$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db78f799-84fd-3179-b1cf-38b3911cfbd7.roa File: db78f799-84fd-3179-b1cf-38b3911cfbd7.roa (raw, json) Hash identifier: xo4WWLuoH7Vk7Ybnw8wQN2mPoMq69iARnYb2waDQ54w= Subject key identifier: EE:05:CD:57:46:71:6B:73:ED:F2:3E:05:A5:D6:F2:01:AB:D9:EE:19 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B0D32F7BE7531DA29D6CFB70 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db78f799-84fd-3179-b1cf-38b3911cfbd7.roa Signing time: Tue 29 Apr 2025 21:01:36 +0000 ROA not before: Tue 29 Apr 2025 21:01:36 +0000 ROA not after: Mon 28 Jul 2025 21:01:36 +0000 asID: 16509 IP address blocks: 172.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:d3:2f:7b:e7:53:1d:a2:9d:6c:fb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 29 21:01:36 2025 GMT Not After : Jul 28 21:01:36 2025 GMT Subject: CN=1f2f64cd-e7e7-47c8-9537-2658dab4c761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:de:38:6a:b2:71:0f:16:a2:68:a8:23:3a: 95:1f:81:aa:09:da:1f:55:b1:16:cf:e6:b2:62:b4: df:2d:af:a7:8c:4b:e3:52:42:75:c2:5a:ff:57:0c: 15:b9:91:f7:0c:e4:29:b6:7e:96:f6:08:28:e7:57: c7:7a:c7:42:8c:93:6e:fe:84:0f:9f:56:e3:b2:9f: 12:ac:3e:c9:f2:86:ea:c0:b2:ed:a6:c9:5d:89:ae: 9f:9a:bc:21:97:d5:82:4f:37:67:ea:b0:5a:8b:cd: 6d:5d:8b:85:b1:24:2b:e7:34:d6:df:f2:fc:a2:22: d5:86:c1:69:e1:b9:42:f0:9a:57:8f:5d:a1:99:33: bf:b5:3a:01:7a:22:c4:42:c1:46:be:7f:5f:f4:66: 72:5c:b5:fe:2f:61:60:82:99:8f:71:eb:51:b9:5a: dd:c3:11:e5:47:85:3c:6f:14:d6:d3:c5:9d:f0:33: 1b:ea:f6:1c:ab:e8:15:ee:4b:c7:26:19:14:09:01: 45:33:dc:88:23:76:05:a4:72:77:ea:44:e0:be:de: 8b:84:b1:3e:46:97:a3:28:75:32:29:e4:f2:bb:7c: 29:79:b4:34:23:06:65:11:29:e0:80:34:d1:14:02: fb:48:df:09:69:42:e3:26:68:af:45:37:47:21:4b: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:05:CD:57:46:71:6B:73:ED:F2:3E:05:A5:D6:F2:01:AB:D9:EE:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db78f799-84fd-3179-b1cf-38b3911cfbd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:98:bc:18:17:60:5a:c7:80:09:87:73:5b:d3:a9:b7:9d:c9: 01:e2:60:a5:65:4d:3c:3e:4f:3f:69:e5:b8:25:30:b6:a4:22: 8e:51:f0:05:5c:e3:5b:58:72:db:09:68:7d:7c:2d:b0:3c:01: 50:90:93:61:3b:52:1c:bd:91:42:d3:a9:fd:00:f8:1e:80:4f: 6c:0d:f1:77:9c:2b:22:6e:df:d1:15:e6:9b:05:05:7a:9a:7b: 11:e0:b1:68:1a:fb:15:b1:9c:0d:b4:ae:a3:aa:e7:ee:6a:85: de:5b:a5:4b:ce:29:66:cc:7d:a7:27:e4:6f:3e:6a:50:89:95: d5:d8:a2:d7:85:20:26:56:10:db:a8:20:e9:65:7d:8e:14:67: d5:cc:1c:64:25:d1:cb:0b:83:ac:0c:af:75:a8:64:9d:fb:49: 38:65:ef:c5:11:b3:53:87:6f:f8:73:c4:2e:96:ba:87:4f:2a: 6e:84:58:04:b3:0f:be:d1:e5:9a:a8:c2:26:b3:2d:2a:f4:f1: bb:b5:f6:56:20:f0:a1:f0:53:af:a1:e1:4c:c6:1e:84:02:ac: 9e:c6:09:f5:ef:a5:22:43:ab:df:bf:99:4e:4c:1b:3e:8c:72: d0:61:d5:95:e4:e6:b9:38:4e:90:70:a4:3f:4a:c9:4b:25:53: 30:a7:79:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmw0y9751Mdop1s+3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyOTIxMDEzNloXDTI1MDcyODIxMDEzNlowLzEtMCsGA1UEAxMk MWYyZjY0Y2QtZTdlNy00N2M4LTk1MzctMjY1OGRhYjRjNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmreOGqycQ8WomioIzqVH4GqCdofVbEWz+ay YrTfLa+njEvjUkJ1wlr/VwwVuZH3DOQptn6W9ggo51fHesdCjJNu/oQPn1bjsp8S rD7J8obqwLLtpsldia6fmrwhl9WCTzdn6rBai81tXYuFsSQr5zTW3/L8oiLVhsFp 4blC8JpXj12hmTO/tToBeiLEQsFGvn9f9GZyXLX+L2FggpmPcetRuVrdwxHlR4U8 bxTW08Wd8DMb6vYcq+gV7kvHJhkUCQFFM9yII3YFpHJ36kTgvt6LhLE+RpejKHUy KeTyu3wpebQ0IwZlESnggDTRFAL7SN8JaULjJmivRTdHIUu25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4FzVdGcWtz7fI+BaXW8gGr2e4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGI3OGY3OTktODRmZC0z MTc5LWIxY2YtMzhiMzkxMWNmYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaYvBgXYFrHgAmHc1vTqbedyQHiYKVlTTw+Tz9p5bglMLakIo5R8AVc 41tYctsJaH18LbA8AVCQk2E7Uhy9kULTqf0A+B6AT2wN8XecKyJu39EV5psFBXqa exHgsWga+xWxnA20rqOq5+5qhd5bpUvOKWbMfacn5G8+alCJldXYoteFICZWENuo IOllfY4UZ9XMHGQl0csLg6wMr3WoZJ37SThl78URs1OHb/hzxC6WuodPKm6EWASz D77R5ZqowiazLSr08bu19lYg8KHwU6+h4UzGHoQCrJ7GCfXvpSJDq9+/mU5MGz6M ctBh1ZXk5rk4TpBwpD9KyUslUzCneRo= -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:41 2025 by rpki-client