$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f38c9265-c042-3321-bd92-587860c341da.roa File: f38c9265-c042-3321-bd92-587860c341da.roa (raw, json) Hash identifier: +ezJhNoUtdTyaDehTD14C6VwEm+95D8G2ZMK1nisv8Q= Subject key identifier: AF:B9:C9:40:F4:5C:14:D4:4F:8F:B5:85:A9:2F:7D:58:EE:D1:30:FF Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499EA695CAE7C6F8CB828BAD60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f38c9265-c042-3321-bd92-587860c341da.roa Signing time: Wed 23 Apr 2025 08:47:12 +0000 ROA not before: Wed 23 Apr 2025 08:47:12 +0000 ROA not after: Tue 22 Jul 2025 08:47:12 +0000 asID: 211440 IP address blocks: 172.252.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9e:a6:95:ca:e7:c6:f8:cb:82:8b:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 23 08:47:12 2025 GMT Not After : Jul 22 08:47:12 2025 GMT Subject: CN=7f9685a8-c552-4603-b12b-07a35bff8314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b1:88:db:88:29:ff:3e:9e:8e:e8:a4:b5:06: 20:1f:54:9c:39:0b:44:9d:1e:f9:74:18:fc:a5:dc: 5d:4b:c7:74:9e:57:b8:d0:38:04:b5:a9:a1:d1:bf: b1:0e:30:69:0b:0e:60:cb:6f:d6:8a:a0:c2:db:21: d0:c9:eb:5e:16:10:df:89:4e:ae:fe:1f:59:0a:30: 01:35:c3:6f:c5:ce:93:a2:78:12:83:0e:e1:12:a7: f4:02:4d:6a:95:67:9f:2d:0d:9e:d7:7d:ef:25:32: 55:14:2a:f5:72:cc:6e:c1:11:ae:92:38:16:8f:f7: 1c:2b:c4:90:99:22:b8:23:a5:18:f7:91:a7:4c:af: 35:c2:6f:d0:a2:f3:e8:38:6e:69:8a:28:70:25:aa: ad:db:e7:27:c0:20:66:52:7f:62:92:a1:ee:46:72: 5e:ae:65:fd:3e:cd:21:2e:15:69:1b:f4:ce:71:fa: b9:1c:aa:21:0c:c8:b9:5b:36:c2:2a:93:2f:d9:b4: 40:f6:99:fd:cb:70:e8:5c:fb:69:b8:79:33:3c:d9: 4b:6d:93:a5:7d:dd:38:3e:ac:5b:3b:78:17:83:ca: fc:1f:46:cb:ed:35:26:80:65:83:61:62:f8:16:9c: 03:0b:4a:72:e9:a9:e1:7b:0a:cc:05:61:fb:22:b5: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B9:C9:40:F4:5C:14:D4:4F:8F:B5:85:A9:2F:7D:58:EE:D1:30:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f38c9265-c042-3321-bd92-587860c341da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6f:65:cd:03:05:10:f8:7d:38:e2:b1:22:25:9d:55:8e:9f: e7:7a:e8:8b:e4:e6:ab:da:8d:d9:07:99:a6:18:86:b3:09:f8: be:b5:4a:ed:a1:c2:af:39:6c:d3:aa:9d:8b:f1:46:85:e0:a8: c0:dc:1c:79:53:b0:92:e1:86:1e:56:b9:49:1e:04:9a:bb:36: be:b7:09:b1:70:5e:cc:55:8d:ae:c5:8a:dc:2e:70:b5:42:d1: e6:ae:a0:57:23:ef:66:08:eb:9f:2c:a5:94:3c:35:75:9d:1f: 2a:ae:ee:05:b8:4e:9c:3e:0c:d5:9e:5d:6a:98:51:83:d7:b8: 3c:cb:2b:c2:85:8d:49:4b:86:1d:30:e0:fa:a2:ce:cf:41:48: 24:5f:37:40:67:a8:33:5e:31:b3:9a:70:93:22:6e:b8:f1:d2: 6d:43:9e:2f:3f:51:3e:31:6f:e8:ee:91:e5:5c:d1:11:20:0d: d9:20:45:ca:67:01:4e:06:cf:09:6e:50:da:48:f9:e3:8b:a8: 4f:05:67:ec:3e:23:13:31:65:6e:ed:8f:ac:7b:1c:48:87:2e: f7:15:2f:1e:a9:92:0c:6f:d9:cc:5a:ef:7f:59:cd:ad:fc:dd: 41:10:19:73:4e:d1:5a:33:22:33:d9:26:e8:06:99:28:5a:cc: 10:11:87:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmeppXK58b4y4KLrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMzA4NDcxMloXDTI1MDcyMjA4NDcxMlowLzEtMCsGA1UEAxMk N2Y5Njg1YTgtYzU1Mi00NjAzLWIxMmItMDdhMzViZmY4MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLGI24gp/z6ejuiktQYgH1ScOQtEnR75dBj8 pdxdS8d0nle40DgEtamh0b+xDjBpCw5gy2/WiqDC2yHQyeteFhDfiU6u/h9ZCjAB NcNvxc6TongSgw7hEqf0Ak1qlWefLQ2e133vJTJVFCr1csxuwRGukjgWj/ccK8SQ mSK4I6UY95GnTK81wm/QovPoOG5piihwJaqt2+cnwCBmUn9ikqHuRnJermX9Ps0h LhVpG/TOcfq5HKohDMi5WzbCKpMv2bRA9pn9y3DoXPtpuHkzPNlLbZOlfd04Pqxb O3gXg8r8H0bL7TUmgGWDYWL4FpwDC0py6anhewrMBWH7IrXDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+5yUD0XBTUT4+1hakvfVju0TD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjM4YzkyNjUtYzA0Mi0z MzIxLWJkOTItNTg3ODYwYzM0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9vZc0DBRD4fTjisSIlnVWOn+d66Ivk5qvajdkHmaYYhrMJ+L61Su2h wq85bNOqnYvxRoXgqMDcHHlTsJLhhh5WuUkeBJq7Nr63CbFwXsxVja7FitwucLVC 0eauoFcj72YI658spZQ8NXWdHyqu7gW4Tpw+DNWeXWqYUYPXuDzLK8KFjUlLhh0w 4Pqizs9BSCRfN0BnqDNeMbOacJMibrjx0m1Dni8/UT4xb+jukeVc0REgDdkgRcpn AU4GzwluUNpI+eOLqE8FZ+w+IxMxZW7tj6x7HEiHLvcVLx6pkgxv2cxa739Zza38 3UEQGXNO0VozIjPZJugGmShazBARh2A= -----END CERTIFICATE-----Generated at Sat Apr 26 23:14:04 2025 by rpki-client