$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f48824-5614-3523-b565-6ded65ed24c0.roa File: 38f48824-5614-3523-b565-6ded65ed24c0.roa (raw, json) Hash identifier: hJQsWZZlrbbsJU6HgIMwtXAq3K1FoEXFzWVx1LOmdVs= Subject key identifier: 95:36:9A:F6:72:16:73:61:FA:14:2F:1D:14:C0:88:3E:47:8F:3F:55 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499F24BC16178DBD1D0DAE6920 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f48824-5614-3523-b565-6ded65ed24c0.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 142.252.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bc:16:17:8d:bd:1d:0d:ae:69:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=a5b40f61-b03e-42e6-926a-8d6cab625d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:cf:d5:98:24:e1:4b:54:36:57:0c:bd:37: b1:c3:bd:38:10:03:89:12:05:00:85:a9:95:29:1e: d7:49:b2:c5:75:b4:02:3c:59:67:25:ef:79:2d:37: 50:c2:a6:58:91:7d:fe:38:29:bf:4d:be:f6:59:96: d9:a2:87:22:85:89:af:2b:a3:af:6c:12:c4:f0:82: 3a:ba:5b:3d:a2:c1:4f:a3:cb:bb:c6:f6:68:c8:22: 58:62:5a:75:b9:44:46:0d:0a:d6:0a:97:96:b2:74: 4b:57:bf:87:85:4a:1c:e6:e3:18:9b:20:3b:15:ee: 62:49:42:a2:2f:03:02:64:ab:02:98:46:89:14:4d: 39:b8:47:d4:a9:e6:29:ad:e8:a8:82:50:db:b7:da: 15:9c:d4:91:fa:55:0a:e3:2d:3f:3b:7a:99:cb:a1: 16:69:76:d5:fd:c6:0c:3a:53:25:0f:2b:c5:09:6b: e0:12:42:3b:31:32:53:6e:94:85:aa:5a:3f:2d:ca: 31:21:12:9e:3e:84:db:a2:90:04:88:28:e4:5c:9b: d2:ad:b0:c9:e8:9d:f4:32:5e:56:3c:f9:35:fe:91: 36:7b:9c:83:b6:31:eb:24:98:b8:8a:9b:13:e2:69: fb:53:e0:53:e5:8a:3a:f1:4f:7c:5d:c2:87:2c:de: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:36:9A:F6:72:16:73:61:FA:14:2F:1D:14:C0:88:3E:47:8F:3F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f48824-5614-3523-b565-6ded65ed24c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:88:a2:92:cf:35:7d:e5:28:d3:9b:56:69:91:3b:91:a7:78: f0:7f:bc:3a:f8:f5:76:d5:7c:5e:8b:67:8f:75:d5:cc:09:d5: fd:61:ca:c1:03:30:c2:4c:1f:12:db:ba:6c:52:b3:36:0a:37: f9:f0:70:b3:12:28:c6:95:a4:8f:a4:53:45:e5:ec:d8:e6:b6: e9:9e:70:b2:0f:f7:f9:bf:bc:43:84:5c:57:ed:6b:d9:fb:59: 06:6b:91:01:3d:cb:05:b2:38:e1:e5:2b:41:ff:10:ff:ad:87: 82:45:3a:42:c4:c2:22:97:cc:40:cc:16:8d:66:cc:a7:df:21: 2c:ce:42:c3:11:0a:17:0c:10:fc:9b:19:f4:fd:f5:ad:a2:62: 58:96:f9:ef:04:ad:dc:e9:69:46:13:f7:d4:3c:97:a4:0f:14: 53:b9:df:40:32:b2:f3:b8:7c:e8:ed:cf:e4:53:f6:ce:7d:5e: ef:f6:60:de:61:9e:29:eb:39:fc:d2:cf:b6:37:e6:8a:95:65: a0:f4:4f:1a:a1:eb:1c:0b:e9:93:32:a8:c6:54:dd:8b:a3:69: 42:4a:7c:05:bc:22:64:4a:81:31:e7:53:ef:9c:9d:59:c5:f9: 31:e3:1c:ec:f8:28:4d:5b:2d:29:a1:0b:68:fb:ec:b8:9c:55: af:3e:3e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLwWF429HQ2uaSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YTViNDBmNjEtYjAzZS00MmU2LTkyNmEtOGQ2Y2FiNjI1ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh53P1Zgk4UtUNlcMvTexw704EAOJEgUAhamV KR7XSbLFdbQCPFlnJe95LTdQwqZYkX3+OCm/Tb72WZbZoocihYmvK6OvbBLE8II6 uls9osFPo8u7xvZoyCJYYlp1uURGDQrWCpeWsnRLV7+HhUoc5uMYmyA7Fe5iSUKi LwMCZKsCmEaJFE05uEfUqeYpreioglDbt9oVnNSR+lUK4y0/O3qZy6EWaXbV/cYM OlMlDyvFCWvgEkI7MTJTbpSFqlo/LcoxIRKePoTbopAEiCjkXJvSrbDJ6J30Ml5W PPk1/pE2e5yDtjHrJJi4ipsT4mn7U+BT5Yo68U98XcKHLN6vnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU2mvZyFnNh+hQvHRTAiD5Hjz9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzhmNDg4MjQtNTYxNC0z NTIzLWI1NjUtNmRlZDY1ZWQyNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGIopLPNX3lKNObVmmRO5GnePB/vDr49XbVfF6LZ4911cwJ1f1hysED MMJMHxLbumxSszYKN/nwcLMSKMaVpI+kU0Xl7NjmtumecLIP9/m/vEOEXFfta9n7 WQZrkQE9ywWyOOHlK0H/EP+th4JFOkLEwiKXzEDMFo1mzKffISzOQsMRChcMEPyb GfT99a2iYliW+e8ErdzpaUYT99Q8l6QPFFO530AysvO4fOjtz+RT9s59Xu/2YN5h ninrOfzSz7Y35oqVZaD0Txqh6xwL6ZMyqMZU3YujaUJKfAW8ImRKgTHnU++cnVnF +THjHOz4KE1bLSmhC2j77LicVa8+PkI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:15:02 2025 by rpki-client