$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48822226-731d-320e-ac82-c5495a48233b.roa File: 48822226-731d-320e-ac82-c5495a48233b.roa (raw, json) Hash identifier: ESXj0cE8YwzD/8w+mJ3ul0t0hYVtRx4vLUJQXziAW8M= Subject key identifier: 0F:5E:BD:24:17:FC:29:B1:DD:B1:33:66:9C:B6:A7:95:2C:38:BA:B5 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F0B570FBFAF14DC2CE96E640 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48822226-731d-320e-ac82-c5495a48233b.roa Signing time: Thu 22 May 2025 18:13:25 +0000 ROA not before: Thu 22 May 2025 18:13:25 +0000 ROA not after: Wed 20 Aug 2025 18:13:25 +0000 asID: 25893 IP address blocks: 172.252.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:b5:70:fb:fa:f1:4d:c2:ce:96:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 22 18:13:25 2025 GMT Not After : Aug 20 18:13:25 2025 GMT Subject: CN=27555490-1785-41c3-ba4c-8c93a74b8fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:d3:ea:8a:20:1a:49:f7:e2:0d:4c:80:a2: fe:56:f7:ab:12:2c:dd:65:2f:29:61:0a:5e:18:31: 4e:1c:b9:6c:e8:68:7d:69:8d:9c:9b:75:79:8d:7b: af:a2:13:de:0d:0a:e8:fc:af:79:d9:09:93:c6:a5: 11:02:73:91:04:94:80:9d:78:6f:ec:58:05:46:16: 93:8f:0f:a9:45:73:bd:1a:30:18:26:cb:9d:03:5b: c9:0f:6d:f0:50:34:42:36:e4:fa:e5:6d:f1:66:f7: 11:ae:f8:b4:cd:8f:f2:98:ec:18:73:a5:c2:bd:02: c6:08:7a:66:23:c3:69:6b:c5:b7:4c:98:77:43:ee: 19:eb:4b:dd:97:07:2a:3a:b5:56:cb:bf:02:55:d1: db:12:3c:53:d6:f9:db:b6:be:06:5c:28:be:a1:3f: 99:cd:6e:7f:4a:bc:6c:67:3d:69:5d:06:32:2a:32: 83:8b:1b:84:30:8b:df:c5:02:df:a0:af:01:1c:b5: d7:92:5a:81:7d:b4:05:ea:2e:f6:67:d0:fc:35:ce: 8a:b2:9a:ad:44:45:05:40:67:e1:f8:6c:78:3f:0a: 1c:e9:a2:ee:0c:55:ed:b7:75:2d:9c:2a:9d:65:e9: 01:81:83:3a:8c:2a:b0:ff:ab:11:cf:f4:c7:1a:22: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:BD:24:17:FC:29:B1:DD:B1:33:66:9C:B6:A7:95:2C:38:BA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/48822226-731d-320e-ac82-c5495a48233b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d1:ae:43:ce:07:67:32:9c:38:70:1f:28:59:8d:d1:54:bb: 8d:93:4f:c6:03:81:e3:c2:d4:aa:df:6f:af:ab:fc:19:a1:17: 1e:6b:eb:8b:93:89:56:a8:ef:c4:78:cd:59:50:06:52:7e:55: 2e:3c:2c:6d:82:97:62:9a:4c:ec:44:10:08:51:4a:86:46:4b: 50:91:ac:0d:94:7d:ac:dc:5c:21:92:5d:a5:e5:7d:40:5a:ac: a4:7b:7d:67:e1:ab:b5:e1:b1:9c:dd:90:26:5d:49:0f:3e:b0: f2:dc:5d:80:5e:cf:7a:94:58:22:1b:5c:f4:0f:2d:67:20:8f: 6d:3a:e2:c6:5c:80:12:ac:12:46:8d:30:95:d1:c4:16:2f:5e: d9:7f:e8:62:0e:de:e9:82:f1:4c:05:93:6d:14:48:32:f7:aa: e3:47:43:23:b6:20:79:49:b3:50:3f:3c:68:d8:4e:64:27:9c: 86:c0:eb:ce:7e:ff:ec:e6:fa:52:62:09:26:49:f2:86:85:aa: 6d:5f:a4:1d:65:be:90:db:4b:42:4a:bb:be:8a:ce:6e:07:9d: 6f:4c:4b:a6:11:c1:fe:eb:6a:6e:e7:ed:cb:2b:3a:80:7b:c3: 6a:28:1a:a6:f6:55:3a:de:5a:32:a3:69:53:70:c8:5f:68:2e: 1d:ca:df:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwtXD7+vFNws6W5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyMjE4MTMyNVoXDTI1MDgyMDE4MTMyNVowLzEtMCsGA1UEAxMk Mjc1NTU0OTAtMTc4NS00MWMzLWJhNGMtOGM5M2E3NGI4ZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArybT6oogGkn34g1MgKL+VverEizdZS8pYQpe GDFOHLls6Gh9aY2cm3V5jXuvohPeDQro/K952QmTxqURAnORBJSAnXhv7FgFRhaT jw+pRXO9GjAYJsudA1vJD23wUDRCNuT65W3xZvcRrvi0zY/ymOwYc6XCvQLGCHpm I8Npa8W3TJh3Q+4Z60vdlwcqOrVWy78CVdHbEjxT1vnbtr4GXCi+oT+ZzW5/Srxs Zz1pXQYyKjKDixuEMIvfxQLfoK8BHLXXklqBfbQF6i72Z9D8Nc6KspqtREUFQGfh +Gx4Pwoc6aLuDFXtt3UtnCqdZekBgYM6jCqw/6sRz/THGiKh9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9evSQX/Cmx3bEzZpy2p5UsOLq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDg4MjIyMjYtNzMxZC0z MjBlLWFjODItYzU0OTVhNDgyMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjRrkPOB2cynDhwHyhZjdFUu42TT8YDgePC1Krfb6+r/BmhFx5r64uT iVao78R4zVlQBlJ+VS48LG2Cl2KaTOxEEAhRSoZGS1CRrA2UfazcXCGSXaXlfUBa rKR7fWfhq7XhsZzdkCZdSQ8+sPLcXYBez3qUWCIbXPQPLWcgj2064sZcgBKsEkaN MJXRxBYvXtl/6GIO3umC8UwFk20USDL3quNHQyO2IHlJs1A/PGjYTmQnnIbA685+ /+zm+lJiCSZJ8oaFqm1fpB1lvpDbS0JKu76Kzm4HnW9MS6YRwf7ram7n7csrOoB7 w2ooGqb2VTreWjKjaVNwyF9oLh3K3yk= -----END CERTIFICATE-----Generated at Tue Jun 17 18:41:34 2025 by rpki-client