$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa File: 3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa (raw, json) Hash identifier: 6V5wUXJh6qRqZZ47M2wdwz/Vg+D1gsBVW45feEn5OD0= Subject key identifier: 73:79:43:DE:9A:B9:AE:B5:A6:BE:70:01:A0:40:D6:24:DB:2D:32:97 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F860E714B99F69F5B8A5813C Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa Signing time: Sun 25 May 2025 12:09:33 +0000 ROA not before: Sun 25 May 2025 12:09:33 +0000 ROA not after: Sat 23 Aug 2025 12:09:33 +0000 asID: 214238 IP address blocks: 172.120.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:60:e7:14:b9:9f:69:f5:b8:a5:81:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 12:09:33 2025 GMT Not After : Aug 23 12:09:33 2025 GMT Subject: CN=7f891f62-aa36-44f4-810c-0a3e1829fce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:3c:91:95:af:c1:a0:ca:3c:8d:e7:0a:7f: f9:7f:6b:10:37:ec:7b:bb:62:fe:3a:c3:af:fc:54: d2:86:7b:66:86:a6:b5:b1:ea:25:83:25:a9:d1:88: 83:f1:a6:bf:c5:0d:49:33:ed:80:6b:13:67:b5:ef: 4e:d9:1f:77:87:e8:d9:09:a7:27:eb:88:6a:5f:c1: 34:ad:18:d2:a3:85:2b:d2:bd:5c:7b:11:da:c5:3c: c7:e6:e6:73:f7:40:23:07:e9:95:84:f8:b4:1f:76: 35:99:5a:df:af:e0:45:0e:33:f7:1a:c9:61:c1:85: a5:13:27:05:a3:a1:8c:4f:0a:03:38:da:b2:ac:c8: a4:bb:77:82:dd:fd:48:1a:46:1d:a7:3b:f2:c3:0e: a8:1c:61:a8:fa:22:39:2c:82:38:53:44:5a:6e:63: c5:cc:8f:66:5e:37:a0:1b:63:3b:17:0e:fd:d3:bc: bb:77:3d:3d:dc:eb:5e:63:4c:97:5c:92:0c:ce:07: f5:5b:30:32:c0:f5:da:16:ed:a6:03:cd:03:5b:46: 5e:7d:27:e3:15:82:3e:71:1a:39:54:f3:39:4a:d0: f4:da:f4:55:21:c1:da:bc:36:44:de:81:6a:b1:1c: 00:da:88:d0:63:9e:a1:24:9b:de:a4:38:c6:23:f7: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:79:43:DE:9A:B9:AE:B5:A6:BE:70:01:A0:40:D6:24:DB:2D:32:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8a:8f:7a:1f:81:85:95:db:d9:a7:b9:c9:42:1e:50:14:ce: 2d:e8:c3:54:4d:db:5f:26:6f:54:13:85:c3:96:47:98:8f:b8: 6e:47:f0:c8:bd:f9:86:c2:da:0f:9d:c4:3b:f8:9b:f0:7a:0e: 85:af:76:1f:d4:7b:39:fc:75:eb:c7:bc:ec:96:d7:49:e1:70: 0f:23:5f:82:03:90:9c:0f:43:20:e5:95:4b:3b:c0:31:a0:a1: bd:23:eb:4e:31:a2:60:43:f3:47:5c:c0:25:e7:e8:0e:4f:1f: b4:46:81:12:3a:6c:50:57:73:70:f0:37:c4:aa:90:f4:a0:78: 57:7d:2f:fc:da:d0:a7:0f:4c:3c:fe:b8:5d:30:f3:96:a3:9d: 3c:15:39:94:4a:1e:f5:b4:7e:08:f9:5b:25:58:bf:65:76:15: 78:4b:e1:54:91:20:a5:7f:03:fd:32:e9:6d:03:db:11:c3:d6: af:c9:ca:de:c8:21:5f:81:e5:64:81:6a:f1:41:2f:12:98:08: a0:d4:a9:45:02:bd:2a:01:ab:41:c5:6d:16:fa:c0:c3:88:9a: 5f:ef:bc:66:50:2f:87:2a:5c:b9:5f:96:95:f6:96:4d:de:33: ae:65:b9:b4:53:08:e4:97:3b:af:e9:17:2e:f5:1f:82:87:ae: 12:1c:69:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4YOcUuZ9p9bilgTwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyNTEyMDkzM1oXDTI1MDgyMzEyMDkzM1owLzEtMCsGA1UEAxMk N2Y4OTFmNjItYWEzNi00NGY0LTgxMGMtMGEzZTE4MjlmY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8c8kZWvwaDKPI3nCn/5f2sQN+x7u2L+OsOv /FTShntmhqa1seolgyWp0YiD8aa/xQ1JM+2AaxNnte9O2R93h+jZCacn64hqX8E0 rRjSo4Ur0r1cexHaxTzH5uZz90AjB+mVhPi0H3Y1mVrfr+BFDjP3GslhwYWlEycF o6GMTwoDONqyrMiku3eC3f1IGkYdpzvyww6oHGGo+iI5LII4U0RabmPFzI9mXjeg G2M7Fw7907y7dz093OteY0yXXJIMzgf1WzAywPXaFu2mA80DW0ZefSfjFYI+cRo5 VPM5StD02vRVIcHavDZE3oFqsRwA2ojQY56hJJvepDjGI/fYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN5Q96aua61pr5wAaBA1iTbLTKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2JjYjczMzctN2FmYS0z MGJhLThkMGItNGZlMjgzNDQxYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKKj3ofgYWV29mnuclCHlAUzi3ow1RN218mb1QThcOWR5iPuG5H8Mi9 +YbC2g+dxDv4m/B6DoWvdh/Uezn8devHvOyW10nhcA8jX4IDkJwPQyDllUs7wDGg ob0j604xomBD80dcwCXn6A5PH7RGgRI6bFBXc3DwN8SqkPSgeFd9L/za0KcPTDz+ uF0w85ajnTwVOZRKHvW0fgj5WyVYv2V2FXhL4VSRIKV/A/0y6W0D2xHD1q/Jyt7I IV+B5WSBavFBLxKYCKDUqUUCvSoBq0HFbRb6wMOIml/vvGZQL4cqXLlflpX2lk3e M65lubRTCOSXO6/pFy71H4KHrhIcaYU= -----END CERTIFICATE-----Generated at Mon Jun 16 14:56:20 2025 by rpki-client