$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2207dd0-cfc7-3b55-aa7a-68328b6e2a77.roa File: b2207dd0-cfc7-3b55-aa7a-68328b6e2a77.roa (raw, json) Hash identifier: 105Me8sEWHX44+6l6zOR6Kt3PwoMoRF8A83wMWBGtmU= Subject key identifier: 5B:C5:18:FD:65:20:B4:1C:55:C8:06:0D:3E:36:1B:7B:32:93:A1:6B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849A1EF7BAD87660941A2B48B80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2207dd0-cfc7-3b55-aa7a-68328b6e2a77.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 6939 IP address blocks: 172.252.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:7b:ad:87:66:09:41:a2:b4:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=f7742754-4f19-4e93-8e06-b2f996cff47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:2b:39:2a:45:7e:af:9e:aa:71:26:80:cc: c0:17:f2:a8:84:c0:cd:f1:8c:03:03:36:8a:61:aa: 95:b8:b8:4d:8c:7e:db:2c:f1:5a:02:65:12:f3:5a: 7f:dc:95:63:3f:7b:8b:c3:cc:bd:7a:0a:93:ca:89: 14:2d:75:46:68:d8:94:56:94:6f:99:bd:28:88:8c: 85:13:90:55:9f:25:c8:e9:d9:1e:a2:f8:9a:6e:5a: 0e:73:8c:11:c4:17:1e:e6:1a:e4:a2:a2:13:49:4f: e4:66:fd:d5:cd:7a:7a:d7:d4:21:c1:06:03:b4:f5: be:0c:6b:99:6d:aa:7c:8b:83:0a:05:bb:44:16:b5: 76:22:97:85:8e:f2:76:05:28:ee:be:dd:8b:98:a4: bd:74:44:2f:96:d1:39:65:48:b3:86:6e:07:d3:49: f4:25:2f:b3:47:c5:9b:84:ba:a8:51:d7:38:26:71: 7d:02:27:ba:d5:6b:0a:5d:c5:e9:ec:15:cf:6d:a5: e7:e9:53:05:0c:c1:3d:e1:2c:ad:53:c0:fb:1f:3f: 33:92:e1:72:36:69:2b:f3:a9:88:e8:ef:56:b5:fd: 7b:ee:43:09:3f:55:3f:a7:f9:e8:74:42:e9:ba:3d: b8:cf:0f:1d:4d:bc:46:8d:42:ee:26:a2:ee:ea:54: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C5:18:FD:65:20:B4:1C:55:C8:06:0D:3E:36:1B:7B:32:93:A1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2207dd0-cfc7-3b55-aa7a-68328b6e2a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:06:da:a9:02:34:df:5f:85:19:2f:c5:b4:1f:46:4d:a6:b7: 5a:c1:37:73:8f:21:d8:8c:9a:e0:11:0b:32:54:3f:ef:3f:d5: 8d:11:67:8b:c6:73:a2:22:d2:cf:ce:62:5a:83:08:67:4f:b9: c2:7b:eb:bc:1f:0d:72:25:13:3f:bd:63:70:37:e4:77:0d:c7: bf:79:a7:cd:ca:08:2a:a2:9c:be:50:8c:41:30:67:2a:1c:72: 87:76:f5:f7:33:61:40:69:36:ae:30:bd:63:9f:3d:a2:3f:07: d0:0d:31:94:be:f5:50:35:47:58:bc:9f:da:b8:1b:4b:90:de: 03:de:70:60:4d:e5:51:60:2b:9b:be:0a:6b:eb:d8:d1:1d:0d: ee:26:82:62:07:3f:e4:26:5f:97:32:cc:2f:36:98:86:45:e0: 5b:f8:59:14:0c:4c:75:8d:00:d0:72:51:f1:28:76:84:10:d7: 64:9d:9e:40:1a:06:e7:f3:1f:b0:9c:ef:ba:e7:2e:46:68:9e: 30:99:d7:ee:ca:66:5a:c1:d6:56:b5:d2:e5:3f:2e:74:61:cc: de:20:1f:6e:6d:bd:8f:a8:48:08:8e:02:97:8f:f9:5d:fe:52: fc:e3:1a:f8:21:0d:27:01:39:6a:ad:69:e9:bb:d4:55:c0:a6: 32:29:25:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73uth2YJQaK0i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Zjc3NDI3NTQtNGYxOS00ZTkzLThlMDYtYjJmOTk2Y2ZmNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/4rOSpFfq+eqnEmgMzAF/KohMDN8YwDAzaK YaqVuLhNjH7bLPFaAmUS81p/3JVjP3uLw8y9egqTyokULXVGaNiUVpRvmb0oiIyF E5BVnyXI6dkeoviabloOc4wRxBce5hrkoqITSU/kZv3VzXp619QhwQYDtPW+DGuZ bap8i4MKBbtEFrV2IpeFjvJ2BSjuvt2LmKS9dEQvltE5ZUizhm4H00n0JS+zR8Wb hLqoUdc4JnF9Aie61WsKXcXp7BXPbaXn6VMFDME94SytU8D7Hz8zkuFyNmkr86mI 6O9Wtf177kMJP1U/p/nodELpuj24zw8dTbxGjULuJqLu6lSsqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvFGP1lILQcVcgGDT42G3syk6FrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjIyMDdkZDAtY2ZjNy0z YjU1LWFhN2EtNjgzMjhiNmUyYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgG2qkCNN9fhRkvxbQfRk2mt1rBN3OPIdiMmuARCzJUP+8/1Y0RZ4vG c6Ii0s/OYlqDCGdPucJ767wfDXIlEz+9Y3A35HcNx795p83KCCqinL5QjEEwZyoc cod29fczYUBpNq4wvWOfPaI/B9ANMZS+9VA1R1i8n9q4G0uQ3gPecGBN5VFgK5u+ Cmvr2NEdDe4mgmIHP+QmX5cyzC82mIZF4Fv4WRQMTHWNANByUfEodoQQ12SdnkAa BufzH7Cc77rnLkZonjCZ1+7KZlrB1la10uU/LnRhzN4gH25tvY+oSAiOApeP+V3+ UvzjGvghDScBOWqtaem71FXApjIpJa4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:17:30 2025 by rpki-client