$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c36eae20-e15f-302c-9101-fcf8e61542e2.roa File: c36eae20-e15f-302c-9101-fcf8e61542e2.roa (raw, json) Hash identifier: QHoQKT/fkjs0tzWzayacE+KhHg0R1LrcQ9sEaiSFxJA= Subject key identifier: C7:44:7D:27:73:EB:8D:4A:A1:91:8B:DB:57:45:80:E5:4F:A9:19:FC Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D0ABC9729B94364833E29EE0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c36eae20-e15f-302c-9101-fcf8e61542e2.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 44893 IP address blocks: 142.252.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c9:72:9b:94:36:48:33:e2:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=b91343ed-745e-4004-8472-c95abd40d876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:c0:d1:0e:2c:87:97:7c:b5:48:18:51:73: 0c:83:e9:18:72:6e:69:e4:32:98:34:a3:db:9d:bd: 67:18:51:b6:41:99:1e:a1:7f:98:5a:73:9b:09:cd: b3:10:ee:6a:ae:03:76:36:7d:b8:dc:87:35:96:ad: 3f:d7:fd:ec:59:dd:93:78:83:a8:7e:06:81:3c:04: b5:a8:6e:b1:36:d1:40:8e:58:c7:f0:cd:c8:60:bf: cd:88:31:91:cf:ce:60:d4:1a:98:06:0f:aa:ba:96: 5c:4b:1b:72:85:cd:27:95:74:e0:73:56:45:bf:b1: f7:b1:80:38:f4:01:13:26:aa:aa:06:c7:00:4c:29: 94:29:87:59:0a:ae:3f:51:64:0f:fe:56:8a:72:a7: b5:d6:0a:a4:3d:a4:be:3a:5e:2b:4c:9b:dc:fd:92: 39:a3:2b:78:65:f4:86:1a:59:e0:7d:f4:0b:83:28: 8b:0b:76:38:3d:20:24:9e:4d:d6:b7:d4:7e:fb:33: 7a:93:e0:98:fa:a7:70:ef:cd:ef:c4:2f:eb:b8:aa: c0:55:55:a3:48:a2:b0:89:db:59:40:c6:a6:e8:f9: e5:e1:4e:a4:c5:8f:a3:06:bf:6f:36:0f:ef:0c:b6: 6f:cf:b4:07:c6:3c:2c:aa:d1:9a:07:29:e4:86:fa: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:7D:27:73:EB:8D:4A:A1:91:8B:DB:57:45:80:E5:4F:A9:19:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c36eae20-e15f-302c-9101-fcf8e61542e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7c:6a:e6:55:e8:46:63:d6:07:7f:e2:01:fd:fe:26:16:08: a0:f7:a2:45:de:b2:05:69:d6:14:d8:d0:92:9d:1a:b5:7d:69: 67:55:c1:61:26:48:04:eb:3b:26:f1:50:7c:3a:60:90:02:1e: 84:3c:ed:8a:ad:f4:c8:85:1d:fc:68:3a:36:8a:8d:73:e1:20: 3a:f5:8c:38:18:38:ae:90:5a:a1:83:85:c6:a6:74:7c:4a:82: 25:c4:69:56:29:18:14:46:9d:de:d6:ae:c1:57:18:c6:b5:4c: cd:e9:91:8f:44:6f:a0:c5:52:67:69:b8:4d:27:f4:76:9f:5a: 35:95:90:37:f4:50:c2:1f:47:ea:82:9b:49:02:fd:a2:7f:eb: 0b:5f:1a:54:69:a8:71:aa:12:12:54:7c:5a:c1:2b:90:36:c8: 39:30:4a:34:73:59:d8:ec:31:0b:6b:27:2c:b2:dc:22:58:cf: e0:4e:4b:26:61:03:cd:14:81:cb:bd:e9:c3:e3:1c:b8:87:7c: f2:da:68:e4:20:eb:6a:21:84:92:c3:3d:71:37:aa:38:18:f1: c6:71:f1:e7:ee:96:cb:7a:f8:06:3a:a6:9a:95:9f:62:1a:0e: bb:fa:15:d0:66:71:26:a1:9b:68:3a:e8:a0:b7:3d:6b:af:b1: 05:6b:76:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8lym5Q2SDPinuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YjkxMzQzZWQtNzQ1ZS00MDA0LTg0NzItYzk1YWJkNDBkODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxrA0Q4sh5d8tUgYUXMMg+kYcm5p5DKYNKPb nb1nGFG2QZkeoX+YWnObCc2zEO5qrgN2Nn243Ic1lq0/1/3sWd2TeIOofgaBPAS1 qG6xNtFAjljH8M3IYL/NiDGRz85g1BqYBg+qupZcSxtyhc0nlXTgc1ZFv7H3sYA4 9AETJqqqBscATCmUKYdZCq4/UWQP/laKcqe11gqkPaS+Ol4rTJvc/ZI5oyt4ZfSG GlngffQLgyiLC3Y4PSAknk3Wt9R++zN6k+CY+qdw783vxC/ruKrAVVWjSKKwidtZ QMam6Pnl4U6kxY+jBr9vNg/vDLZvz7QHxjwsqtGaBynkhvpI8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdEfSdz641KoZGL21dFgOVPqRn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzM2ZWFlMjAtZTE1Zi0z MDJjLTkxMDEtZmNmOGU2MTU0MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN8auZV6EZj1gd/4gH9/iYWCKD3okXesgVp1hTY0JKdGrV9aWdVwWEm SATrOybxUHw6YJACHoQ87Yqt9MiFHfxoOjaKjXPhIDr1jDgYOK6QWqGDhcamdHxK giXEaVYpGBRGnd7WrsFXGMa1TM3pkY9Eb6DFUmdpuE0n9HafWjWVkDf0UMIfR+qC m0kC/aJ/6wtfGlRpqHGqEhJUfFrBK5A2yDkwSjRzWdjsMQtrJyyy3CJYz+BOSyZh A80Ugcu96cPjHLiHfPLaaOQg62ohhJLDPXE3qjgY8cZx8efulst6+AY6ppqVn2Ia Drv6FdBmcSahm2g66KC3PWuvsQVrdnQ= -----END CERTIFICATE-----Generated at Tue Apr 8 21:03:38 2025 by rpki-client