$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2851735-7cf1-3330-b6e5-c1497212e62a.roa File: f2851735-7cf1-3330-b6e5-c1497212e62a.roa (raw, json) Hash identifier: SNhwX9kG/uUnLgxnLHpBrCw0wm7zwRot2XkNP2SQmcI= Subject key identifier: 27:A9:84:4F:69:59:0D:BA:89:04:2F:9B:8B:03:E7:C5:E9:0C:2E:7F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849798D69CC2F559A695C654480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2851735-7cf1-3330-b6e5-c1497212e62a.roa Signing time: Thu 10 Apr 2025 01:51:34 +0000 ROA not before: Thu 10 Apr 2025 01:51:34 +0000 ROA not after: Wed 09 Jul 2025 01:51:34 +0000 asID: 7018 IP address blocks: 172.121.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:8d:69:cc:2f:55:9a:69:5c:65:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 10 01:51:34 2025 GMT Not After : Jul 9 01:51:34 2025 GMT Subject: CN=3a978447-f056-4e76-9f5d-9259370aa805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:e6:b6:ca:7c:0f:4e:20:af:99:d5:86:15: 11:c1:cc:ee:d3:48:03:a5:67:17:72:ce:41:cd:da: eb:12:16:63:0b:df:41:31:7b:78:24:f0:39:18:e2: 35:50:79:ca:c8:1d:ec:8d:bb:2a:18:97:90:fa:19: f4:eb:a9:dd:1a:ed:1b:ca:00:34:61:8c:cb:0e:30: 69:11:b0:61:94:b0:c3:08:c6:7d:b7:2d:d7:29:0c: 16:28:f8:d4:a9:02:57:08:4e:51:e7:9b:14:97:43: fb:9f:4d:24:b4:0b:13:c0:ab:db:72:49:63:e3:fd: 65:09:a0:b9:30:7e:8b:36:d2:36:dc:fc:8c:04:e2: 0c:d8:c2:80:ff:fa:e3:90:d3:d8:db:b3:a9:23:ef: d2:17:04:2d:0a:c6:08:ff:29:18:69:bb:31:8d:3c: 28:45:aa:aa:10:64:1d:1f:8c:7a:94:82:dc:9d:e4: 46:8e:c3:a2:06:e4:38:1c:8c:6e:c5:c3:4b:93:b5: fc:2f:4e:91:73:02:94:91:e2:cc:ff:f1:3d:d6:67: f1:ad:a9:23:62:30:46:fb:43:d3:b9:5f:93:18:22: a4:9c:a5:60:14:43:87:ea:4a:cb:23:ce:cb:17:e8: 53:7c:26:1a:31:b9:a0:e9:7a:62:a2:c2:18:6b:9a: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A9:84:4F:69:59:0D:BA:89:04:2F:9B:8B:03:E7:C5:E9:0C:2E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2851735-7cf1-3330-b6e5-c1497212e62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:17:aa:cb:2a:f1:5a:85:2e:36:b5:f1:64:8f:bf:64:8d:18: 45:5c:8f:5f:31:50:57:68:3d:7c:0f:55:0a:58:6a:ee:ab:6e: 34:06:70:b2:6f:7a:a7:7c:a5:0b:65:6c:99:7f:d6:f7:c8:ca: f9:5d:30:b1:44:a3:ab:75:d2:cc:1d:28:a1:a8:1b:6f:08:49: 80:7e:63:3a:cf:9f:7a:e1:75:a1:11:43:88:09:ac:5e:57:ab: 65:78:ab:c4:f3:09:c6:f6:16:01:60:94:6c:87:8a:a3:bf:58: d7:0e:09:36:ff:ff:e1:df:f8:e2:75:1b:07:11:be:c7:9a:bd: fb:21:f6:94:c4:c1:ad:27:25:37:10:06:7a:02:2f:40:0a:30: 87:ac:d6:b8:7d:45:41:85:d8:ed:fd:7b:a6:0a:ce:04:f5:f8: e6:97:e9:bb:ec:46:9e:bb:5b:e8:74:c6:59:13:e4:44:9f:98: 0f:0c:9b:c7:d0:dd:42:2d:94:11:d8:bf:1d:db:c6:5e:66:78: 2a:28:8d:e0:89:66:60:bb:04:ba:c7:e1:77:c8:06:e0:2d:72: 7e:37:74:2a:84:dc:a3:10:da:b0:74:c9:02:e3:09:3e:3d:2e: ff:43:35:d5:54:fa:7d:c2:a6:53:df:e8:7c:8c:5a:68:7c:13: eb:e4:4b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5jWnML1WaaVxlRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxMDAxNTEzNFoXDTI1MDcwOTAxNTEzNFowLzEtMCsGA1UEAxMk M2E5Nzg0NDctZjA1Ni00ZTc2LTlmNWQtOTI1OTM3MGFhODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tzmtsp8D04gr5nVhhURwczu00gDpWcXcs5B zdrrEhZjC99BMXt4JPA5GOI1UHnKyB3sjbsqGJeQ+hn066ndGu0bygA0YYzLDjBp EbBhlLDDCMZ9ty3XKQwWKPjUqQJXCE5R55sUl0P7n00ktAsTwKvbcklj4/1lCaC5 MH6LNtI23PyMBOIM2MKA//rjkNPY27OpI+/SFwQtCsYI/ykYabsxjTwoRaqqEGQd H4x6lILcneRGjsOiBuQ4HIxuxcNLk7X8L06RcwKUkeLM//E91mfxrakjYjBG+0PT uV+TGCKknKVgFEOH6krLI87LF+hTfCYaMbmg6XpiosIYa5rU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCephE9pWQ26iQQvm4sD58XpDC5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjI4NTE3MzUtN2NmMS0z MzMwLWI2ZTUtYzE0OTcyMTJlNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUXqssq8VqFLja18WSPv2SNGEVcj18xUFdoPXwPVQpYau6rbjQGcLJv eqd8pQtlbJl/1vfIyvldMLFEo6t10swdKKGoG28ISYB+YzrPn3rhdaERQ4gJrF5X q2V4q8TzCcb2FgFglGyHiqO/WNcOCTb//+Hf+OJ1GwcRvseavfsh9pTEwa0nJTcQ BnoCL0AKMIes1rh9RUGF2O39e6YKzgT1+OaX6bvsRp67W+h0xlkT5ESfmA8Mm8fQ 3UItlBHYvx3bxl5meCoojeCJZmC7BLrH4XfIBuAtcn43dCqE3KMQ2rB0yQLjCT49 Lv9DNdVU+n3CplPf6HyMWmh8E+vkS1M= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:54 2025 by rpki-client