$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa File: 75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa (raw, json) Hash identifier: DXDHjEAQxGeGwHIiK1LENmYRH1CRtRODDr+uAxuCuCE= Subject key identifier: 9B:88:73:29:40:3C:6E:C6:30:6B:1B:88:5A:4E:D7:B7:C7:DC:AF:CE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858498A345C1367E77154A68B4580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 18779 IP address blocks: 172.121.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5c:13:67:e7:71:54:a6:8b:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=c1171802-d21a-46ef-ab5c-a3b343339d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:db:f5:be:55:91:06:a2:16:a8:a8:c5:43: 26:cd:a0:42:48:a1:c0:87:49:ea:ba:85:d9:0a:d2: a7:b9:cd:33:52:5a:9e:46:6f:e3:d5:72:c8:39:ae: e1:55:3b:e8:2e:7c:af:50:aa:5f:35:3f:03:86:e9: 3e:ff:f3:67:6b:b5:f9:bc:ec:26:c3:35:37:1f:4c: 79:97:39:01:1d:82:d8:68:e5:0a:c2:ca:42:39:9e: e8:9a:73:d1:09:db:71:a1:fd:36:85:55:54:c9:bb: 46:df:e9:0c:78:4b:ec:11:a8:b6:56:50:23:88:b5: f9:72:bc:6e:45:db:e8:e5:7e:a8:f4:80:0f:2e:64: 07:0c:a1:d0:a0:b7:70:b4:50:e5:e9:9e:35:e2:58: 1b:b3:94:2c:c3:b2:8c:d4:4f:3b:5c:7e:6f:d0:1c: cd:4c:8f:0f:52:65:b6:30:a8:a1:8f:67:29:a3:fd: 4a:be:b6:a8:f9:54:33:2a:9d:09:43:ac:34:44:67: 5a:9c:25:9b:a8:61:ec:8f:9a:ff:77:79:af:73:30: 8a:69:cb:d8:eb:f2:58:a3:de:ca:c7:6c:fe:5c:2c: f1:5a:90:e0:f4:21:c2:9d:e4:b8:bd:72:42:fd:16: 71:fc:5f:f4:88:a7:1e:53:3f:af:c4:2d:d1:ec:55: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:73:29:40:3C:6E:C6:30:6B:1B:88:5A:4E:D7:B7:C7:DC:AF:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:65:00:12:55:b2:dd:0f:ea:4d:ef:fa:d9:29:51:03:a0:58: 6e:da:52:b8:09:fb:b6:52:32:09:a4:06:3d:f7:f8:8a:a9:47: 4a:ce:fc:61:e6:f4:cc:6b:0f:ae:5f:72:dc:8e:67:4e:0e:d7: 2c:a8:6c:4b:d0:e4:db:79:c1:58:05:95:c7:b0:c3:bc:31:6b: e7:43:aa:e8:da:c7:c1:db:20:7f:1e:61:dc:7a:f0:26:99:81: d8:bc:63:40:e0:20:a8:f9:eb:01:54:ae:e2:c8:00:74:34:c3: 55:2e:b9:92:42:c6:85:b9:8a:38:e9:b0:b1:dc:5d:59:4f:ab: 26:2f:fc:3d:6f:b0:45:b5:70:80:c1:be:87:d9:b1:d2:71:c7: 69:96:6f:ac:84:7b:12:0d:0c:ff:48:c2:57:93:a5:45:a4:3f: 52:45:92:7e:8d:55:2e:84:4f:01:40:cb:df:4b:35:08:32:f9: f5:e7:b9:a9:65:e6:8b:38:e5:bf:92:12:00:96:5c:14:90:f4: b1:e5:c6:36:9a:a9:30:eb:73:b3:a2:ca:be:0c:b0:c6:ab:4d: 4d:9e:e5:7a:d2:b0:ad:4b:c5:37:96:67:48:12:9e:cb:26:07: 74:f4:7b:29:a5:a1:fc:8a:5f:e6:e7:8f:e2:ab:5d:3d:62:cc: 0c:6c:9c:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNFwTZ+dxVKaLRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzExNzE4MDItZDIxYS00NmVmLWFiNWMtYTNiMzQzMzM5ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwbb9b5VkQaiFqioxUMmzaBCSKHAh0nquoXZ CtKnuc0zUlqeRm/j1XLIOa7hVTvoLnyvUKpfNT8Dhuk+//Nna7X5vOwmwzU3H0x5 lzkBHYLYaOUKwspCOZ7omnPRCdtxof02hVVUybtG3+kMeEvsEai2VlAjiLX5crxu Rdvo5X6o9IAPLmQHDKHQoLdwtFDl6Z414lgbs5Qsw7KM1E87XH5v0BzNTI8PUmW2 MKihj2cpo/1Kvrao+VQzKp0JQ6w0RGdanCWbqGHsj5r/d3mvczCKacvY6/JYo97K x2z+XCzxWpDg9CHCneS4vXJC/RZx/F/0iKceUz+vxC3R7FX5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuIcylAPG7GMGsbiFpO17fH3K/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzVjNzFkOGMtMWY0ZS0z NTczLTg5YTAtNWE2MDI2ZDY2MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHm6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtlABJVst0P6k3v+tkpUQOgWG7aUrgJ+7ZSMgmkBj33+IqpR0rO/GHm 9MxrD65fctyOZ04O1yyobEvQ5Nt5wVgFlceww7wxa+dDqujax8HbIH8eYdx68CaZ gdi8Y0DgIKj56wFUruLIAHQ0w1UuuZJCxoW5ijjpsLHcXVlPqyYv/D1vsEW1cIDB vofZsdJxx2mWb6yEexINDP9IwleTpUWkP1JFkn6NVS6ETwFAy99LNQgy+fXnuall 5os45b+SEgCWXBSQ9LHlxjaaqTDrc7Oiyr4MsMarTU2e5XrSsK1LxTeWZ0gSnssm B3T0eymlofyKX+bnj+KrXT1izAxsnAE= -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:46 2025 by rpki-client