$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa File: acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa (raw, json) Hash identifier: XmljWEABlAEP2ghbUtCP9CSPedTKa1b7CosnmsKaItE= Subject key identifier: 14:58:5F:A6:C4:19:0A:80:4B:97:79:5F:0D:18:76:90:BA:97:D1:7F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A0C07B175BEE2BA1887E67740 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 400759 IP address blocks: 142.252.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:b1:75:be:e2:ba:18:87:e6:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4bf9e1f4-3e29-4631-a608-efd1769fab89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:28:e5:8f:2c:c8:28:1b:97:43:de:15:da: 09:f3:89:33:3a:71:60:3f:03:95:0a:eb:17:5f:9f: f2:62:ee:f0:7e:52:64:e1:2f:7f:84:33:4f:29:a9: 26:7c:91:07:9a:16:da:19:9b:2a:be:d9:2c:38:cc: 27:2b:fd:b9:24:fb:56:72:ef:09:33:b8:19:13:b7: 76:8e:78:78:9e:ce:b1:ca:84:cd:27:44:ef:e3:f4: fe:23:30:5a:b9:d2:c1:07:6d:7e:0a:bd:f4:ca:69: 00:1a:33:db:86:4b:ca:00:78:9a:5b:30:49:ad:f7: e7:fd:b4:d4:d8:1a:74:57:fc:2f:83:a9:24:bd:53: f5:58:f8:a6:48:5e:9e:31:c9:95:7e:44:fc:27:8f: d8:c3:5e:ef:76:44:40:b4:6b:3f:bc:80:ee:f4:09: 83:f5:2b:b4:e4:fe:7c:c3:9d:53:bd:89:7d:f8:f0: 6e:c8:d1:91:66:27:ec:c8:bb:a4:ad:40:4f:ba:88: ba:7b:03:da:dd:17:ab:2b:12:2c:67:af:43:a0:bb: 10:47:ea:e2:d5:ee:1b:ee:a6:17:26:9c:88:ef:44: d5:21:92:c6:3e:05:aa:f4:e2:a8:05:ea:6f:29:4f: b2:ed:de:c0:68:e6:a9:75:54:c1:40:1e:6a:ef:75: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:58:5F:A6:C4:19:0A:80:4B:97:79:5F:0D:18:76:90:BA:97:D1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5b:dc:bc:d3:95:09:fe:79:4d:4d:34:2d:15:57:46:f1:73: 21:fc:f5:24:c8:cd:91:5b:55:e8:28:8a:b9:c6:ba:09:e2:6c: 0a:4e:5d:5b:0c:b9:cf:c5:73:5e:29:fe:08:13:6b:ff:2e:c9: 9e:2b:ae:6a:03:38:8f:9b:3e:ab:cf:b2:7b:11:62:4a:e6:a5: 58:8b:af:35:26:91:7a:ce:bc:7d:06:1a:f2:d5:17:0c:50:e5: 92:ce:c7:c6:65:e3:18:b7:c8:a6:73:63:4f:ec:89:1f:6c:a2: 4a:31:3a:4c:8c:12:81:32:3d:cc:99:1f:83:d8:b2:35:fa:0b: 64:eb:55:b4:f7:4d:d7:44:01:93:a7:d6:6a:8c:b2:cd:61:5d: 7a:b4:e1:21:c0:1a:b8:c5:1f:d9:15:54:3b:d2:91:fa:26:3f: 03:53:91:50:fa:dc:04:47:85:e1:26:b2:69:e6:4b:e6:bd:e5: 4a:ed:f2:90:df:94:f2:f0:9a:bb:41:5b:79:fc:90:8c:2c:28: af:59:c9:37:59:db:4e:c9:57:53:7c:4f:2d:6b:eb:0b:51:c7: e6:c3:8e:dc:24:49:19:14:8f:de:5c:81:d9:7e:6b:38:88:f5: d7:e2:2a:f2:f2:40:65:ce:00:c0:d7:8d:c0:17:bd:59:ba:da: 30:78:84:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB7F1vuK6GIfmd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NGJmOWUxZjQtM2UyOS00NjMxLWE2MDgtZWZkMTc2OWZhYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwAo5Y8syCgbl0PeFdoJ84kzOnFgPwOVCusX X5/yYu7wflJk4S9/hDNPKakmfJEHmhbaGZsqvtksOMwnK/25JPtWcu8JM7gZE7d2 jnh4ns6xyoTNJ0Tv4/T+IzBaudLBB21+Cr30ymkAGjPbhkvKAHiaWzBJrffn/bTU 2Bp0V/wvg6kkvVP1WPimSF6eMcmVfkT8J4/Yw17vdkRAtGs/vIDu9AmD9Su05P58 w51TvYl9+PBuyNGRZifsyLukrUBPuoi6ewPa3RerKxIsZ69DoLsQR+ri1e4b7qYX JpyI70TVIZLGPgWq9OKoBepvKU+y7d7AaOapdVTBQB5q73VDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRYX6bEGQqAS5d5Xw0YdpC6l9F/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWNkMzc2N2UtNmZhMC0z MWQ4LWExYTItZDgwNjhmNGUxMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBb3LzTlQn+eU1NNC0VV0bxcyH89STIzZFbVegoirnGugnibApOXVsM uc/Fc14p/ggTa/8uyZ4rrmoDOI+bPqvPsnsRYkrmpViLrzUmkXrOvH0GGvLVFwxQ 5ZLOx8Zl4xi3yKZzY0/siR9sokoxOkyMEoEyPcyZH4PYsjX6C2TrVbT3TddEAZOn 1mqMss1hXXq04SHAGrjFH9kVVDvSkfomPwNTkVD63ARHheEmsmnmS+a95Urt8pDf lPLwmrtBW3n8kIwsKK9ZyTdZ207JV1N8Ty1r6wtRx+bDjtwkSRkUj95cgdl+aziI 9dfiKvLyQGXOAMDXjcAXvVm62jB4hG4= -----END CERTIFICATE-----Generated at Sun Jun 15 05:09:13 2025 by rpki-client