$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/997bddef-47b9-3cf2-a7d0-1bb1333a0d65.roa File: 997bddef-47b9-3cf2-a7d0-1bb1333a0d65.roa (raw, json) Hash identifier: 5SjAQ2L/hRtJTQfS0/oGTg6qmALhIE8B7dvWzBGczPA= Subject key identifier: 3D:95:54:56:9A:3D:D7:E6:AE:02:BF:20:59:49:5C:9E:B3:13:65:4E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499C5A7F2D67AA26D114B4CD80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/997bddef-47b9-3cf2-a7d0-1bb1333a0d65.roa Signing time: Tue 22 Apr 2025 13:02:16 +0000 ROA not before: Tue 22 Apr 2025 13:02:16 +0000 ROA not after: Mon 21 Jul 2025 13:02:16 +0000 asID: 54252 IP address blocks: 172.252.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:7f:2d:67:aa:26:d1:14:b4:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 22 13:02:16 2025 GMT Not After : Jul 21 13:02:16 2025 GMT Subject: CN=4f12e8fc-d196-40b4-9a81-96575bf45b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:54:61:e7:7d:07:45:f9:6d:68:76:16:27: cf:6c:12:99:a3:bf:20:bc:29:c2:08:51:f2:24:d2: c7:b4:c3:4c:f7:2e:f2:31:92:7e:a3:4e:7a:8d:f1: ec:ea:59:ca:09:08:cf:f3:55:75:23:78:f7:a5:1b: 19:0d:21:d8:18:b8:71:c2:29:f2:e9:71:e5:91:61: 85:8d:13:34:5e:3f:1a:19:c6:2d:c0:11:45:ff:ae: d1:f2:a7:82:b2:37:fe:00:bf:b1:65:97:f2:fc:bb: 0a:60:d9:a5:fc:46:cc:ed:5a:79:b8:9f:fe:03:71: a4:fc:12:7d:d4:dd:7b:6a:24:0e:bd:99:44:bd:e4: aa:5a:d8:b0:25:af:72:64:2d:f9:4a:79:8d:ab:30: 92:d6:0a:5e:60:c8:6c:57:75:47:15:94:b3:c5:18: f5:51:3c:c5:2f:6c:90:8e:2a:54:b2:f1:e3:96:3a: 62:ec:64:fb:76:15:d0:51:f8:b5:bb:05:92:22:50: 6f:14:14:bb:49:e7:57:ce:b9:20:b0:76:64:dc:fb: 06:9a:a2:86:51:1f:c1:b9:24:54:2c:0b:32:a7:45: 0e:a8:b3:49:2e:98:52:5c:1f:7d:41:53:95:3b:c5: dd:cb:26:7d:c9:5d:22:39:c2:16:97:7a:2c:7c:6a: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:95:54:56:9A:3D:D7:E6:AE:02:BF:20:59:49:5C:9E:B3:13:65:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/997bddef-47b9-3cf2-a7d0-1bb1333a0d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c8:0a:0e:25:2a:a1:d9:1c:5b:d6:7d:66:b8:e9:6d:86:8d: b2:eb:48:a1:52:44:3f:24:29:6f:4b:37:22:d4:23:82:22:e3: ea:bf:b3:84:27:2a:42:25:5d:38:dc:88:a8:2d:5a:46:38:6c: 27:8c:10:d2:93:2b:20:bb:16:79:01:29:e8:f7:2b:94:3b:9b: c4:d0:90:9c:c8:3f:91:a6:ae:37:05:25:71:6f:8e:37:36:43: f8:bf:34:77:a9:27:64:59:21:33:cd:3e:10:26:03:ec:e5:a0: 91:bf:59:8d:3d:b7:12:99:1f:33:52:f5:63:b5:d5:2a:9b:7f: 3b:8d:94:c2:59:72:ac:bd:71:08:1d:45:1f:f3:d4:84:6b:97: 43:98:f2:16:fa:41:53:50:56:e2:78:75:1f:40:6e:c2:99:0a: 2b:d8:e2:cf:24:34:20:8d:86:8d:23:0c:27:7c:12:32:27:fc: 64:1f:13:2c:d3:e4:66:86:3d:0b:eb:2d:b8:97:13:90:19:44: 9a:d4:a5:65:a9:82:d4:ec:36:8e:ab:f9:aa:1b:11:3b:bd:89: a5:ff:8d:1c:c1:ac:fb:91:bc:5f:07:67:b8:2f:83:f0:7d:1a: 79:f2:9d:eb:62:0e:9a:cc:88:44:1a:65:f5:39:65:f1:95:4f: 83:45:d2:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWn8tZ6om0RS0zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMjEzMDIxNloXDTI1MDcyMTEzMDIxNlowLzEtMCsGA1UEAxMk NGYxMmU4ZmMtZDE5Ni00MGI0LTlhODEtOTY1NzViZjQ1YjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs85UYed9B0X5bWh2FifPbBKZo78gvCnCCFHy JNLHtMNM9y7yMZJ+o056jfHs6lnKCQjP81V1I3j3pRsZDSHYGLhxwiny6XHlkWGF jRM0Xj8aGcYtwBFF/67R8qeCsjf+AL+xZZfy/LsKYNml/EbM7Vp5uJ/+A3Gk/BJ9 1N17aiQOvZlEveSqWtiwJa9yZC35SnmNqzCS1gpeYMhsV3VHFZSzxRj1UTzFL2yQ jipUsvHjljpi7GT7dhXQUfi1uwWSIlBvFBS7SedXzrkgsHZk3PsGmqKGUR/BuSRU LAsyp0UOqLNJLphSXB99QVOVO8XdyyZ9yV0iOcIWl3osfGrkDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2VVFaaPdfmrgK/IFlJXJ6zE2VOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTk3YmRkZWYtNDdiOS0z Y2YyLWE3ZDAtMWJiMTMzM2EwZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzICg4lKqHZHFvWfWa46W2GjbLrSKFSRD8kKW9LNyLUI4Ii4+q/s4Qn KkIlXTjciKgtWkY4bCeMENKTKyC7FnkBKej3K5Q7m8TQkJzIP5GmrjcFJXFvjjc2 Q/i/NHepJ2RZITPNPhAmA+zloJG/WY09txKZHzNS9WO11SqbfzuNlMJZcqy9cQgd RR/z1IRrl0OY8hb6QVNQVuJ4dR9AbsKZCivY4s8kNCCNho0jDCd8EjIn/GQfEyzT 5GaGPQvrLbiXE5AZRJrUpWWpgtTsNo6r+aobETu9iaX/jRzBrPuRvF8HZ7gvg/B9 GnnynetiDprMiEQaZfU5ZfGVT4NF0ig= -----END CERTIFICATE-----Generated at Sat Apr 26 19:17:10 2025 by rpki-client