$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffcc012f-290d-3da3-811d-55e5776e7eee.roa File: ffcc012f-290d-3da3-811d-55e5776e7eee.roa (raw, json) Hash identifier: 8lmUlv8bU/fRP/+5kl9bZskWZrNFipLUvVA18dWYKYI= Subject key identifier: D8:2B:C2:8F:7F:00:8E:A7:FB:26:61:41:E2:4B:68:83:61:7F:4F:A3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858498A3456672661EA74816FAA80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffcc012f-290d-3da3-811d-55e5776e7eee.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 18779 IP address blocks: 172.120.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:56:67:26:61:ea:74:81:6f:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=4c69ae9b-fd2d-4dbd-8f09-ef78460de6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:74:ac:a1:4b:54:b9:3c:a2:11:2b:cd:dd: 90:ba:a2:d1:51:f8:c1:ef:32:05:a7:2d:e0:66:65: f4:4b:17:0a:89:2a:c3:e0:2f:88:74:30:e3:16:7e: 4e:c1:8c:50:8d:1d:92:f4:d1:5a:e4:97:92:48:d2: 9e:ab:44:6a:1e:68:de:67:2c:cf:2c:cf:6a:d1:7c: a0:02:9d:f8:d9:58:88:6b:88:d7:72:20:39:48:f0: cc:38:60:0e:b7:f0:86:b6:2f:f7:48:64:0b:cc:b7: b8:8c:dd:ed:62:98:93:04:cf:dc:85:90:71:ea:84: 16:11:91:19:7b:47:1a:d8:08:8d:c8:1c:87:5c:4b: e7:01:ff:19:5c:fb:b3:68:dc:94:d7:b9:5f:b4:4d: 64:14:22:6b:b0:70:38:53:3a:6e:2b:77:bb:5b:81: 54:02:46:d0:ec:b7:6a:26:fc:2b:dd:f4:9a:af:70: 0f:ba:3f:6b:bb:f4:4f:47:46:63:5e:68:67:09:5a: 52:34:27:23:af:0a:f0:4f:a2:d0:13:55:c2:bf:59: a7:d4:54:52:0c:d1:da:87:b3:ab:b0:9e:a8:5b:e3: 24:42:c7:15:e2:9d:b5:37:24:85:43:78:8b:36:d7: 92:4f:47:1e:6f:7d:65:d2:74:ba:fb:a0:05:5f:59: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2B:C2:8F:7F:00:8E:A7:FB:26:61:41:E2:4B:68:83:61:7F:4F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffcc012f-290d-3da3-811d-55e5776e7eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6b:46:28:c8:89:57:13:7e:1d:e3:75:12:29:21:82:ce:57: 99:7d:8a:71:61:b3:57:3e:f0:6d:c2:24:2f:28:a7:44:0f:5f: 5d:68:a9:86:9f:27:94:7f:21:45:1f:35:21:d7:c7:c6:dd:cd: ca:0e:3b:c0:a0:76:1e:f9:f0:31:e0:9f:ae:3a:5c:09:5e:93: 88:2a:a5:92:c5:1a:d1:fa:d6:a7:57:36:7f:30:dd:8e:a5:f9: da:a7:0f:e4:9f:7d:66:06:42:4a:00:b0:58:91:74:0b:21:bd: 81:f3:9f:41:66:8c:c7:f0:5f:09:8e:b1:82:f6:7d:ee:4a:e9: 42:6b:24:ef:90:b0:4d:7d:7c:7b:1c:6d:f0:42:6c:be:a2:17: be:11:73:ee:3b:41:ff:af:70:ec:a8:6e:14:7b:e6:62:49:2c: fe:a1:91:59:61:9f:f5:45:5a:89:d6:59:f0:87:cd:de:15:13: 77:44:59:7b:d1:1e:57:1f:1b:18:f0:e0:1f:ca:b6:f4:88:d6: 47:2f:c6:39:61:c8:e7:a6:f1:46:25:ea:d4:2b:d4:f1:56:cb: 7c:21:f0:b6:c8:99:30:51:a7:92:1f:4e:74:6d:e2:51:d3:45: a5:f7:d5:72:68:87:dc:7f:5e:71:9a:b4:37:c5:52:34:de:77: 21:90:8f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNFZnJmHqdIFvqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NGM2OWFlOWItZmQyZC00ZGJkLThmMDktZWY3ODQ2MGRlNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSB0rKFLVLk8ohErzd2QuqLRUfjB7zIFpy3g ZmX0SxcKiSrD4C+IdDDjFn5OwYxQjR2S9NFa5JeSSNKeq0RqHmjeZyzPLM9q0Xyg Ap342ViIa4jXciA5SPDMOGAOt/CGti/3SGQLzLe4jN3tYpiTBM/chZBx6oQWEZEZ e0ca2AiNyByHXEvnAf8ZXPuzaNyU17lftE1kFCJrsHA4UzpuK3e7W4FUAkbQ7Ldq Jvwr3fSar3APuj9ru/RPR0ZjXmhnCVpSNCcjrwrwT6LQE1XCv1mn1FRSDNHah7Or sJ6oW+MkQscV4p21NySFQ3iLNteST0ceb31l0nS6+6AFX1k1QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgrwo9/AI6n+yZhQeJLaINhf0+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmZjYzAxMmYtMjkwZC0z ZGEzLTgxMWQtNTVlNTc3NmU3ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJrRijIiVcTfh3jdRIpIYLOV5l9inFhs1c+8G3CJC8op0QPX11oqYaf J5R/IUUfNSHXx8bdzcoOO8Cgdh758DHgn646XAlek4gqpZLFGtH61qdXNn8w3Y6l +dqnD+SffWYGQkoAsFiRdAshvYHzn0FmjMfwXwmOsYL2fe5K6UJrJO+QsE19fHsc bfBCbL6iF74Rc+47Qf+vcOyobhR75mJJLP6hkVlhn/VFWonWWfCHzd4VE3dEWXvR HlcfGxjw4B/KtvSI1kcvxjlhyOem8UYl6tQr1PFWy3wh8LbImTBRp5IfTnRt4lHT RaX31XJoh9x/XnGatDfFUjTedyGQj4I= -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:32 2025 by rpki-client