$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa File: f4488841-470a-35ca-b505-8a8e2fd26888.roa (raw, json) Hash identifier: DUatkMQUNvzBezs1Adddrs5XJaKZNF16Ok3r95SyWPY= Subject key identifier: 2C:3D:BC:9A:11:B5:49:25:B8:BE:73:AF:54:44:86:87:E0:EE:EA:D8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D0ABCAD6434C32ED4307EA80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 44893 IP address blocks: 172.121.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:ca:d6:43:4c:32:ed:43:07:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=94a0e5e9-27fa-4008-86b4-14cf96a41cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:cd:30:a2:a4:ad:5b:a9:ea:0c:76:33:c2: e9:19:1a:bc:24:9d:6c:bd:f0:2c:d2:49:f0:08:3b: 3c:49:cd:c2:6c:1a:1b:a7:75:8c:33:d6:7e:37:3c: 75:2f:42:8c:c7:f6:ec:b5:62:95:3f:69:d1:f1:d6: 2e:95:f0:0e:c3:de:81:f1:e5:f9:85:db:68:17:14: a8:ca:82:44:d4:f4:6a:39:41:f9:c7:34:28:00:72: fc:84:c5:bb:7a:e9:17:dc:99:1b:5f:c9:ed:90:07: 60:8a:d9:bd:f0:8e:98:b6:ca:8c:80:c1:cb:9f:60: 9d:84:e4:45:17:92:c6:1e:0e:2d:15:b1:af:c5:47: fa:6c:9c:ff:9e:fc:25:62:a8:da:20:ba:99:52:e1: c6:5b:97:17:0f:37:20:41:0b:b9:cb:2c:59:54:c4: a5:3c:5b:41:b2:49:13:fd:05:61:75:dc:65:4a:1c: 82:d7:06:96:c0:fa:95:5d:9d:76:53:8c:5f:77:3d: e3:78:92:80:c4:e0:bb:ce:4b:51:73:5f:b2:d9:ae: 29:69:39:2f:7e:11:b8:7a:dd:26:b2:c0:3e:cd:74: 26:f0:cf:13:09:42:ca:c7:8d:71:5c:03:2f:dd:72: 33:65:c9:06:19:af:b3:64:5a:cb:73:c4:6a:c7:1a: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3D:BC:9A:11:B5:49:25:B8:BE:73:AF:54:44:86:87:E0:EE:EA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d2:b1:66:49:1b:3d:25:18:41:fd:c7:aa:2d:84:a0:e7:bc: 84:2b:dd:b8:58:96:c0:f8:7a:66:57:a8:fe:b8:32:bc:99:98: fc:5c:79:ec:cb:4a:7f:7f:54:b2:3d:cc:cd:eb:19:94:c6:ac: aa:dc:6b:3e:14:71:ac:45:c0:2f:47:f4:42:2d:d6:6c:8a:98: 72:f7:ae:ce:d6:73:a8:90:f2:40:66:31:c9:b2:35:59:1c:40: af:11:0d:b0:94:5e:b5:75:ce:1d:07:ac:91:e8:b4:ef:5e:b3: 5d:ec:69:a1:f6:eb:c0:35:1b:98:cd:25:15:68:3b:fb:7c:8f: b6:cb:52:b9:fc:07:b7:5c:9b:12:ec:98:92:9f:21:59:7f:2c: 72:bc:21:4a:58:25:6e:56:e3:e4:d9:f5:32:6d:a6:d8:b6:d6: 7f:de:59:07:9d:c4:02:1e:0c:9a:99:64:7c:9f:68:92:09:fb: 88:77:17:4a:26:da:2b:69:8e:35:8d:6d:fa:3a:15:b3:72:81: be:4f:7f:41:97:be:c3:9d:08:2a:09:c1:d7:ff:40:01:e7:2c: 16:90:c4:70:6f:88:15:37:55:e7:fa:61:83:37:18:b6:ff:4d: 14:f8:ff:69:e1:1b:49:e4:c2:21:c3:81:24:3e:38:1a:f9:b2: 01:56:ae:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8rWQ0wy7UMH6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk OTRhMGU1ZTktMjdmYS00MDA4LTg2YjQtMTRjZjk2YTQxY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApybNMKKkrVup6gx2M8LpGRq8JJ1svfAs0knw CDs8Sc3CbBobp3WMM9Z+Nzx1L0KMx/bstWKVP2nR8dYulfAOw96B8eX5hdtoFxSo yoJE1PRqOUH5xzQoAHL8hMW7eukX3JkbX8ntkAdgitm98I6YtsqMgMHLn2CdhORF F5LGHg4tFbGvxUf6bJz/nvwlYqjaILqZUuHGW5cXDzcgQQu5yyxZVMSlPFtBskkT /QVhddxlShyC1waWwPqVXZ12U4xfdz3jeJKAxOC7zktRc1+y2a4paTkvfhG4et0m ssA+zXQm8M8TCULKx41xXAMv3XIzZckGGa+zZFrLc8RqxxpRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw9vJoRtUkluL5zr1REhofg7urYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjQ0ODg4NDEtNDcwYS0z NWNhLWI1MDUtOGE4ZTJmZDI2ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHluMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDSsWZJGz0lGEH9x6othKDnvIQr3bhYlsD4emZXqP64MryZmPxceezL Sn9/VLI9zM3rGZTGrKrcaz4UcaxFwC9H9EIt1myKmHL3rs7Wc6iQ8kBmMcmyNVkc QK8RDbCUXrV1zh0HrJHotO9es13saaH268A1G5jNJRVoO/t8j7bLUrn8B7dcmxLs mJKfIVl/LHK8IUpYJW5W4+TZ9TJtpti21n/eWQedxAIeDJqZZHyfaJIJ+4h3F0om 2itpjjWNbfo6FbNygb5Pf0GXvsOdCCoJwdf/QAHnLBaQxHBviBU3Vef6YYM3GLb/ TRT4/2nhG0nkwiHDgSQ+OBr5sgFWrmM= -----END CERTIFICATE-----Generated at Tue Apr 8 21:34:11 2025 by rpki-client