$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa File: 40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa (raw, json) Hash identifier: F9u+EuZpjBLCmM/ZLhAQx2JMsr9oPma9MY0jOqRElo8= Subject key identifier: 44:52:33:78:45:A3:2B:D3:EE:53:1C:8D:FF:9C:A6:24:3C:2D:25:3F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858498A345CBC8CA56058F9A3BBC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 18779 IP address blocks: 172.121.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5c:bc:8c:a5:60:58:f9:a3:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=6bf54ad5-dca0-4a9a-a9a7-39e7a662dcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:f3:f4:0f:ca:a9:f4:1a:8a:ec:3b:d9:b6: 87:f7:c5:96:f3:44:97:2d:1e:98:45:49:2b:54:98: 3d:66:cc:d5:81:e5:02:34:4a:a4:b3:96:ce:bd:85: f2:49:68:57:85:07:6e:a1:f5:45:8b:4e:f3:03:3a: 6b:ba:b8:d8:a6:04:a8:c8:c2:08:b5:7b:c8:65:07: 52:2b:ef:bf:9d:44:e8:63:67:52:80:cc:eb:0e:b0: 0a:bc:72:5c:f7:0e:fa:7e:7c:08:49:fc:5d:a7:d0: 92:27:87:fe:48:1e:7e:f4:5e:75:17:8d:c5:20:aa: f8:d0:27:51:b9:db:57:fa:cb:1f:0c:ea:e8:1f:2e: 30:11:f8:31:4a:93:f9:67:ae:8c:b7:a6:64:13:7a: 8b:2c:f0:c2:3d:e2:51:38:2a:3d:11:2d:b3:37:c4: c9:66:11:06:d9:7a:ff:69:42:fc:ad:71:01:24:99: f3:eb:cb:ed:25:6a:9a:a7:df:7b:b2:0d:c6:47:54: 15:1f:68:1e:50:d9:25:e6:04:e1:89:97:83:29:8c: 02:5e:6d:70:bc:9c:b1:0c:95:9b:3e:66:6e:80:a0: 8e:94:6a:c0:24:cc:4e:f2:24:65:37:8f:e0:1f:6d: 07:df:0e:99:6e:6b:53:9a:47:39:1a:e0:9b:54:ff: 9a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:33:78:45:A3:2B:D3:EE:53:1C:8D:FF:9C:A6:24:3C:2D:25:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:72:7b:d5:b6:c1:9f:d7:c2:57:a4:78:8c:76:d8:e1:14:a3: b2:38:ab:51:25:63:ba:78:1c:ed:4b:41:1d:08:32:01:4a:d0: 58:01:19:c3:63:46:28:00:5c:6e:f1:09:ac:ae:01:6e:16:b3: c2:86:dd:3f:15:65:b2:ab:92:86:a3:4e:fe:c6:40:7a:d1:00: 25:75:29:f7:96:20:39:b6:04:46:fb:a9:92:22:ef:c3:b1:81: 98:73:b4:a6:d1:c9:fa:b6:32:e1:e8:7d:05:bb:42:45:80:37: e7:bc:b8:3f:11:61:05:65:ae:5f:4d:44:e7:99:2f:e2:78:14: 13:26:0d:2c:30:62:a4:f2:5a:c2:e6:39:1e:b6:d5:d7:ff:48: ae:07:42:87:1e:19:a9:dd:cf:6e:41:a2:81:db:1a:fb:4c:21: cc:a4:d6:63:a2:59:7a:c5:7d:5e:48:d2:41:8a:f9:4b:08:82: ff:c5:6c:df:73:82:04:01:66:ee:7c:45:e8:34:64:d5:50:ea: 7b:b4:17:2b:03:97:7b:f4:b1:6f:4e:a9:08:06:51:2c:da:a6: 67:0b:6d:64:5b:27:a1:de:6d:8c:02:fb:65:24:16:38:4d:d7: 69:37:cd:ce:fa:70:73:a1:48:3f:1e:7b:f0:dd:70:f1:be:96: 6a:bd:83:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNFy8jKVgWPmju8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NmJmNTRhZDUtZGNhMC00YTlhLWE5YTctMzllN2E2NjJkY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8nz9A/KqfQaiuw72baH98WW80SXLR6YRUkr VJg9ZszVgeUCNEqks5bOvYXySWhXhQduofVFi07zAzprurjYpgSoyMIItXvIZQdS K++/nUToY2dSgMzrDrAKvHJc9w76fnwISfxdp9CSJ4f+SB5+9F51F43FIKr40CdR udtX+ssfDOroHy4wEfgxSpP5Z66Mt6ZkE3qLLPDCPeJROCo9ES2zN8TJZhEG2Xr/ aUL8rXEBJJnz68vtJWqap997sg3GR1QVH2geUNkl5gThiZeDKYwCXm1wvJyxDJWb PmZugKCOlGrAJMxO8iRlN4/gH20H3w6ZbmtTmkc5GuCbVP+avQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERSM3hFoyvT7lMcjf+cpiQ8LSU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDBkNjQ0ZDQtYzk4ZC0z Y2U5LThjMWItOTg2YTBlODNiOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZye9W2wZ/XwlekeIx22OEUo7I4q1ElY7p4HO1LQR0IMgFK0FgBGcNj RigAXG7xCayuAW4Ws8KG3T8VZbKrkoajTv7GQHrRACV1KfeWIDm2BEb7qZIi78Ox gZhztKbRyfq2MuHofQW7QkWAN+e8uD8RYQVlrl9NROeZL+J4FBMmDSwwYqTyWsLm OR621df/SK4HQoceGandz25BooHbGvtMIcyk1mOiWXrFfV5I0kGK+UsIgv/FbN9z ggQBZu58Reg0ZNVQ6nu0FysDl3v0sW9OqQgGUSzapmcLbWRbJ6HebYwC+2UkFjhN 12k3zc76cHOhSD8ee/DdcPG+lmq9g44= -----END CERTIFICATE-----Generated at Sun Apr 27 09:53:04 2025 by rpki-client