$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e622fb3-5f7a-3cb4-ba20-f72f809e4762.roa File: 4e622fb3-5f7a-3cb4-ba20-f72f809e4762.roa (raw, json) Hash identifier: 0QPtARbC5ouCAPk/TMxQptdCOcEuuCRXixD2ttrMnCE= Subject key identifier: B6:10:82:A2:AC:CE:1D:8C:97:32:1D:63:FA:31:FC:BA:91:0D:1A:B2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499DBF43BF79DBE1D5FB032380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e622fb3-5f7a-3cb4-ba20-f72f809e4762.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 174 IP address blocks: 172.252.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:43:bf:79:db:e1:d5:fb:03:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=e9e1c8c7-6da7-4d36-a8e4-8e89e395fbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:e4:84:7c:ae:c9:90:b1:57:a4:86:ec:cf: 55:69:22:82:f8:dd:b5:44:e6:86:ed:70:57:22:a7: f9:76:fb:8b:af:47:ca:2b:fa:06:ad:e0:63:8e:b3: dc:79:74:b6:53:fe:38:cc:10:4b:2f:3e:e3:66:c3: 7b:ac:7e:4e:97:51:e6:60:aa:4b:40:a8:4c:4e:3e: 51:de:5a:77:04:05:ff:37:86:80:a5:ed:00:04:18: 78:b2:51:4e:90:15:db:44:fd:39:6d:2b:87:bd:d2: 75:51:42:ce:23:f6:97:8b:c7:6b:80:8f:b1:91:31: 21:a6:3a:22:9b:e1:40:1f:75:83:e5:52:09:a5:ce: c2:82:ba:bd:79:c1:fa:1b:0c:a7:02:10:8d:d6:97: 36:59:2e:71:44:35:07:94:78:0f:66:64:b9:30:ce: 35:44:07:6a:34:59:1a:fb:09:41:ce:6c:1f:af:43: f2:82:68:e4:25:61:0e:26:d3:ff:86:5b:0d:25:32: 8a:6d:50:e2:52:58:9b:05:cb:52:ba:14:0a:15:7e: 64:76:4f:50:9c:06:14:77:8b:18:08:61:01:23:ba: 35:6b:e5:0d:07:05:25:d2:e9:bd:cc:d4:9c:82:89: 3a:44:cb:ca:a7:37:fd:d1:99:dd:6d:29:15:69:51: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:10:82:A2:AC:CE:1D:8C:97:32:1D:63:FA:31:FC:BA:91:0D:1A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e622fb3-5f7a-3cb4-ba20-f72f809e4762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b8:55:6e:85:49:a0:f7:56:58:71:a4:82:14:10:97:32:ac: 5b:78:e5:60:da:b9:b0:8a:bc:df:82:4c:1e:c9:c5:b4:a4:b7: b8:c0:50:b7:16:d0:e2:3c:25:e8:a9:fe:6b:eb:a7:31:85:63: 83:52:3a:5f:f8:96:91:60:51:30:46:ea:ef:9c:e4:b4:8b:d5: 33:8b:49:3e:ef:ab:b5:a8:e3:c6:f9:4f:c2:db:d0:98:a8:4a: bc:77:ab:ac:72:c4:03:ba:35:0d:6d:55:05:df:89:86:37:5a: 06:58:99:06:9b:48:5c:3d:3a:11:d2:95:5d:e7:d1:58:13:f3: 64:30:af:a5:90:8b:08:47:6b:79:9f:4e:7e:a4:e6:3e:dd:ea: 3a:bb:08:ac:13:25:b3:06:52:b4:99:f8:ce:08:34:be:b6:1d: 35:fb:47:19:93:c0:8d:f5:79:44:3b:e6:52:55:bc:4d:74:e6: 71:0b:c8:7a:2f:48:f6:5d:75:9b:47:53:d6:4d:49:10:b8:87: 7b:42:61:e2:cf:68:35:52:84:1e:b1:58:80:9d:f8:77:ae:75: 41:17:49:bc:e2:1a:45:46:4a:83:71:b6:f6:35:a6:67:a7:c9: b1:46:c4:82:37:d9:5f:e4:c9:c5:d0:09:0c:f2:b4:cd:f6:45: 1f:4e:b5:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0O/edvh1fsDI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZTllMWM4YzctNmRhNy00ZDM2LWE4ZTQtOGU4OWUzOTVmYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1PkhHyuyZCxV6SG7M9VaSKC+N21ROaG7XBX Iqf5dvuLr0fKK/oGreBjjrPceXS2U/44zBBLLz7jZsN7rH5Ol1HmYKpLQKhMTj5R 3lp3BAX/N4aApe0ABBh4slFOkBXbRP05bSuHvdJ1UULOI/aXi8drgI+xkTEhpjoi m+FAH3WD5VIJpc7Cgrq9ecH6GwynAhCN1pc2WS5xRDUHlHgPZmS5MM41RAdqNFka +wlBzmwfr0PygmjkJWEOJtP/hlsNJTKKbVDiUlibBctSuhQKFX5kdk9QnAYUd4sY CGEBI7o1a+UNBwUl0um9zNScgok6RMvKpzf90ZndbSkVaVFyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYQgqKszh2MlzIdY/ox/LqRDRqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGU2MjJmYjMtNWY3YS0z Y2I0LWJhMjAtZjcyZjgwOWU0NzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq4VW6FSaD3VlhxpIIUEJcyrFt45WDaubCKvN+CTB7JxbSkt7jAULcW 0OI8Jeip/mvrpzGFY4NSOl/4lpFgUTBG6u+c5LSL1TOLST7vq7Wo48b5T8Lb0Jio Srx3q6xyxAO6NQ1tVQXfiYY3WgZYmQabSFw9OhHSlV3n0VgT82Qwr6WQiwhHa3mf Tn6k5j7d6jq7CKwTJbMGUrSZ+M4INL62HTX7RxmTwI31eUQ75lJVvE105nELyHov SPZddZtHU9ZNSRC4h3tCYeLPaDVShB6xWICd+HeudUEXSbziGkVGSoNxtvY1pmen ybFGxII32V/kycXQCQzytM32RR9OtYA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:46 2025 by rpki-client