$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/403a4b9e-eed9-3f12-823b-3ae3bfb70f28.roa File: 403a4b9e-eed9-3f12-823b-3ae3bfb70f28.roa (raw, json) Hash identifier: XThF913rAXlde9a5lB+PwapfZtDhIcEOufJTGzun+20= Subject key identifier: D6:A4:F0:A7:F3:40:74:A0:4A:73:BF:E4:BD:12:7E:58:3F:C3:33:13 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849A0C8D507DA6FE3B9AFC5CE80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/403a4b9e-eed9-3f12-823b-3ae3bfb70f28.roa Signing time: Thu 24 Apr 2025 03:07:49 +0000 ROA not before: Thu 24 Apr 2025 03:07:49 +0000 ROA not after: Wed 23 Jul 2025 03:07:49 +0000 asID: 62610 IP address blocks: 172.121.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:c8:d5:07:da:6f:e3:b9:af:c5:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 24 03:07:49 2025 GMT Not After : Jul 23 03:07:49 2025 GMT Subject: CN=667086d4-3fab-4355-aa2b-77e1d0e66fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:e1:c2:14:27:b9:71:fd:1e:23:52:3c:e5: 25:27:94:3f:de:b4:a7:a5:2d:ef:37:cc:81:c4:1e: 83:a6:89:8f:6f:d3:5a:df:cb:a3:44:ad:ee:b1:2d: 56:d5:33:37:69:c3:f0:0d:de:2f:b8:93:d1:1b:ec: 26:2e:ac:64:09:4a:17:db:aa:b8:90:97:73:31:ee: bd:d4:6c:0b:1f:de:9f:da:64:08:1a:7d:0b:9b:91: 5f:d7:8c:53:bf:97:6d:f8:49:81:89:50:7c:61:de: 8a:71:5c:3c:1e:6d:77:e0:7a:ad:28:95:47:23:73: 2f:17:61:99:b6:1d:1d:91:2e:04:3b:52:7f:32:73: 50:26:2d:d8:42:ff:f1:65:14:73:fa:48:fb:3b:4a: 2f:2f:5d:a5:be:17:05:3d:58:35:84:2b:83:20:82: 0e:8b:5d:e0:2c:6f:7e:0b:f0:5c:1a:02:73:74:bf: fe:49:af:54:3f:fa:67:e3:88:ef:34:7c:63:ae:b8: 1d:ab:3d:24:bb:2a:00:e8:79:ef:b9:86:28:5a:f6: 3f:c6:53:23:ec:07:f2:80:e2:b6:16:2c:b2:27:7a: 1d:e3:2f:06:ce:1c:62:a2:d2:7c:2c:cf:78:54:8b: d5:66:ef:42:b7:c5:0a:0c:a7:f9:86:83:a6:74:4f: b3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A4:F0:A7:F3:40:74:A0:4A:73:BF:E4:BD:12:7E:58:3F:C3:33:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/403a4b9e-eed9-3f12-823b-3ae3bfb70f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:13:61:10:2f:c8:33:88:03:ef:66:d5:f6:b2:7c:5a:c5:c1: ac:e1:41:d6:52:b7:62:13:77:61:bb:26:a0:63:c9:aa:1a:8b: 90:19:0c:7a:18:04:05:cf:a2:b3:f7:31:a3:ba:ee:bc:c9:ae: 1d:94:de:3f:19:67:f4:2a:0c:4d:be:67:a1:db:b9:96:b8:11: 4b:8e:e2:c5:71:58:f5:b2:04:c9:9a:3c:d2:45:f2:0e:d4:0f: 4a:9c:8a:8f:7e:69:80:ed:09:1c:73:dd:e4:c2:c8:7c:30:17: 02:00:48:57:20:1e:46:5f:02:55:15:75:08:05:9c:39:e1:c5: bd:fc:94:2f:b0:f8:17:88:b3:63:eb:f3:5f:b4:db:81:1e:87: 4c:a2:d2:a9:c6:67:48:6e:f3:fe:64:ac:84:f4:71:a0:6d:29: 12:21:80:24:4a:9c:af:b7:c0:82:eb:eb:6f:10:25:c2:db:c4: 8d:0d:fa:f4:fe:de:1e:dd:91:86:55:b6:fa:00:e6:88:58:b2: 3b:ba:2a:56:60:95:2b:07:e5:ff:87:7d:a0:55:3d:e5:b1:95: b6:95:27:e4:c4:ec:4c:c1:ce:2d:0c:89:00:bb:55:45:ba:9f: 52:54:71:da:92:50:14:1d:5b:67:3e:fe:e8:39:16:f5:8f:6f: 79:b6:01:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgyNUH2m/jua/FzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyNDAzMDc0OVoXDTI1MDcyMzAzMDc0OVowLzEtMCsGA1UEAxMk NjY3MDg2ZDQtM2ZhYi00MzU1LWFhMmItNzdlMWQwZTY2ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtbhwhQnuXH9HiNSPOUlJ5Q/3rSnpS3vN8yB xB6DpomPb9Na38ujRK3usS1W1TM3acPwDd4vuJPRG+wmLqxkCUoX26q4kJdzMe69 1GwLH96f2mQIGn0Lm5Ff14xTv5dt+EmBiVB8Yd6KcVw8Hm134HqtKJVHI3MvF2GZ th0dkS4EO1J/MnNQJi3YQv/xZRRz+kj7O0ovL12lvhcFPVg1hCuDIIIOi13gLG9+ C/BcGgJzdL/+Sa9UP/pn44jvNHxjrrgdqz0kuyoA6HnvuYYoWvY/xlMj7AfygOK2 FiyyJ3od4y8GzhxiotJ8LM94VIvVZu9Ct8UKDKf5hoOmdE+zCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNak8KfzQHSgSnO/5L0Sflg/wzMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDAzYTRiOWUtZWVkOS0z ZjEyLTgyM2ItM2FlM2JmYjcwZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8TYRAvyDOIA+9m1fayfFrFwazhQdZSt2ITd2G7JqBjyaoai5AZDHoY BAXPorP3MaO67rzJrh2U3j8ZZ/QqDE2+Z6HbuZa4EUuO4sVxWPWyBMmaPNJF8g7U D0qcio9+aYDtCRxz3eTCyHwwFwIASFcgHkZfAlUVdQgFnDnhxb38lC+w+BeIs2Pr 81+024Eeh0yi0qnGZ0hu8/5krIT0caBtKRIhgCRKnK+3wILr628QJcLbxI0N+vT+ 3h7dkYZVtvoA5ohYsju6KlZglSsH5f+HfaBVPeWxlbaVJ+TE7EzBzi0MiQC7VUW6 n1JUcdqSUBQdW2c+/ug5FvWPb3m2AQM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:18 2025 by rpki-client