:f6:f9: e2:f5:52:8e:9b:e8:e6:7f:da:87:62:68:9c:f4:45: 8b:1f:32:c3:bf:12:ef:88:b8:8e:59:93:28:74:7e: a2:ec:7e:9b:f5:0d:a0:0a:f8:60:02:e5:17:9d:24: 01:73:21:4e:64:fc:af:7c:59:e5:8c:88:e6:ae:11: d1:d2:c1:42:d4:c0:90:53:2f:50:e2:7d:9e:20:50: 48:2f:d9:8d:50:83:af:36:33:7b:03:68:4d:cc:8d: 2e:84:42:57:83:61:e6:bb:eb:b3:d3:e1:b3:57:fa: c0:44:be:02:9f:de:1b:39:ba:e2:06:48:bd:dc:89: 7b:15:f2:1d:0f:dc:30:ff:8e:c0:8a:5a:d8:ac:7d: eb:03:89:50:00:5b:0a:a2:06:66:08:cf:52:a0:16: 50:90:08:de:94:c8:3b:03:3f:14:05:4a:f7:12:86: f0:8e:a0:d0:f2:28:54:ab:84:0c:6c:bd:44:c4:88: c1:bf:de:9b:74:7a:5d:9e:6e:c8:82:90:89:46:6b: 07:f9:dd:01:17:9d:9a:fe:5c:02:e1:65:d2:6e:86: 34:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1A:AB:72:05:81:92:45:C7:A1:91:38:3D:06:29:85:8D:85:41:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/255596c4-8d7c-35d6-b537-ad1861614dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:dc:b3:4f:4d:25:12:46:4a:c3:17:62:64:94:00:29:e1:26: 4e:1a:77:1f:0c:02:6e:28:c2:7c:f0:e0:be:7e:b1:a7:21:79: f0:14:1c:7b:41:55:9c:78:7e:c6:a8:75:c9:a9:ac:43:e6:08: dd:65:04:1e:18:1a:11:24:89:49:04:da:62:a8:1a:de:84:8d: bc:d2:b6:72:ff:e7:50:2e:42:32:cf:ff:dd:84:79:e7:99:13: 1f:c5:09:50:a9:1a:a0:8d:6e:ca:13:48:c9:e0:2f:18:75:19: b4:7c:9d:fc:51:57:a8:66:86:55:df:10:17:c7:0b:bc:85:f0: 9e:70:9e:83:cf:44:a8:cb:15:fc:ba:f2:73:68:6e:d8:6e:48: ad:42:e8:3a:a0:bf:71:21:33:7f:5d:6b:08:fb:7a:09:84:d7: d8:69:72:78:ea:be:26:16:8a:9f:9d:bf:3a:54:40:6c:60:e4: e1:80:28:ad:81:ac:32:87:00:24:c8:26:fc:e0:8f:52:f6:5b: 2d:09:bd:25:97:59:cc:10:b0:2b:83:dd:df:77:0b:7e:9c:b3: 35:2a:e8:61:1e:17:dd:bb:76:6d:af:12:63:c8:d0:2c:73:b4: f8:dc:e8:a6:97:4f:7a:fb:12:c3:89:05:cf:af:12:e0:c3:3b: 07:07:7b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNFnCWpDXAkTIJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NDA4MzFlODctODkwZi00M2EyLTg1MDYtMWVkOGZkYTI4NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx6QTVwa5t/2a8Upa3GMBGm49eWg/v4RxEa6 3ctzA6aGfkFHXYf6bZ0m9vni9VKOm+jmf9qHYmic9EWLHzLDvxLviLiOWZModH6i 7H6b9Q2gCvhgAuUXnSQBcyFOZPyvfFnljIjmrhHR0sFC1MCQUy9Q4n2eIFBIL9mN UIOvNjN7A2hNzI0uhEJXg2Hmu+uz0+GzV/rARL4Cn94bObriBki93Il7FfIdD9ww /47AilrYrH3rA4lQAFsKogZmCM9SoBZQkAjelMg7Az8UBUr3EobwjqDQ8ihUq4QM bL1ExIjBv96bdHpdnm7IgpCJRmsH+d0BF52a/lwC4WXSboY0SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAaq3IFgZJFx6GROD0GKYWNhUFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjU1NTk2YzQtOGQ3Yy0z NWQ2LWI1MzctYWQxODYxNjE0ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDcs09NJRJGSsMXYmSUACnhJk4adx8MAm4ownzw4L5+sachefAUHHtB VZx4fsaodcmprEPmCN1lBB4YGhEkiUkE2mKoGt6EjbzStnL/51AuQjLP/92EeeeZ Ex/FCVCpGqCNbsoTSMngLxh1GbR8nfxRV6hmhlXfEBfHC7yF8J5wnoPPRKjLFfy6 8nNobthuSK1C6Dqgv3EhM39dawj7egmE19hpcnjqviYWip+dvzpUQGxg5OGAKK2B rDKHACTIJvzgj1L2Wy0JvSWXWcwQsCuD3d93C36cszUq6GEeF927dm2vEmPI0Cxz tPjc6KaXT3r7EsOJBc+vEuDDOwcHe1Y= -----END CERTIFICATE-----Generated at Sun Apr 27 04:04:52 2025 by rpki-client