$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa File: 88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa (raw, json) Hash identifier: 3urA7aAyaVA11bQeCcB7A/i0bt6vctUeFBmqzpdAcf0= Subject key identifier: 13:45:45:96:4E:06:0F:17:31:D6:8C:42:DC:6F:4E:FB:DE:71:28:45 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499F24DDF8C99AF54218DCC610 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 3257 IP address blocks: 142.252.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:dd:f8:c9:9a:f5:42:18:dc:c6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=53eaf8d3-38ee-4ba3-853c-0baf4c2ce9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:b8:ea:32:35:ec:e9:30:50:5f:34:ec:60: d0:ba:4e:c2:3d:9e:83:55:cf:4a:78:17:17:0e:07: e7:bb:3e:d8:9d:8c:9c:2c:2e:26:80:00:1b:23:bc: 64:9a:c8:6c:76:2b:32:df:bc:03:ea:db:5f:a9:9b: 03:2a:b4:b0:6a:38:56:0a:08:78:ac:be:12:74:53: a6:46:5d:cb:3b:2c:84:d0:de:ec:c6:fd:33:e5:aa: f9:0b:be:97:8b:71:be:d3:fe:cb:61:53:ff:ab:af: 71:72:5d:ff:70:29:f3:65:cd:e9:04:69:e8:c9:c1: ed:41:d0:db:03:48:ae:ad:44:da:88:19:cf:35:cb: a9:1e:b0:bb:84:0f:93:65:ad:d3:d9:de:54:22:49: d1:4b:1e:8f:00:f5:d7:ed:bb:9b:b9:8e:4e:fb:62: 33:3c:bc:5c:c7:fb:1c:53:e5:65:69:7c:9f:79:29: 0d:1b:16:95:2c:46:8d:9a:c1:e2:67:da:15:d9:70: cd:79:af:ed:21:a8:5e:d1:a4:d2:9b:df:97:5d:28: dc:bc:83:15:97:c5:77:ba:b5:8a:8a:84:96:b4:11: 68:a3:cc:c0:48:f2:df:51:cf:24:cb:07:da:a7:2e: f0:1b:20:bf:e8:56:c8:ab:f1:8d:5b:f7:83:cb:76: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:45:45:96:4E:06:0F:17:31:D6:8C:42:DC:6F:4E:FB:DE:71:28:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:55:c3:a3:45:cc:32:f7:75:77:d5:d1:b0:aa:79:0d:f8:18: 7d:3a:ae:2c:7e:0b:a4:dc:e5:0b:b5:b6:42:32:e0:35:c5:fd: 3c:9b:14:5a:25:9f:b7:fe:81:c3:17:40:5d:8b:51:6d:b1:10: e7:19:15:76:26:07:fc:ab:68:b2:11:ec:8d:cc:f4:8a:4e:16: 2f:1e:8a:cd:41:f2:69:ed:69:cd:ec:8a:a8:df:a9:c2:7e:1b: 3f:e8:2e:99:81:37:8b:ed:24:a2:ff:48:57:0d:04:55:69:3e: 19:fc:62:ff:76:bb:8b:3b:b9:8d:f3:c9:23:35:ae:56:dc:99: 7d:ab:6a:e2:8d:b6:17:44:e0:41:b3:15:f0:2a:c9:8e:1d:1f: 9b:3a:1d:15:d4:d4:c6:e6:6c:fc:93:95:4b:d3:8e:94:66:17: 5e:84:0c:0e:cf:eb:e2:e2:6f:71:50:bb:66:aa:08:ab:72:e0: 13:bd:f0:41:e7:e5:de:32:38:37:b8:74:10:74:7b:fd:69:40: d1:f6:56:90:5b:42:b3:49:5d:30:72:8b:8b:22:c6:12:a3:79: 34:ea:34:a8:c5:98:95:a7:de:42:69:86:7a:59:24:dd:43:c5: a1:55:bc:76:23:12:c8:54:d6:f5:86:28:a2:b9:0d:5d:4d:9a: 74:3d:2b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJN34yZr1QhjcxhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTNlYWY4ZDMtMzhlZS00YmEzLTg1M2MtMGJhZjRjMmNlOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0O46jI17OkwUF807GDQuk7CPZ6DVc9KeBcX Dgfnuz7YnYycLC4mgAAbI7xkmshsdisy37wD6ttfqZsDKrSwajhWCgh4rL4SdFOm Rl3LOyyE0N7sxv0z5ar5C76Xi3G+0/7LYVP/q69xcl3/cCnzZc3pBGnoycHtQdDb A0iurUTaiBnPNcupHrC7hA+TZa3T2d5UIknRSx6PAPXX7bubuY5O+2IzPLxcx/sc U+VlaXyfeSkNGxaVLEaNmsHiZ9oV2XDNea/tIahe0aTSm9+XXSjcvIMVl8V3urWK ioSWtBFoo8zASPLfUc8kywfapy7wGyC/6FbIq/GNW/eDy3a9oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNFRZZOBg8XMdaMQtxvTvvecShFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODhjMDUwYzYtYzBjMC0z YmNkLWFiM2QtM2UwNDk5NzQzYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxVw6NFzDL3dXfV0bCqeQ34GH06rix+C6Tc5Qu1tkIy4DXF/TybFFol n7f+gcMXQF2LUW2xEOcZFXYmB/yraLIR7I3M9IpOFi8eis1B8mntac3siqjfqcJ+ Gz/oLpmBN4vtJKL/SFcNBFVpPhn8Yv92u4s7uY3zySM1rlbcmX2rauKNthdE4EGz FfAqyY4dH5s6HRXU1MbmbPyTlUvTjpRmF16EDA7P6+Lib3FQu2aqCKty4BO98EHn 5d4yODe4dBB0e/1pQNH2VpBbQrNJXTByi4sixhKjeTTqNKjFmJWn3kJphnpZJN1D xaFVvHYjEshU1vWGKKK5DV1NmnQ9K50= -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:03 2025 by rpki-client