$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87788a6e-89ab-30a1-bd47-5093d64aec94.roa File: 87788a6e-89ab-30a1-bd47-5093d64aec94.roa (raw, json) Hash identifier: p2i3lOAO3zSlyDtZmYMvyQ+N5SJieZJgJmO3HAs7ktg= Subject key identifier: B7:42:53:36:74:0E:E5:A1:0E:1D:53:CC:60:00:F1:84:DF:98:E9:6B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499F24DE4652BB4B87BABA3DC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87788a6e-89ab-30a1-bd47-5093d64aec94.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 172.121.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:de:46:52:bb:4b:87:ba:ba:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=46323bfd-73aa-4804-9267-4238eb2deb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:1b:39:8b:26:fa:d0:d7:5f:32:18:a1:08: ed:95:98:df:c1:ae:29:36:1b:a4:be:4e:04:d0:55: 3f:cd:78:ad:41:2b:44:a7:ff:bc:d7:5c:db:1b:b7: cb:c2:8f:69:a0:44:93:fd:67:e2:72:d9:39:4f:29: 82:82:f1:91:2d:28:3e:bc:2f:a2:97:dd:64:39:e8: 8d:b9:64:09:d9:d3:97:43:7b:c4:e1:39:a9:c9:c2: 4f:63:da:b4:33:ff:1d:69:ba:70:9a:be:8f:e9:d3: 71:19:09:04:1c:41:65:a5:87:a5:cf:76:0a:a8:95: aa:f6:dc:42:7f:1b:90:d5:e2:b3:07:73:bf:5e:94: 7f:87:74:3b:a7:21:2a:d9:5f:fa:af:5f:4e:64:e4: 6b:85:76:a6:24:2c:37:09:51:a3:a2:77:cd:88:56: 90:45:71:49:98:f7:ca:03:2c:ec:8a:47:7a:c7:97: 26:ea:44:9e:16:cb:19:97:7c:05:f7:fe:ca:65:61: 4d:ec:78:22:04:7b:1f:b6:34:5c:49:79:1a:36:81: 1e:dd:a3:7d:69:03:2e:aa:1e:89:4e:18:6f:2d:71: 5d:f2:55:af:99:cc:37:ea:78:ae:c0:fb:8b:86:0f: 27:e4:3f:99:de:6b:dc:51:d7:69:1e:3c:c5:ac:ec: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:42:53:36:74:0E:E5:A1:0E:1D:53:CC:60:00:F1:84:DF:98:E9:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87788a6e-89ab-30a1-bd47-5093d64aec94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ad:c2:c4:9a:68:1e:a1:28:e3:22:ad:a6:e2:7c:2d:fc:3a: 3a:0b:81:b6:b6:2c:6f:c1:e2:f5:08:9f:16:c7:ee:25:8a:65: b4:69:9a:ce:18:1f:81:0f:9a:ef:95:8f:0c:e8:5d:b4:c3:6a: 12:8c:bc:d2:31:40:e4:bf:4a:49:7b:61:59:ea:d0:95:fb:0f: 33:b7:f8:40:fa:8e:b7:73:75:b9:76:8a:08:0c:77:4a:91:75: 55:fe:b3:36:f2:b0:38:6f:82:90:c8:5b:9c:28:8a:18:b3:e9: cf:e1:05:ea:7a:dc:99:9d:db:f4:79:2d:7d:3a:f7:2e:c8:69: ff:76:a4:25:0b:88:97:5b:fd:e6:ad:57:d6:54:5e:d5:bc:2c: 7f:9a:0b:7a:94:a9:26:e4:ee:b6:11:74:51:c2:b4:db:e9:e6: d3:eb:64:54:3d:b2:38:fe:a9:0b:9a:34:af:d2:05:e7:80:30: 7f:6a:e9:09:24:6d:84:e1:55:04:30:79:3c:b3:4c:ab:ce:03: d9:35:19:d7:29:f6:79:86:06:11:42:12:55:fc:c7:6d:f7:7a: 73:7c:03:02:f6:35:7a:65:f4:88:b5:bf:77:74:cd:11:d1:2c: 94:a2:70:36:09:fc:d5:5a:12:33:ba:c1:8f:15:86:45:3d:3d: 09:8e:a6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJN5GUrtLh7q6PcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDYzMjNiZmQtNzNhYS00ODA0LTkyNjctNDIzOGViMmRlYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0kbOYsm+tDXXzIYoQjtlZjfwa4pNhukvk4E 0FU/zXitQStEp/+811zbG7fLwo9poEST/Wfictk5TymCgvGRLSg+vC+il91kOeiN uWQJ2dOXQ3vE4TmpycJPY9q0M/8dabpwmr6P6dNxGQkEHEFlpYelz3YKqJWq9txC fxuQ1eKzB3O/XpR/h3Q7pyEq2V/6r19OZORrhXamJCw3CVGjonfNiFaQRXFJmPfK Ayzsikd6x5cm6kSeFssZl3wF9/7KZWFN7HgiBHsftjRcSXkaNoEe3aN9aQMuqh6J ThhvLXFd8lWvmcw36niuwPuLhg8n5D+Z3mvcUddpHjzFrOz6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdCUzZ0DuWhDh1TzGAA8YTfmOlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODc3ODhhNmUtODlhYi0z MGExLWJkNDctNTA5M2Q2NGFlYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqtwsSaaB6hKOMirabifC38OjoLgba2LG/B4vUInxbH7iWKZbRpms4Y H4EPmu+VjwzoXbTDahKMvNIxQOS/Skl7YVnq0JX7DzO3+ED6jrdzdbl2iggMd0qR dVX+szbysDhvgpDIW5woihiz6c/hBep63Jmd2/R5LX069y7Iaf92pCULiJdb/eat V9ZUXtW8LH+aC3qUqSbk7rYRdFHCtNvp5tPrZFQ9sjj+qQuaNK/SBeeAMH9q6Qkk bYThVQQweTyzTKvOA9k1Gdcp9nmGBhFCElX8x233enN8AwL2NXpl9Ii1v3d0zRHR LJSicDYJ/NVaEjO6wY8VhkU9PQmOplg= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:20 2025 by rpki-client