$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ecac3b-ca84-36f9-82a6-375b32d4a931.roa File: 38ecac3b-ca84-36f9-82a6-375b32d4a931.roa (raw, json) Hash identifier: qdT53gMLZZ+iUZ5ALstMZBrvSulbu0tRiaZ21D6ejBk= Subject key identifier: EB:65:4A:DB:3F:E6:15:0D:B4:1F:91:15:DA:D4:B5:90:A8:2F:9D:E0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849244E75D6A6258401F7517300 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ecac3b-ca84-36f9-82a6-375b32d4a931.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 2914 IP address blocks: 172.120.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:75:d6:a6:25:84:01:f7:51:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=5b2307f0-c445-415e-94c6-a01bff4de67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:5b:04:b8:31:9d:c8:3e:a3:22:5f:7a:db: 6c:7d:cc:ed:19:51:44:ee:a2:d9:01:7a:85:5f:33: fe:26:ed:46:96:f6:f2:cc:b7:9b:81:96:f9:ce:41: 58:49:cc:a9:13:6d:3d:5c:33:05:ca:15:72:3e:f3: 6f:e4:4d:d6:b3:b6:ce:cb:72:0a:bb:1c:4d:be:ba: 0d:79:ef:ff:df:1a:9d:ff:1e:9c:0e:88:df:96:68: 63:ca:96:1f:a1:8e:7b:9e:a2:26:d0:b1:62:54:02: 3b:18:4b:35:91:a6:42:7a:5a:2c:c5:84:9d:ef:81: 69:7e:99:bb:74:e8:50:7b:20:31:c3:4d:f8:34:45: 10:94:36:32:bd:35:da:61:67:0e:15:a8:d3:77:ad: 56:80:18:09:ce:38:5a:4f:d8:c2:94:81:d5:89:f9: 84:5e:d2:da:77:ba:b1:24:d2:ab:34:bc:43:cc:54: 00:4e:b8:66:69:ea:44:94:b3:e0:26:90:fd:a6:ed: 38:e0:86:2c:5c:00:36:a3:f1:d3:26:16:d1:e9:33: 71:75:fe:2c:ea:96:17:49:51:c8:ed:cb:f4:1e:b5: 3e:bd:a5:f6:b2:ad:0c:8e:67:e6:80:3b:45:a5:d4: 1d:d7:2a:8a:e0:c0:4c:03:0d:91:ef:93:51:6e:15: 38:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:65:4A:DB:3F:E6:15:0D:B4:1F:91:15:DA:D4:B5:90:A8:2F:9D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ecac3b-ca84-36f9-82a6-375b32d4a931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:52:11:9d:2b:90:98:70:62:f2:bd:b7:a0:78:f3:e5:01:3c: 73:f2:61:e5:51:56:20:b7:b9:bc:15:81:36:2c:7b:4e:35:53: 39:c3:b5:7c:0e:ea:1a:6b:81:a4:b2:63:b9:6b:80:15:84:e9: 14:89:a6:94:6a:1f:59:0a:79:1d:b4:0f:f1:d1:75:5c:6a:6c: 0a:bd:72:60:63:ed:93:41:6c:3f:00:87:eb:52:16:83:f0:b6: 93:03:e2:a6:90:62:1c:9a:42:60:da:3c:6b:86:c7:30:fa:77: 51:d3:cc:62:a9:cb:57:c5:1b:50:d6:00:53:71:8a:3e:c2:a5: 68:42:38:5a:0c:84:18:6c:76:12:15:c4:b9:8f:57:14:fb:43: b9:b5:76:34:b8:92:12:3a:58:cc:19:e8:d9:48:98:fd:58:8d: a3:31:e0:5f:d0:c3:14:0c:63:e4:a4:d8:3d:38:d0:5e:1a:9a: ee:f2:48:30:fd:e0:a6:89:1b:4c:c0:fd:a8:df:f5:b4:0f:0f: 7f:24:11:8f:23:71:d1:83:c1:31:21:2c:c4:a2:de:50:03:af: 63:72:27:2c:a2:71:c2:7c:57:f3:d2:c7:f2:fe:44:8c:88:fc: 67:45:7e:24:bb:2e:75:63:57:58:45:97:ab:35:39:63:c8:df: 9e:a8:28:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnXWpiWEAfdRcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NWIyMzA3ZjAtYzQ0NS00MTVlLTk0YzYtYTAxYmZmNGRlNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit5bBLgxncg+oyJfettsfcztGVFE7qLZAXqF XzP+Ju1GlvbyzLebgZb5zkFYScypE209XDMFyhVyPvNv5E3Ws7bOy3IKuxxNvroN ee//3xqd/x6cDojflmhjypYfoY57nqIm0LFiVAI7GEs1kaZCelosxYSd74Fpfpm7 dOhQeyAxw034NEUQlDYyvTXaYWcOFajTd61WgBgJzjhaT9jClIHVifmEXtLad7qx JNKrNLxDzFQATrhmaepElLPgJpD9pu044IYsXAA2o/HTJhbR6TNxdf4s6pYXSVHI 7cv0HrU+vaX2sq0MjmfmgDtFpdQd1yqK4MBMAw2R75NRbhU4zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtlSts/5hUNtB+RFdrUtZCoL53gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzhlY2FjM2ItY2E4NC0z NmY5LTgyYTYtMzc1YjMyZDRhOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHguMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9SEZ0rkJhwYvK9t6B48+UBPHPyYeVRViC3ubwVgTYse041UznDtXwO 6hprgaSyY7lrgBWE6RSJppRqH1kKeR20D/HRdVxqbAq9cmBj7ZNBbD8Ah+tSFoPw tpMD4qaQYhyaQmDaPGuGxzD6d1HTzGKpy1fFG1DWAFNxij7CpWhCOFoMhBhsdhIV xLmPVxT7Q7m1djS4khI6WMwZ6NlImP1YjaMx4F/QwxQMY+Sk2D040F4amu7ySDD9 4KaJG0zA/ajf9bQPD38kEY8jcdGDwTEhLMSi3lADr2NyJyyiccJ8V/PSx/L+RIyI /GdFfiS7LnVjV1hFl6s1OWPI356oKFc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:47 2025 by rpki-client