$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6aa93fe9-992d-3ffa-8bce-93a47b9ab1b1.roa File: 6aa93fe9-992d-3ffa-8bce-93a47b9ab1b1.roa (raw, json) Hash identifier: qZ9JpIZIxXAPziCCkRZwpUzKzTOlZUlcS3nZnOwWFl8= Subject key identifier: 0C:3B:B8:33:02:54:94:85:CB:96:55:77:70:DF:9F:34:72:9A:87:6C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499F24BD733C0D1BB067C32880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6aa93fe9-992d-3ffa-8bce-93a47b9ab1b1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 5650 IP address blocks: 172.252.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bd:73:3c:0d:1b:b0:67:c3:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=65a93389-2745-4029-aeca-7655cfe1fdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:64:2e:cf:08:1c:91:34:d1:e1:f0:e4:a8:c8: 3b:ac:24:74:7b:5c:33:b0:70:82:28:1b:33:ac:15: 6f:19:21:90:4e:48:eb:5b:d1:22:9d:9e:c3:17:da: 5d:db:54:d4:f2:1c:ed:33:37:4a:38:12:e5:3e:87: 7e:cb:c3:43:44:f8:aa:53:bb:92:3e:fb:b1:27:c6: ab:90:c8:11:c8:3c:73:b9:a6:cb:8e:c9:49:96:c6: 33:71:a4:6b:59:26:75:9b:b0:48:6a:38:d9:4c:7c: aa:ec:fd:9b:7e:6b:ae:35:4a:8f:38:53:5d:1b:c0: a1:de:1d:fa:26:1c:5b:33:f7:6c:20:ad:ab:c6:15: 51:3f:76:b0:9a:53:45:86:e7:94:f6:3f:ee:4e:cd: 2b:f1:10:74:61:a8:80:a7:26:d7:7d:bb:3a:e5:e5: 99:b5:f4:0f:7c:7c:c4:d4:20:1e:54:90:7a:6a:e2: 16:00:dd:ad:b9:1b:ec:48:8b:a1:ac:30:35:35:6d: 8d:d4:ee:b1:c0:1b:54:6f:5d:c2:79:50:95:38:70: 95:bd:90:ca:7e:89:44:5e:78:4e:b0:ae:20:ab:75: 96:09:ac:e1:6b:df:5a:8d:b8:f6:39:f6:c2:28:05: e2:01:b2:96:96:ca:56:86:14:d6:fe:49:43:60:f7: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:B8:33:02:54:94:85:CB:96:55:77:70:DF:9F:34:72:9A:87:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6aa93fe9-992d-3ffa-8bce-93a47b9ab1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b1:87:79:c8:5c:c5:53:b9:1b:c7:da:dc:36:15:d4:21:85: 08:d5:7b:2f:ee:de:4f:9a:9e:c5:e0:79:85:24:36:35:c0:20: 9f:7b:eb:13:55:f0:ca:c1:d7:49:f1:5c:8f:c3:1b:63:b8:8d: 42:58:62:af:41:45:17:d3:7b:1c:1f:11:86:85:a2:a9:ef:ee: 9a:4d:69:a3:d6:6f:15:17:0b:db:2b:53:98:c0:80:68:07:05: 61:3b:bf:0f:4d:01:df:fd:68:d8:06:4b:18:88:e1:d9:fd:a6: 17:92:14:8d:29:d7:13:f1:0f:16:6c:f8:51:8a:ef:dc:83:91: 2d:f6:f1:0e:10:a3:02:25:b7:88:ee:57:71:20:0c:fc:be:3a: 57:76:06:d4:d7:9c:29:26:2e:d0:2f:6b:51:9c:85:4f:bf:15: 0e:eb:59:21:fb:64:04:34:82:35:a3:3e:b1:43:3b:d2:7d:21: ae:d1:1c:29:87:54:3a:84:5f:fd:05:2e:b2:33:53:91:08:52: 57:d1:95:e5:16:e1:6d:a4:f6:ec:31:8c:47:93:4f:86:00:5c: cb:87:44:88:14:4d:8f:ac:95:06:6a:1a:17:ec:99:92:ff:28: 75:60:e8:30:70:ef:34:d9:33:0d:de:5e:dc:ef:21:e7:33:9f: 25:b6:5d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJL1zPA0bsGfDKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NjVhOTMzODktMjc0NS00MDI5LWFlY2EtNzY1NWNmZTFmZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2QuzwgckTTR4fDkqMg7rCR0e1wzsHCCKBsz rBVvGSGQTkjrW9EinZ7DF9pd21TU8hztMzdKOBLlPod+y8NDRPiqU7uSPvuxJ8ar kMgRyDxzuabLjslJlsYzcaRrWSZ1m7BIajjZTHyq7P2bfmuuNUqPOFNdG8Ch3h36 JhxbM/dsIK2rxhVRP3awmlNFhueU9j/uTs0r8RB0YaiApybXfbs65eWZtfQPfHzE 1CAeVJB6auIWAN2tuRvsSIuhrDA1NW2N1O6xwBtUb13CeVCVOHCVvZDKfolEXnhO sK4gq3WWCazha99ajbj2OfbCKAXiAbKWlspWhhTW/klDYPdl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw7uDMCVJSFy5ZVd3DfnzRymodsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNmFhOTNmZTktOTkyZC0z ZmZhLThiY2UtOTNhNDdiOWFiMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqxh3nIXMVTuRvH2tw2FdQhhQjVey/u3k+ansXgeYUkNjXAIJ976xNV 8MrB10nxXI/DG2O4jUJYYq9BRRfTexwfEYaFoqnv7ppNaaPWbxUXC9srU5jAgGgH BWE7vw9NAd/9aNgGSxiI4dn9pheSFI0p1xPxDxZs+FGK79yDkS328Q4QowIlt4ju V3EgDPy+Old2BtTXnCkmLtAva1GchU+/FQ7rWSH7ZAQ0gjWjPrFDO9J9Ia7RHCmH VDqEX/0FLrIzU5EIUlfRleUW4W2k9uwxjEeTT4YAXMuHRIgUTY+slQZqGhfsmZL/ KHVg6DBw7zTZMw3eXtzvIecznyW2XTI= -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:53 2025 by rpki-client