$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ef4ddaf-4e71-3268-839b-9e4ccc858808.roa File: 4ef4ddaf-4e71-3268-839b-9e4ccc858808.roa (raw, json) Hash identifier: OVKhhcRVYoKZH47Yr4+WiBsItRN2DEjOB2Sh94IuCbk= Subject key identifier: E7:DC:CB:2A:A6:F2:B9:49:D3:4A:DD:DF:DE:D1:4A:64:74:81:84:04 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499DBF49AE6D833665806C6640 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ef4ddaf-4e71-3268-839b-9e4ccc858808.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 174 IP address blocks: 172.252.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:49:ae:6d:83:36:65:80:6c:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=169463d0-a975-49f4-842b-c42a29041a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6b:52:b7:c3:8c:59:6a:87:4c:28:79:0a:e5: 3e:ef:c7:00:4c:a7:0b:ce:87:c4:1e:2a:4c:e0:cc: 96:b5:ea:b5:e2:70:43:83:48:78:fa:76:33:d4:87: 42:cf:63:9b:49:c7:21:a9:af:25:d3:25:1f:73:17: 1a:09:01:bc:ad:07:ec:f1:24:81:89:e4:b0:52:c0: 2b:52:9c:38:a8:11:6f:e9:45:79:58:f2:bd:ad:c6: 81:30:a9:d2:36:c0:89:d6:77:e3:a8:8d:12:74:4e: ef:7b:8d:47:fe:cd:45:b3:5a:00:f2:ce:1f:51:4f: a5:07:76:6f:6d:ee:96:3c:5e:9e:07:d5:8d:02:91: d7:46:2f:99:2e:01:d5:f7:0e:47:e7:51:4b:d7:e4: 3c:10:36:25:80:18:ad:a3:80:a3:d9:03:e3:37:dd: 4c:05:23:ad:aa:d0:cf:1a:2d:31:d9:ed:8a:77:d6: bf:1f:54:72:45:a0:87:63:0e:85:dd:b3:a1:68:f2: 78:7a:a4:c4:f1:db:3f:d8:6c:76:89:80:6a:8f:70: 03:78:3e:b1:85:86:0f:b6:15:93:a5:ae:46:d2:b0: 48:ba:76:08:cd:25:d4:43:73:f6:bf:f2:2b:8c:00: 7b:49:de:85:ec:72:c0:b8:29:80:3c:65:8f:22:2d: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DC:CB:2A:A6:F2:B9:49:D3:4A:DD:DF:DE:D1:4A:64:74:81:84:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ef4ddaf-4e71-3268-839b-9e4ccc858808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:83:c6:b2:03:d9:e2:cb:54:b7:a5:6a:cd:7e:97:77:1b:4f: 24:47:3d:dc:11:b9:e1:46:2d:dc:66:4a:82:69:44:10:df:05: fc:e3:b2:0f:da:31:4a:80:49:53:13:2f:33:9e:8f:5e:ca:62: 13:3d:b9:fd:cd:f7:37:80:fe:76:b5:9e:8d:83:a6:6d:07:23: 87:67:ab:ad:e4:24:08:5f:89:e3:12:10:22:cd:99:ed:c0:b4: 10:75:c5:ac:89:09:10:5a:d9:2e:d9:53:86:af:e1:df:4e:9f: 85:da:44:23:43:fb:d4:1e:bb:31:de:b7:47:2a:9c:cf:bc:98: 0d:d5:78:1e:36:af:a1:99:07:11:e6:38:0f:26:cf:42:41:3a: b3:3f:86:dc:3a:3d:2c:31:90:4d:50:b7:ea:8f:d7:87:8d:ca: 33:05:22:b2:f9:6d:85:96:18:0b:9e:92:e3:80:e7:c1:0d:b1: 05:8b:bc:eb:60:bd:b3:a6:66:72:d6:65:8b:72:e2:96:91:c2: 70:09:e8:12:a4:54:9e:69:4a:6e:38:e7:e2:56:16:01:c1:a8: 4c:be:9a:d9:4a:8f:59:e5:d6:49:65:15:81:dc:fd:55:e5:04: 72:d5:0a:0e:48:83:9e:0f:2e:ac:bb:89:1c:d7:e6:00:1d:ab: 5a:b7:5e:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0mubYM2ZYBsZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MTY5NDYzZDAtYTk3NS00OWY0LTg0MmItYzQyYTI5MDQxYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmtSt8OMWWqHTCh5CuU+78cATKcLzofEHipM 4MyWteq14nBDg0h4+nYz1IdCz2ObScchqa8l0yUfcxcaCQG8rQfs8SSBieSwUsAr Upw4qBFv6UV5WPK9rcaBMKnSNsCJ1nfjqI0SdE7ve41H/s1Fs1oA8s4fUU+lB3Zv be6WPF6eB9WNApHXRi+ZLgHV9w5H51FL1+Q8EDYlgBito4Cj2QPjN91MBSOtqtDP Gi0x2e2Kd9a/H1RyRaCHYw6F3bOhaPJ4eqTE8ds/2Gx2iYBqj3ADeD6xhYYPthWT pa5G0rBIunYIzSXUQ3P2v/IrjAB7Sd6F7HLAuCmAPGWPIi1K+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfcyyqm8rlJ00rd397RSmR0gYQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGVmNGRkYWYtNGU3MS0z MjY4LTgzOWItOWU0Y2NjODU4ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImDxrID2eLLVLelas1+l3cbTyRHPdwRueFGLdxmSoJpRBDfBfzjsg/a MUqASVMTLzOej17KYhM9uf3N9zeA/na1no2Dpm0HI4dnq63kJAhfieMSECLNme3A tBB1xayJCRBa2S7ZU4av4d9On4XaRCND+9QeuzHet0cqnM+8mA3VeB42r6GZBxHm OA8mz0JBOrM/htw6PSwxkE1Qt+qP14eNyjMFIrL5bYWWGAuekuOA58ENsQWLvOtg vbOmZnLWZYty4paRwnAJ6BKkVJ5pSm445+JWFgHBqEy+mtlKj1nl1kllFYHc/VXl BHLVCg5Ig54PLqy7iRzX5gAdq1q3XuQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:12 2025 by rpki-client