$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa File: f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa (raw, json) Hash identifier: DMQkJom5yw55UFS5tWHru3YGk5QSHEoUH03AKrvlbBc= Subject key identifier: 0C:7B:C8:19:F0:AB:3A:C5:4E:31:D1:73:C7:0C:EE:0A:A7:7E:96:EB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858498A345B9E4CA63F6477ED4F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 18779 IP address blocks: 172.121.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5b:9e:4c:a6:3f:64:77:ed:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=19354f2b-e1b2-41f1-ba12-0a02974c49a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:3e:0e:73:58:a0:28:c9:13:99:20:11:0f: a8:87:82:29:47:76:1c:1a:f5:9a:e0:7b:70:32:f5: 8c:22:b0:07:27:a7:21:63:f1:39:e5:45:39:db:b1: 73:00:7e:76:93:36:8c:69:b8:51:73:fc:14:0d:e5: ae:26:4d:2a:9a:4b:7f:ba:41:5f:a3:0c:d8:31:84: 24:be:f0:10:b9:7e:5c:90:4b:3e:8e:c2:08:a0:4e: 9f:4c:54:6b:5d:3b:7c:18:81:79:21:44:1b:7d:bd: e9:94:d7:a3:25:a5:a9:d8:72:07:ef:94:d2:c6:5a: 7d:3a:39:f8:8a:52:6b:25:76:3b:6d:d8:ae:e8:ff: ec:2b:98:5f:b6:54:90:f1:5d:8d:09:a6:c7:e3:0d: fb:3b:0f:1e:88:1d:41:bc:3a:e7:55:30:6a:7b:30: d8:85:1b:05:9b:25:a7:34:9a:12:ba:62:5f:f2:0f: a4:21:2b:fb:c8:a8:6c:41:4d:c6:38:10:6d:29:1f: ee:2a:8b:b6:26:91:21:1a:d1:81:b6:06:3f:6f:36: 79:32:f1:5c:06:cf:35:86:19:30:41:b6:af:ae:9b: 0e:a6:6b:b4:f9:00:96:6a:4a:62:62:3f:b6:54:ec: 50:45:32:7c:83:e8:fa:5c:83:40:25:63:88:2b:f3: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:C8:19:F0:AB:3A:C5:4E:31:D1:73:C7:0C:EE:0A:A7:7E:96:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7690410-9f44-3ea4-ad87-0ed5989e6e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b8:79:7e:35:70:ff:14:f9:2c:ae:28:5d:a0:0d:46:69:2f: d9:25:77:ac:14:4b:51:4b:b2:e8:23:c3:13:7e:77:0f:df:f0: 8c:f3:c9:73:ec:d0:5e:22:d7:db:71:b6:45:23:54:22:65:36: d7:d5:7a:c8:13:6d:f6:31:b7:c5:70:f7:b5:4d:7b:ab:be:cc: c0:c5:bf:b3:12:54:4a:9e:b7:53:51:fb:79:b3:62:58:2b:98: a7:08:7e:69:93:08:da:ed:61:94:64:e7:a8:c7:0c:70:2a:8d: f9:1c:77:8b:35:ac:5a:61:74:6e:62:09:cc:66:fc:d1:1b:c1: 99:cb:1f:0d:6f:20:d3:93:c1:01:f7:46:cd:64:d9:b3:b5:7f: fa:9c:e4:2d:bf:87:fb:d9:41:94:62:fb:00:af:88:a8:ff:30: 9f:0d:e5:88:30:49:47:07:c5:67:55:43:66:9d:90:f2:b1:33: 0e:1d:0a:af:bf:fa:70:7b:25:6f:71:bc:d3:cf:06:36:de:07: 30:d0:4e:41:f1:89:43:9f:19:18:a0:6e:66:3e:24:7d:3f:f0: 73:0b:90:85:54:9b:ad:79:e9:00:0e:86:8c:7f:b3:33:f1:b4: cd:a4:d1:0a:05:0c:d2:82:44:ff:89:4a:fe:a3:8a:db:d9:73: fa:8f:e6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNFueTKY/ZHftT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk MTkzNTRmMmItZTFiMi00MWYxLWJhMTItMGEwMjk3NGM0OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBM+DnNYoCjJE5kgEQ+oh4IpR3YcGvWa4Htw MvWMIrAHJ6chY/E55UU527FzAH52kzaMabhRc/wUDeWuJk0qmkt/ukFfowzYMYQk vvAQuX5ckEs+jsIIoE6fTFRrXTt8GIF5IUQbfb3plNejJaWp2HIH75TSxlp9Ojn4 ilJrJXY7bdiu6P/sK5hftlSQ8V2NCabH4w37Ow8eiB1BvDrnVTBqezDYhRsFmyWn NJoSumJf8g+kISv7yKhsQU3GOBBtKR/uKou2JpEhGtGBtgY/bzZ5MvFcBs81hhkw QbavrpsOpmu0+QCWakpiYj+2VOxQRTJ8g+j6XINAJWOIK/NrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx7yBnwqzrFTjHRc8cM7gqnfpbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjc2OTA0MTAtOWY0NC0z ZWE0LWFkODctMGVkNTk4OWU2ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC4eX41cP8U+SyuKF2gDUZpL9kld6wUS1FLsugjwxN+dw/f8IzzyXPs 0F4i19txtkUjVCJlNtfVesgTbfYxt8Vw97VNe6u+zMDFv7MSVEqet1NR+3mzYlgr mKcIfmmTCNrtYZRk56jHDHAqjfkcd4s1rFphdG5iCcxm/NEbwZnLHw1vINOTwQH3 Rs1k2bO1f/qc5C2/h/vZQZRi+wCviKj/MJ8N5YgwSUcHxWdVQ2adkPKxMw4dCq+/ +nB7JW9xvNPPBjbeBzDQTkHxiUOfGRigbmY+JH0/8HMLkIVUm6156QAOhox/szPx tM2k0QoFDNKCRP+JSv6jitvZc/qP5gg= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:19 2025 by rpki-client