$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a472acf5-4d87-3cb6-8aef-2fbc14bf33ed.roa File: a472acf5-4d87-3cb6-8aef-2fbc14bf33ed.roa (raw, json) Hash identifier: Kh/4RXq1Y2hFzW5DkrvNgL2YRKb2MiGzQ7ZbwNCOjH4= Subject key identifier: 77:00:EF:D7:83:2B:75:EC:25:53:8B:8C:2B:F3:45:18:8C:E3:BE:C4 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D0ABCA4EB3769969A5756A40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a472acf5-4d87-3cb6-8aef-2fbc14bf33ed.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 44893 IP address blocks: 142.252.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:ca:4e:b3:76:99:69:a5:75:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=37b957bc-5d6c-45d1-8cc4-819c9d069cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:56:e1:b3:f3:11:9a:07:8b:e7:08:93:76:38: 3f:ac:35:e2:1d:1b:47:2e:1a:c2:f9:78:86:f2:f9: 41:37:81:2f:dd:3f:67:87:4a:39:32:82:38:2c:01: aa:ef:00:0a:d0:c9:4d:5a:b3:e0:98:cf:b9:1d:6f: 11:78:a6:f0:7f:07:27:a6:c0:f6:f5:09:85:dc:45: 1c:09:1b:58:cd:fe:ec:15:a6:02:82:ac:a7:b2:f0: 6c:e9:5b:1c:df:8e:51:99:c6:a4:2a:75:34:79:0b: 72:21:ce:aa:05:6c:d8:b8:77:40:70:0b:1a:02:f9: 4d:91:03:c8:8d:29:32:de:45:f7:2c:01:1f:d3:3b: 6c:01:20:84:64:44:c0:ed:fd:02:73:98:d8:46:74: 5c:51:2e:cc:43:67:ef:9d:16:84:32:0f:8b:14:8b: c8:f0:47:40:0d:1c:29:da:8f:f2:45:9c:00:de:c6: a1:8e:5a:a9:9d:71:d6:56:32:cf:62:be:07:c6:9f: 53:e0:c5:89:f3:0d:93:2e:21:c7:a5:9d:10:90:49: fd:2f:9b:f0:69:3c:0b:8f:3b:49:de:2e:20:b5:76: e7:6c:db:61:0f:79:63:55:f1:66:09:e3:36:dc:e4: 90:ec:1e:45:fd:00:2b:36:f3:c4:bb:eb:b1:5e:3b: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:EF:D7:83:2B:75:EC:25:53:8B:8C:2B:F3:45:18:8C:E3:BE:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a472acf5-4d87-3cb6-8aef-2fbc14bf33ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a6:42:71:c4:7f:a8:d8:fe:f1:d9:27:15:00:1c:2f:c7:68: c4:fc:c7:6b:5e:6a:77:55:fb:c0:4b:87:fb:9f:48:b9:e4:79: d5:4a:42:76:2a:b5:2d:6d:17:04:94:06:e8:d1:2e:bb:ca:d3: eb:0a:f5:c0:44:af:ef:88:78:a9:50:7a:2b:a6:40:2e:86:6a: b7:95:a6:77:5a:8c:a7:a2:24:cf:3e:ef:86:0b:67:b9:04:7e: 86:9e:35:b5:ad:0e:e1:fa:6a:7f:b4:43:01:78:2d:8a:a9:60: 6d:0e:2a:de:25:76:e5:49:01:62:30:07:64:3d:b9:84:ef:22: 8a:d0:65:94:54:34:19:3e:9c:3d:a9:06:d0:77:09:6b:c8:87: 9d:ba:1e:b0:48:82:1f:98:f9:61:d1:31:07:61:85:f1:3a:d5: 15:ee:f6:b4:50:ab:7f:c6:4b:e3:0c:c4:5d:9a:c0:35:e9:4e: d7:c8:12:43:c6:76:46:04:4f:2b:31:88:35:d5:ea:cb:a4:e9: 98:d5:13:c8:8b:c4:76:64:c8:f1:6f:8c:1e:1e:da:a8:b9:6b: 38:6c:52:13:e5:36:6a:cc:15:4a:84:68:d1:07:5a:b2:9f:54: 28:bd:6c:8e:32:f4:f4:e3:4b:bd:30:5d:97:10:a6:11:6f:cb: 18:51:8c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8pOs3aZaaV1akAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MzdiOTU3YmMtNWQ2Yy00NWQxLThjYzQtODE5YzlkMDY5Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglbhs/MRmgeL5wiTdjg/rDXiHRtHLhrC+XiG 8vlBN4Ev3T9nh0o5MoI4LAGq7wAK0MlNWrPgmM+5HW8ReKbwfwcnpsD29QmF3EUc CRtYzf7sFaYCgqynsvBs6Vsc345RmcakKnU0eQtyIc6qBWzYuHdAcAsaAvlNkQPI jSky3kX3LAEf0ztsASCEZETA7f0Cc5jYRnRcUS7MQ2fvnRaEMg+LFIvI8EdADRwp 2o/yRZwA3sahjlqpnXHWVjLPYr4Hxp9T4MWJ8w2TLiHHpZ0QkEn9L5vwaTwLjztJ 3i4gtXbnbNthD3ljVfFmCeM23OSQ7B5F/QArNvPEu+uxXjumKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcA79eDK3XsJVOLjCvzRRiM477EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTQ3MmFjZjUtNGQ4Ny0z Y2I2LThhZWYtMmZiYzE0YmYzM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGmQnHEf6jY/vHZJxUAHC/HaMT8x2teandV+8BLh/ufSLnkedVKQnYq tS1tFwSUBujRLrvK0+sK9cBEr++IeKlQeiumQC6GareVpndajKeiJM8+74YLZ7kE foaeNbWtDuH6an+0QwF4LYqpYG0OKt4lduVJAWIwB2Q9uYTvIorQZZRUNBk+nD2p BtB3CWvIh526HrBIgh+Y+WHRMQdhhfE61RXu9rRQq3/GS+MMxF2awDXpTtfIEkPG dkYETysxiDXV6suk6ZjVE8iLxHZkyPFvjB4e2qi5azhsUhPlNmrMFUqEaNEHWrKf VCi9bI4y9PTjS70wXZcQphFvyxhRjL0= -----END CERTIFICATE-----Generated at Sun Apr 27 16:44:00 2025 by rpki-client