$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b74b2deb-536d-3ab0-8fc4-9c543864129a.roa File: b74b2deb-536d-3ab0-8fc4-9c543864129a.roa (raw, json) Hash identifier: 2yw1fRea+CeFKMMnpGeeSWyrMkofx4jrDh6vWbUDCKw= Subject key identifier: F2:1D:5E:67:E2:16:93:76:1E:4B:D6:9C:37:69:F0:6E:31:C2:4F:C8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848F200CBE9B22F79616C56A3C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b74b2deb-536d-3ab0-8fc4-9c543864129a.roa Signing time: Thu 20 Feb 2025 12:34:07 +0000 ROA not before: Thu 20 Feb 2025 12:34:07 +0000 ROA not after: Wed 21 May 2025 11:34:07 +0000 asID: 18779 IP address blocks: 172.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:00:cb:e9:b2:2f:79:61:6c:56:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 20 12:34:07 2025 GMT Not After : May 21 11:34:07 2025 GMT Subject: CN=685e62a7-8791-4331-83f1-9e2a66cdda66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:dc:a2:88:ae:06:d8:6d:a6:92:3e:07:e1: 16:c9:4e:31:c6:8d:a8:e1:29:06:5a:a5:65:16:a6: 5c:1a:44:a4:19:7b:05:54:23:59:15:48:3f:9f:cd: 83:82:75:c3:29:36:73:40:0c:25:7a:43:5a:7d:a2: 3f:f2:ef:32:6e:7b:ba:28:29:e0:7c:01:59:3c:46: 11:56:6e:d4:d7:fc:08:84:7c:ed:1d:8f:7b:37:e3: 69:59:2d:14:79:bb:00:a5:f0:3f:7e:8b:25:60:5e: be:e0:62:84:c8:84:bb:b4:08:1b:9d:7a:c9:44:d1: cf:d2:d6:67:12:5e:d7:fe:ce:97:c6:19:d4:37:6d: ac:8c:a7:0c:cf:af:7c:f4:88:6e:86:ba:b5:8a:fb: 93:40:03:72:8e:91:04:c0:4f:2a:68:3b:3b:86:2f: d0:14:2c:bf:26:45:8c:51:98:f9:44:92:18:2f:bb: ad:0c:22:91:f3:6b:c0:cb:fb:c5:f5:b3:7b:1f:2b: 6c:d0:f1:c4:c5:7e:71:39:34:42:9c:a5:6f:8e:8a: f6:da:8b:a1:ad:f6:a4:dc:e6:5b:36:21:5d:50:42: 92:a6:60:81:c9:5b:34:1c:9e:02:6a:03:ad:c2:a8: 55:d5:a8:0c:77:c8:60:04:52:a1:fa:4a:73:98:db: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1D:5E:67:E2:16:93:76:1E:4B:D6:9C:37:69:F0:6E:31:C2:4F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b74b2deb-536d-3ab0-8fc4-9c543864129a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:80:60:7c:48:4f:90:87:86:b3:61:2f:95:19:b7:f3:d4:47: 73:53:4f:c2:08:46:9d:b5:58:3e:fc:9c:4c:1e:6d:f6:84:e6: 0a:80:54:b7:2e:2f:12:08:f4:0c:ab:a5:02:d6:b4:d2:63:f2: 94:e2:a3:67:60:8d:97:14:60:50:72:e0:a7:08:c5:c7:e7:7b: 94:8c:1b:87:bd:b3:20:bc:53:09:93:51:cb:c5:fc:cb:55:28: 97:c6:ed:f0:8c:f3:4f:5a:67:e7:f4:40:d1:49:a4:1c:c2:2f: 88:16:4b:75:5d:f9:47:9e:74:ee:29:57:6e:75:78:96:77:d8: dd:aa:da:3d:e9:5c:81:da:58:e9:24:9e:7c:b7:a7:00:d5:b0: d7:7a:e9:38:e2:91:9c:00:7f:3d:73:87:05:7b:28:5f:09:9a: 5e:82:5c:b3:01:cc:ef:ea:8e:ca:0d:1f:24:72:4c:a9:de:e2: d1:68:87:9c:3b:02:55:69:4d:d2:75:27:89:18:36:af:0a:ba: 07:8a:11:34:7e:d5:20:85:40:e5:60:c0:24:7e:3e:e8:5c:76: d8:68:83:b5:0d:dd:cc:09:19:71:d1:3c:92:01:07:0c:84:1c: ee:f4:3f:55:50:93:a9:1d:a2:8c:87:e2:27:c1:5e:ae:60:cf: 25:ac:49:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyAMvpsi95YWxWo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyMDEyMzQwN1oXDTI1MDUyMTExMzQwN1owLzEtMCsGA1UEAxMk Njg1ZTYyYTctODc5MS00MzMxLTgzZjEtOWUyYTY2Y2RkYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20TcooiuBthtppI+B+EWyU4xxo2o4SkGWqVl FqZcGkSkGXsFVCNZFUg/n82DgnXDKTZzQAwlekNafaI/8u8ybnu6KCngfAFZPEYR Vm7U1/wIhHztHY97N+NpWS0UebsApfA/foslYF6+4GKEyIS7tAgbnXrJRNHP0tZn El7X/s6XxhnUN22sjKcMz6989Ihuhrq1ivuTQANyjpEEwE8qaDs7hi/QFCy/JkWM UZj5RJIYL7utDCKR82vAy/vF9bN7Hyts0PHExX5xOTRCnKVvjor22ouhrfak3OZb NiFdUEKSpmCByVs0HJ4CagOtwqhV1agMd8hgBFKh+kpzmNurRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIdXmfiFpN2HkvWnDdp8G4xwk/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjc0YjJkZWItNTM2ZC0z YWIwLThmYzQtOWM1NDM4NjQxMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+AYHxIT5CHhrNhL5UZt/PUR3NTT8IIRp21WD78nEwebfaE5gqAVLcu LxII9AyrpQLWtNJj8pTio2dgjZcUYFBy4KcIxcfne5SMG4e9syC8UwmTUcvF/MtV KJfG7fCM809aZ+f0QNFJpBzCL4gWS3Vd+UeedO4pV251eJZ32N2q2j3pXIHaWOkk nny3pwDVsNd66TjikZwAfz1zhwV7KF8Jml6CXLMBzO/qjsoNHyRyTKne4tFoh5w7 AlVpTdJ1J4kYNq8KugeKETR+1SCFQOVgwCR+Puhcdthog7UN3cwJGXHRPJIBBwyE HO70P1VQk6kdooyH4ifBXq5gzyWsSQc= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:26 2025 by rpki-client