$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca4914d9-e830-320f-8761-5b067e91889a.roa File: ca4914d9-e830-320f-8761-5b067e91889a.roa (raw, json) Hash identifier: Ua8595ucR7165YWmme+w2CXCRVWYpJc7Wp0YyaKukLQ= Subject key identifier: D9:CF:39:D3:B3:96:1D:55:B4:26:C5:F6:4E:5C:74:32:7E:8F:B3:76 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D641295A049963003E5DA8F4 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca4914d9-e830-320f-8761-5b067e91889a.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:29:5a:04:99:63:00:3e:5d:a8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=e8554e04-18b4-4fd0-a0a6-10ae7c42f37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:58:5b:76:be:bc:e6:0f:06:ee:a5:7b:01:f9: 16:a3:86:3a:b9:37:35:96:90:6a:67:91:08:80:44: ec:ea:e0:54:54:c7:cb:3f:f1:90:07:2a:41:20:3e: 63:87:ff:ca:71:13:da:42:f4:97:c0:90:5f:64:1d: f5:ac:e2:86:f8:8c:6a:26:68:9a:de:71:84:1c:e3: 60:ae:f1:b4:11:a0:cf:70:7f:21:8c:f6:fa:7c:b1: d3:f4:f6:8a:e5:44:b9:fb:6d:97:4f:d3:54:af:dd: 38:38:f3:39:c0:f7:03:3e:74:98:42:21:0b:e5:19: 41:b5:dc:f9:90:c9:0e:01:66:47:29:16:ef:89:98: 19:77:d2:8d:60:00:d5:10:1e:0e:ee:36:76:4a:a7: 18:4b:43:64:45:3c:24:de:d9:a3:a4:9f:5d:15:50: b2:f7:d1:96:2c:77:fd:89:13:67:76:6e:a8:13:1b: d0:28:e2:92:25:96:09:14:71:65:9f:de:bc:3e:c3: 65:dc:9c:37:5c:f7:81:69:f6:2e:46:e1:18:3f:6c: a3:db:a1:f6:d5:5c:43:f7:ca:c7:3a:93:20:a0:c2: 60:18:ac:63:96:81:2e:ac:c8:37:66:76:fa:54:8e: ac:2e:3a:0e:7a:85:f2:f0:7d:71:0b:3e:6e:a2:72: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CF:39:D3:B3:96:1D:55:B4:26:C5:F6:4E:5C:74:32:7E:8F:B3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca4914d9-e830-320f-8761-5b067e91889a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e8:ab:7c:9d:f2:1d:57:94:d0:42:67:9f:96:de:d6:85:24: 96:ed:c6:cb:f3:1a:e0:0e:07:00:5e:1f:07:83:bd:bd:66:e2: 39:15:dc:13:25:8d:0b:32:c6:48:47:cf:c2:b8:e3:62:51:50: 05:31:b8:ed:dc:56:c8:87:00:08:30:c5:f7:14:8d:72:27:80: 34:83:2d:ef:79:f9:c4:c8:dc:12:03:71:67:22:6c:42:8a:52: a6:4e:31:54:62:4d:51:57:14:b2:28:84:74:87:ef:45:bd:de: b6:b1:a6:be:c5:65:dd:4c:fd:63:3f:66:f1:eb:52:d6:e0:c8: ef:1c:a3:69:a0:b9:b0:37:43:5a:af:4b:14:1f:69:2e:63:e3: 94:44:6e:be:fe:2e:66:ad:07:f6:d4:35:cf:6d:1f:19:43:1e: ba:71:76:ca:83:5e:05:f3:a2:0f:43:35:04:05:0e:f3:0b:78: e8:52:34:ba:cf:b6:57:e2:f0:7a:87:3b:e9:5a:47:a1:e3:c3: 97:cf:7f:80:76:9a:41:fc:30:40:f8:0d:9c:4f:46:31:db:85: e4:a8:7d:37:88:95:b1:4c:c6:21:73:c7:59:93:a0:c1:1d:17: 68:39:5a:1d:f5:8a:87:f5:75:4f:1a:dc:ae:7f:1b:9d:fa:8c: 46:b4:40:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSlaBJljAD5dqPQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTg1NTRlMDQtMThiNC00ZmQwLWEwYTYtMTBhZTdjNDJmMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVhbdr685g8G7qV7AfkWo4Y6uTc1lpBqZ5EI gETs6uBUVMfLP/GQBypBID5jh//KcRPaQvSXwJBfZB31rOKG+IxqJmia3nGEHONg rvG0EaDPcH8hjPb6fLHT9PaK5US5+22XT9NUr904OPM5wPcDPnSYQiEL5RlBtdz5 kMkOAWZHKRbviZgZd9KNYADVEB4O7jZ2SqcYS0NkRTwk3tmjpJ9dFVCy99GWLHf9 iRNndm6oExvQKOKSJZYJFHFln968PsNl3Jw3XPeBafYuRuEYP2yj26H21VxD98rH OpMgoMJgGKxjloEurMg3Znb6VI6sLjoOeoXy8H1xCz5uonLi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnPOdOzlh1VtCbF9k5cdDJ+j7N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2E0OTE0ZDktZTgzMC0z MjBmLTg3NjEtNWIwNjdlOTE4ODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfoq3yd8h1XlNBCZ5+W3taFJJbtxsvzGuAOBwBeHweDvb1m4jkV3BMl jQsyxkhHz8K442JRUAUxuO3cVsiHAAgwxfcUjXIngDSDLe95+cTI3BIDcWcibEKK UqZOMVRiTVFXFLIohHSH70W93raxpr7FZd1M/WM/ZvHrUtbgyO8co2mgubA3Q1qv SxQfaS5j45REbr7+LmatB/bUNc9tHxlDHrpxdsqDXgXzog9DNQQFDvMLeOhSNLrP tlfi8HqHO+laR6Hjw5fPf4B2mkH8MED4DZxPRjHbheSofTeIlbFMxiFzx1mToMEd F2g5Wh31iof1dU8a3K5/G536jEa0QGc= -----END CERTIFICATE-----Generated at Tue Apr 29 17:26:30 2025 by rpki-client