$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a203562-7d6e-3444-963c-73584c3a3722.roa File: 8a203562-7d6e-3444-963c-73584c3a3722.roa (raw, json) Hash identifier: CDY1HwLlxliHqNV9o3CKZZSpM+IMfzukTn2Ij/dO3Yk= Subject key identifier: 3F:10:D5:69:30:80:FA:B5:89:F6:56:7C:C9:E5:C8:23:DD:F2:FF:BF Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849927A6A0E9150A44E69BA8B40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a203562-7d6e-3444-963c-73584c3a3722.roa Signing time: Sat 19 Apr 2025 00:08:30 +0000 ROA not before: Sat 19 Apr 2025 00:08:30 +0000 ROA not after: Fri 18 Jul 2025 00:08:30 +0000 asID: 834 IP address blocks: 172.121.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:7a:6a:0e:91:50:a4:4e:69:ba:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 19 00:08:30 2025 GMT Not After : Jul 18 00:08:30 2025 GMT Subject: CN=a9d7c3df-7ae2-4be1-b4c7-0eab6f0c445f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:8d:4b:34:59:6b:07:6d:17:66:7c:35:ab: ed:2a:31:94:22:dd:fb:89:a7:21:8b:d1:1c:44:aa: 8c:8c:31:a6:02:8f:e9:0c:07:3d:9b:4e:e6:2b:62: ab:6e:64:ba:a7:f1:52:f2:75:97:10:0d:e2:37:7c: d6:f1:50:cf:47:4f:ea:d1:05:7e:8b:93:91:4d:6f: 44:cb:4c:df:47:ec:7b:5d:9f:e1:b3:51:8e:05:fe: 41:a4:1d:7b:27:fc:b9:88:83:99:cf:3f:5c:f9:88: c6:42:13:30:dc:be:56:74:57:23:e5:38:67:92:fb: bd:3b:5b:4d:b8:05:db:0d:27:f6:97:a3:f2:8f:be: 80:f2:0f:57:56:d4:29:d2:03:b6:95:85:8b:6f:6d: dc:6c:bc:89:6b:1f:62:d6:84:cb:a1:62:53:a7:d5: 89:c3:42:e9:3e:9a:ae:d0:5b:8c:b2:c7:8a:11:c3: e2:52:48:4f:5a:f6:03:fa:4e:fe:1d:3c:fe:14:12: d8:9a:5f:ae:f9:af:1a:1f:61:7a:c0:2c:01:9f:75: 1f:a6:5e:a9:09:fe:31:58:d6:73:48:cc:35:a0:34: ee:f6:04:3e:ff:f1:65:f4:a6:4b:dd:12:3c:b0:3e: 8c:64:a6:63:81:ad:17:ff:00:7e:a6:46:d8:23:b9: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:10:D5:69:30:80:FA:B5:89:F6:56:7C:C9:E5:C8:23:DD:F2:FF:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a203562-7d6e-3444-963c-73584c3a3722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5e:7b:55:1f:77:0d:2f:33:4c:f5:53:c8:80:0d:5f:87:d6: d4:55:eb:0d:3d:08:44:1e:0c:6e:15:10:a9:cc:17:b3:97:0e: 7d:3d:02:f7:51:70:df:4c:86:96:c3:4c:59:09:3f:5f:17:42: 9f:85:71:78:41:e7:54:4f:7f:81:d4:d0:40:40:bc:35:75:dd: 15:fe:28:50:71:ce:1f:42:80:f7:7b:0f:18:3a:eb:cb:cc:e9: f6:fb:87:b0:2f:b2:65:78:88:08:ba:e6:fc:ea:f2:d5:81:e9: e0:b8:05:56:7a:ee:05:bb:c3:5c:99:49:11:82:d9:28:8f:31: db:79:fe:ed:bd:53:bf:5a:f2:15:c6:ba:9f:a9:13:e9:67:5b: 6f:ef:58:31:5d:41:ff:ae:af:00:b2:96:99:7b:d3:43:95:46: 3b:89:c0:ec:9b:04:99:8d:d5:f5:53:a1:c7:5c:0f:9f:07:8c: 49:61:60:bd:72:26:9b:c1:7d:ff:06:03:a8:2b:9d:a8:07:09: cc:68:63:d4:db:2f:c4:fa:b9:fa:23:c9:98:cc:10:ac:db:b0: 83:2a:e6:c5:d2:2f:3c:e5:08:f3:eb:ac:0d:c9:24:c5:d7:bd: c2:89:3d:5a:50:19:5f:f7:02:2e:b7:ae:54:34:68:81:34:bc: e5:6c:71:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSemoOkVCkTmm6i0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxOTAwMDgzMFoXDTI1MDcxODAwMDgzMFowLzEtMCsGA1UEAxMk YTlkN2MzZGYtN2FlMi00YmUxLWI0YzctMGVhYjZmMGM0NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+KNSzRZawdtF2Z8NavtKjGUIt37iachi9Ec RKqMjDGmAo/pDAc9m07mK2KrbmS6p/FS8nWXEA3iN3zW8VDPR0/q0QV+i5ORTW9E y0zfR+x7XZ/hs1GOBf5BpB17J/y5iIOZzz9c+YjGQhMw3L5WdFcj5Thnkvu9O1tN uAXbDSf2l6Pyj76A8g9XVtQp0gO2lYWLb23cbLyJax9i1oTLoWJTp9WJw0LpPpqu 0FuMsseKEcPiUkhPWvYD+k7+HTz+FBLYml+u+a8aH2F6wCwBn3Ufpl6pCf4xWNZz SMw1oDTu9gQ+//Fl9KZL3RI8sD6MZKZjga0X/wB+pkbYI7mDQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8Q1WkwgPq1ifZWfMnlyCPd8v+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGEyMDM1NjItN2Q2ZS0z NDQ0LTk2M2MtNzM1ODRjM2EzNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERee1Ufdw0vM0z1U8iADV+H1tRV6w09CEQeDG4VEKnMF7OXDn09AvdR cN9MhpbDTFkJP18XQp+FcXhB51RPf4HU0EBAvDV13RX+KFBxzh9CgPd7Dxg668vM 6fb7h7AvsmV4iAi65vzq8tWB6eC4BVZ67gW7w1yZSRGC2SiPMdt5/u29U79a8hXG up+pE+lnW2/vWDFdQf+urwCylpl700OVRjuJwOybBJmN1fVTocdcD58HjElhYL1y JpvBff8GA6grnagHCcxoY9TbL8T6ufojyZjMEKzbsIMq5sXSLzzlCPPrrA3JJMXX vcKJPVpQGV/3Ai63rlQ0aIE0vOVsccc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:46 2025 by rpki-client