$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32ba1754-5345-3aa9-bc5d-397699fb7af3.roa File: 32ba1754-5345-3aa9-bc5d-397699fb7af3.roa (raw, json) Hash identifier: UoNZXDQLPCcvkbLvODXErg8xpYcXJ1toErjPIavxV/I= Subject key identifier: 47:C0:F3:84:96:41:A0:D9:A2:D6:7A:09:87:22:F3:EB:E0:81:75:47 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584980E700739812C0725D8EDBC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32ba1754-5345-3aa9-bc5d-397699fb7af3.roa Signing time: Sat 12 Apr 2025 17:02:44 +0000 ROA not before: Sat 12 Apr 2025 17:02:44 +0000 ROA not after: Fri 11 Jul 2025 17:02:44 +0000 asID: 18779 IP address blocks: 142.252.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:e7:00:73:98:12:c0:72:5d:8e:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 12 17:02:44 2025 GMT Not After : Jul 11 17:02:44 2025 GMT Subject: CN=73b0626f-8e6f-497a-9712-84686b4e8100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:c6:ec:8e:22:c0:74:3c:14:c2:ed:49:bc: 2c:8a:59:67:26:9a:0d:be:f7:f8:67:19:79:5e:c2: 72:ce:53:da:b6:ed:35:ee:ce:d4:0a:ad:89:6a:9b: 20:89:b2:fa:46:15:9d:a8:75:9e:f6:cd:92:d0:24: c2:43:41:72:1b:88:9f:9c:da:49:58:92:37:56:e0: 0d:da:53:7a:f9:92:9a:75:eb:95:56:66:8d:ac:22: d4:59:37:b1:27:f1:fc:18:15:45:f3:5e:72:70:8b: 82:36:5f:78:33:7f:34:5e:c9:d7:d2:c2:a7:c9:66: 73:f5:2c:e8:4c:4a:dc:b4:0c:f8:e9:9d:9b:0d:59: 46:44:8e:93:62:f3:f8:a0:17:1d:a0:f6:fe:75:77: 22:a5:64:a0:e3:e3:67:a3:5a:92:1c:1e:a4:4d:bd: 49:78:01:5c:09:30:96:7d:e8:e6:77:16:c5:95:b1: 33:47:82:b9:57:9d:4f:b2:80:8b:6f:4c:d8:01:d6: a7:5b:f1:bd:67:6c:a8:55:8a:c1:ce:0b:77:a2:79: cc:8d:f1:62:11:a2:75:cc:8b:3b:56:5c:9c:32:a5: cc:82:43:57:cb:59:9d:15:e7:f3:bd:e9:13:68:7e: f9:2a:e2:d2:24:9e:9c:07:69:4d:d5:05:fa:b9:c5: 26:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:F3:84:96:41:A0:D9:A2:D6:7A:09:87:22:F3:EB:E0:81:75:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32ba1754-5345-3aa9-bc5d-397699fb7af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ca:9a:91:f0:ab:d2:bd:ab:fa:ba:6f:63:16:43:5f:24:21: b2:7d:9d:6a:84:dd:e5:bb:d1:19:09:8d:1b:86:1f:87:d2:fb: 15:f5:1a:69:ad:97:1d:95:79:a4:ae:9c:6d:5b:77:23:2e:2d: cc:6e:b4:c1:36:91:e4:b6:0a:f6:75:26:db:01:6b:f6:f3:ac: 50:92:b0:f6:20:b8:92:0c:32:56:f6:20:f3:47:ef:a9:70:b4: 11:c2:cd:9e:f5:86:c7:1c:73:1a:d6:00:6d:5c:9c:5b:25:aa: a0:24:5f:11:33:38:b6:99:c1:e2:6a:15:3f:de:ac:2a:12:e2: dc:b9:f2:63:77:ac:af:b9:16:41:a6:45:21:af:ed:af:9a:a1: 56:88:cf:30:2e:1b:31:a0:18:aa:ed:ac:8c:2a:99:26:55:fa: 89:cd:dd:6f:03:de:9d:37:90:ce:17:ec:1d:a0:2c:cd:2f:6f: 1e:12:21:5e:87:bd:97:93:62:e6:98:0f:39:10:b0:c6:93:73: 68:f8:41:1f:bb:e1:60:bb:2d:40:07:8d:11:90:c3:3d:68:22: 25:2f:b9:0b:40:5c:af:83:3c:48:b3:6d:8d:43:f2:94:03:c1: 20:36:97:fb:3f:dd:07:e5:ad:c6:5f:96:8f:1e:a3:96:7b:91: d0:56:47:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmA5wBzmBLAcl2O28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxMjE3MDI0NFoXDTI1MDcxMTE3MDI0NFowLzEtMCsGA1UEAxMk NzNiMDYyNmYtOGU2Zi00OTdhLTk3MTItODQ2ODZiNGU4MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/HG7I4iwHQ8FMLtSbwsillnJpoNvvf4Zxl5 XsJyzlPatu017s7UCq2JapsgibL6RhWdqHWe9s2S0CTCQ0FyG4ifnNpJWJI3VuAN 2lN6+ZKadeuVVmaNrCLUWTexJ/H8GBVF815ycIuCNl94M380XsnX0sKnyWZz9Szo TErctAz46Z2bDVlGRI6TYvP4oBcdoPb+dXcipWSg4+Nno1qSHB6kTb1JeAFcCTCW fejmdxbFlbEzR4K5V51PsoCLb0zYAdanW/G9Z2yoVYrBzgt3onnMjfFiEaJ1zIs7 VlycMqXMgkNXy1mdFefzvekTaH75KuLSJJ6cB2lN1QX6ucUmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfA84SWQaDZotZ6CYci8+vggXVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzJiYTE3NTQtNTM0NS0z YWE5LWJjNWQtMzk3Njk5ZmI3YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvy7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzKmpHwq9K9q/q6b2MWQ18kIbJ9nWqE3eW70RkJjRuGH4fS+xX1Gmmt lx2VeaSunG1bdyMuLcxutME2keS2CvZ1JtsBa/bzrFCSsPYguJIMMlb2IPNH76lw tBHCzZ71hscccxrWAG1cnFslqqAkXxEzOLaZweJqFT/erCoS4ty58mN3rK+5FkGm RSGv7a+aoVaIzzAuGzGgGKrtrIwqmSZV+onN3W8D3p03kM4X7B2gLM0vbx4SIV6H vZeTYuaYDzkQsMaTc2j4QR+74WC7LUAHjRGQwz1oIiUvuQtAXK+DPEizbY1D8pQD wSA2l/s/3QflrcZflo8eo5Z7kdBWR5M= -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:14 2025 by rpki-client