$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3990e2cb-050a-3ce5-99bf-796a231d2912.roa File: 3990e2cb-050a-3ce5-99bf-796a231d2912.roa (raw, json) Hash identifier: LyjaKv0tJUy8yJW4vPxZQbe0d5zX/BCe7dc3f14CgU0= Subject key identifier: 8A:1E:B8:87:D1:51:3E:9F:00:74:2A:A2:01:C0:9B:09:A3:E1:BB:97 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A23BFFC2C5A768CAFB7729900 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3990e2cb-050a-3ce5-99bf-796a231d2912.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 272149 IP address blocks: 172.121.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:bf:fc:2c:5a:76:8c:af:b7:72:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=8cab7c7c-88a0-4d1e-a758-907de627f4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:d5:cc:c6:81:2f:81:97:f7:43:8c:e2:87: 40:cc:db:0c:0d:1f:4c:e3:ee:f0:92:e4:80:e4:9d: 49:17:13:56:1a:db:32:53:4c:1b:22:33:18:ba:42: 46:a0:e0:49:c8:98:62:56:1f:1b:de:ab:a7:53:59: 45:76:58:f0:7e:fc:7b:4c:ad:f3:65:01:3f:8f:e9: 24:3a:3a:f4:ba:a6:54:0f:c7:af:c7:72:e1:64:e2: 23:9d:ba:48:45:f8:13:e6:75:5f:f3:c6:37:66:b5: 85:a7:d1:6b:b3:e5:cf:11:ce:a0:0d:5f:4e:13:8f: fe:d9:48:cb:88:ac:34:80:12:d1:04:e2:e5:33:63: c6:ef:ce:db:ae:51:6d:3b:1a:c6:25:5b:4e:9f:3b: 6a:36:7d:62:44:68:ed:dc:47:d6:b5:e2:1c:3c:27: 5d:14:0f:72:e5:58:90:a5:8c:1e:81:6f:92:b1:f6: 2e:da:51:a8:81:50:7d:ab:e2:8b:a2:b5:10:eb:e9: ec:4b:b8:5e:37:3c:94:36:a5:0c:f5:52:40:ca:ef: 7d:29:37:ce:d0:9e:f9:25:c6:4e:ff:39:85:f4:37: 7b:98:07:4f:50:8a:75:20:c2:51:85:c5:e0:e0:27: a8:96:a9:a2:8d:b7:44:c3:4b:70:71:f9:17:92:36: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:B8:87:D1:51:3E:9F:00:74:2A:A2:01:C0:9B:09:A3:E1:BB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3990e2cb-050a-3ce5-99bf-796a231d2912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e2:ac:b3:fd:58:bd:d4:e3:99:ef:03:40:ef:06:ba:82:4f: e8:dd:73:a5:68:6f:22:33:e3:a1:bf:95:35:f2:f8:99:cc:9b: cf:c3:60:62:4f:01:ef:4d:4b:56:f5:4a:b6:bd:78:58:93:6b: 0a:72:c8:ec:ee:2e:1a:27:7b:5a:4a:fc:fa:ff:8b:e2:0f:55: a0:e9:9d:96:60:ea:cb:5d:b7:d1:6a:b5:10:3b:11:16:24:b9: c4:2e:35:5d:3b:b0:20:c3:96:58:d4:57:2c:8d:80:cd:cb:70: 87:01:6e:8b:55:9e:45:0b:eb:6f:c9:91:c4:57:64:57:91:3c: 67:f2:f1:bd:09:e6:c8:ab:9a:bc:c1:23:75:37:40:a3:7b:86: 32:8b:88:22:6c:d3:66:f1:c4:4b:a6:96:32:42:fc:5c:af:bf: 25:cb:84:f7:ee:a5:5a:16:7a:3d:b6:ba:48:70:a4:de:94:96: 13:c0:0b:cc:0c:68:ee:4f:2c:d8:b5:a2:7e:e0:aa:a7:ab:e1: 3f:0e:57:3b:1f:40:28:95:ce:69:ba:50:d6:2b:6c:02:5b:8c: 37:4c:e7:5d:6f:9b:2b:46:af:a4:f6:52:37:5f:b9:c8:9f:c1: 36:c7:dc:f5:c3:a4:8d:f5:83:98:ac:58:b8:e7:33:27:4a:c1: e2:c7:2e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojv/wsWnaMr7dymQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk OGNhYjdjN2MtODhhMC00ZDFlLWE3NTgtOTA3ZGU2MjdmNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqjVzMaBL4GX90OM4odAzNsMDR9M4+7wkuSA 5J1JFxNWGtsyU0wbIjMYukJGoOBJyJhiVh8b3qunU1lFdljwfvx7TK3zZQE/j+kk Ojr0uqZUD8evx3LhZOIjnbpIRfgT5nVf88Y3ZrWFp9Frs+XPEc6gDV9OE4/+2UjL iKw0gBLRBOLlM2PG787brlFtOxrGJVtOnztqNn1iRGjt3EfWteIcPCddFA9y5ViQ pYwegW+SsfYu2lGogVB9q+KLorUQ6+nsS7heNzyUNqUM9VJAyu99KTfO0J75JcZO /zmF9Dd7mAdPUIp1IMJRhcXg4CeolqmijbdEw0twcfkXkjbF2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoeuIfRUT6fAHQqogHAmwmj4buXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzk5MGUyY2ItMDUwYS0z Y2U1LTk5YmYtNzk2YTIzMWQyOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHirLP9WL3U45nvA0DvBrqCT+jdc6VobyIz46G/lTXy+JnMm8/DYGJP Ae9NS1b1Sra9eFiTawpyyOzuLhone1pK/Pr/i+IPVaDpnZZg6stdt9FqtRA7ERYk ucQuNV07sCDDlljUVyyNgM3LcIcBbotVnkUL62/JkcRXZFeRPGfy8b0J5sirmrzB I3U3QKN7hjKLiCJs02bxxEumljJC/FyvvyXLhPfupVoWej22ukhwpN6UlhPAC8wM aO5PLNi1on7gqqer4T8OVzsfQCiVzmm6UNYrbAJbjDdM511vmytGr6T2Ujdfucif wTbH3PXDpI31g5isWLjnMydKweLHLgI= -----END CERTIFICATE-----Generated at Sun Jun 15 06:03:37 2025 by rpki-client