$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa File: 42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa (raw, json) Hash identifier: 1Y5OoAPYJ1KIZUnnwGit+RnGSexHg2pahcy4/KZCLBY= Subject key identifier: 71:35:C6:54:2C:7D:D7:C3:6F:BA:5D:BE:91:72:6C:C7:61:3A:71:38 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A07D545B099AEAB4CDA1C1F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 5650 IP address blocks: 172.120.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:45:b0:99:ae:ab:4c:da:1c:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=4f8f7ed1-fa6f-4ddc-9024-c9920fc116fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:91:eb:09:f0:7e:0f:46:90:12:4a:e3:c2: d2:ca:85:f4:0a:d4:cf:57:ad:10:ee:ad:58:59:09: f0:ea:cb:b4:45:c7:27:35:f6:59:7d:f9:ec:84:3f: c0:ae:5c:70:fb:58:60:06:78:90:51:ba:59:be:8c: 81:7c:41:86:3a:47:99:fd:af:23:d7:1a:84:38:0a: 90:3d:e8:cd:b8:f2:fd:15:4e:83:1b:0e:a5:6d:43: 5a:d4:43:d2:a4:f2:07:39:32:4c:9f:34:25:2f:3b: 79:37:2e:e3:67:57:7a:07:2e:e1:80:d4:5d:a4:bb: 7a:4c:93:06:75:4f:3e:6b:97:ef:20:4d:03:77:b0: 5a:3b:12:24:a7:82:21:64:38:1b:ef:7c:7e:92:41: 17:b7:72:73:0a:dc:4a:a6:77:f2:28:45:d8:f7:d7: 69:1b:e3:15:a1:34:c0:76:27:5c:6c:04:cd:78:27: 48:b9:8e:25:d5:70:b1:43:42:5b:10:71:cb:bf:48: 78:4b:fd:35:eb:6c:0d:10:1e:7f:cd:69:ae:21:5c: 95:f6:06:84:b3:2b:ca:af:b4:df:06:b8:0a:d2:83: 8c:ad:e4:52:85:b8:25:19:1b:2c:ad:2d:d1:81:0d: 26:4f:33:50:c8:fc:3b:cc:57:6b:7b:9b:b9:ca:31: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:35:C6:54:2C:7D:D7:C3:6F:BA:5D:BE:91:72:6C:C7:61:3A:71:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:62:37:67:a6:c4:53:f0:df:43:9a:83:93:69:eb:5c:a8:d4: a1:1e:a0:dd:d4:7b:95:33:79:8e:84:bb:a7:2f:82:90:90:13: ce:00:74:de:99:76:14:23:14:fe:6d:92:72:1e:49:29:15:5b: 10:6b:c3:c5:bb:49:1e:66:f3:e1:b0:64:a2:f4:69:34:eb:66: 19:6a:8f:5a:8d:2a:d5:ec:61:9a:fa:97:af:08:c9:c5:70:ea: 3f:c5:63:4d:a3:aa:75:05:5d:38:19:5f:21:cc:80:11:0b:d1: 5b:bb:97:d0:d9:05:5f:e3:4b:80:25:56:b3:2b:a6:ec:15:4b: 7d:07:5d:44:01:0d:a0:bb:4d:69:cb:84:74:7b:ab:82:eb:3b: 72:de:6b:78:f6:07:ed:f4:01:d6:2a:7f:86:07:53:83:d3:ed: 1b:ec:bb:7b:61:6c:aa:d7:b5:4e:98:50:a6:f0:e6:c7:b2:29: e8:ff:4f:99:e6:7f:ff:b8:fb:8e:0c:76:4a:db:97:a1:53:c5: 59:0f:0b:49:f0:44:cc:7c:63:16:bd:b4:2f:38:3b:4b:52:ca: 21:21:39:27:d9:4b:18:d1:d0:e6:f4:47:30:8b:4d:7f:ec:9f: 6e:6d:12:39:ac:09:28:da:f0:08:85:ac:d8:c3:3e:bb:ec:70: b2:2a:d5:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UWwma6rTNocH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NGY4ZjdlZDEtZmE2Zi00ZGRjLTkwMjQtYzk5MjBmYzExNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNKR6wnwfg9GkBJK48LSyoX0CtTPV60Q7q1Y WQnw6su0RccnNfZZffnshD/Arlxw+1hgBniQUbpZvoyBfEGGOkeZ/a8j1xqEOAqQ PejNuPL9FU6DGw6lbUNa1EPSpPIHOTJMnzQlLzt5Ny7jZ1d6By7hgNRdpLt6TJMG dU8+a5fvIE0Dd7BaOxIkp4IhZDgb73x+kkEXt3JzCtxKpnfyKEXY99dpG+MVoTTA didcbATNeCdIuY4l1XCxQ0JbEHHLv0h4S/0162wNEB5/zWmuIVyV9gaEsyvKr7Tf BrgK0oOMreRShbglGRssrS3RgQ0mTzNQyPw7zFdre5u5yjFx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE1xlQsfdfDb7pdvpFybMdhOnE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDJiM2YzYTUtMThiZi0z Njk1LWJkZTAtNGUyYzdlNDI0YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACliN2emxFPw30Oag5Np61yo1KEeoN3Ue5UzeY6Eu6cvgpCQE84AdN6Z dhQjFP5tknIeSSkVWxBrw8W7SR5m8+GwZKL0aTTrZhlqj1qNKtXsYZr6l68IycVw 6j/FY02jqnUFXTgZXyHMgBEL0Vu7l9DZBV/jS4AlVrMrpuwVS30HXUQBDaC7TWnL hHR7q4LrO3Lea3j2B+30AdYqf4YHU4PT7Rvsu3thbKrXtU6YUKbw5seyKej/T5nm f/+4+44Mdkrbl6FTxVkPC0nwRMx8Yxa9tC84O0tSyiEhOSfZSxjR0Ob0RzCLTX/s n25tEjmsCSja8AiFrNjDPrvscLIq1TI= -----END CERTIFICATE-----Generated at Sun Jun 15 06:04:17 2025 by rpki-client