$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/107e779f-5d0c-3d44-8bf0-5cd3564a231b.roa File: 107e779f-5d0c-3d44-8bf0-5cd3564a231b.roa (raw, json) Hash identifier: kKp9g8APiNzbHuMWt4YSYRr6g5Lm1EwkC7cU4C7Edxg= Subject key identifier: 7E:97:62:44:81:50:BD:B0:6E:60:AC:D2:C9:5D:81:AD:53:85:11:9B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848AA07583FEEAB2EB269409940 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/107e779f-5d0c-3d44-8bf0-5cd3564a231b.roa Signing time: Sat 25 Jan 2025 17:49:06 +0000 ROA not before: Sat 25 Jan 2025 17:49:06 +0000 ROA not after: Fri 25 Apr 2025 16:49:06 +0000 asID: 18779 IP address blocks: 172.121.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:07:58:3f:ee:ab:2e:b2:69:40:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 25 17:49:06 2025 GMT Not After : Apr 25 16:49:06 2025 GMT Subject: CN=17551488-6090-4c60-9a0a-f50901ec23fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:91:14:79:93:d9:20:31:67:20:73:13:fe: 9b:cb:88:09:b3:8e:89:5c:e8:8c:29:f8:af:c0:f3: a8:37:66:52:26:2c:bd:e5:17:69:4f:fe:91:69:30: ab:82:fb:8b:2f:a0:a4:b6:c8:30:08:ec:31:e1:fa: 5e:9f:9d:ed:b5:58:0d:90:76:cc:1d:a4:bd:80:64: 06:da:71:39:76:57:46:5a:69:a3:65:8c:71:a0:74: 2e:6e:3c:88:b8:96:76:82:2c:9d:de:43:5b:98:d6: b1:49:4a:4b:63:c5:2d:d7:5b:ac:54:1c:c1:5c:63: d2:cc:9c:be:9a:30:04:eb:8d:ef:0a:e2:11:b2:94: bd:e8:4a:37:55:87:ca:99:69:2f:f6:4b:f8:c5:0e: b7:05:45:96:0c:5e:33:d5:81:bc:fc:d1:c5:0b:a4: 8d:8b:c8:78:f8:00:e3:00:fa:8a:fd:e8:1a:05:c4: 2b:db:5b:bb:f1:e0:cd:33:40:81:ae:fb:84:96:e2: 2e:53:c9:5d:3a:f5:b7:c4:2b:a9:c4:54:d1:63:db: 02:d8:c2:b1:94:f6:68:54:8a:0d:bf:e5:91:4a:ad: d5:98:4f:99:3d:f0:cf:bf:2c:35:28:5e:ec:1d:55: de:49:e3:3d:01:88:46:6b:62:21:ae:33:80:71:a3: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:97:62:44:81:50:BD:B0:6E:60:AC:D2:C9:5D:81:AD:53:85:11:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/107e779f-5d0c-3d44-8bf0-5cd3564a231b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:64:42:32:40:29:d4:de:ca:3b:d3:56:69:57:b1:8b:89:4a: d0:4d:dd:6a:3f:c0:54:9c:1b:66:a5:33:5c:fa:5a:b4:a2:37: c9:f1:04:a9:79:93:71:a4:ea:c7:2d:7d:26:2c:87:d5:23:97: 09:fa:84:87:71:08:fc:6c:b7:0d:e6:2e:bb:ca:25:74:c5:73: fc:ba:3c:13:8d:9e:d9:19:08:8a:21:73:ff:28:3e:7d:fb:ac: 37:6f:9e:ba:5c:20:0a:8d:1a:ec:85:da:1c:ac:51:ed:24:b5: fd:3d:3f:be:af:13:20:9a:1d:3c:9c:ed:34:67:c0:35:da:4f: 8b:6a:1c:01:0f:e7:0c:10:85:58:c9:24:ea:68:69:f8:66:6b: b9:97:95:1c:92:83:66:07:c8:7d:f8:2a:8e:13:4a:8e:5e:56: d7:49:46:b6:9e:ac:bd:7e:f8:f2:ce:6d:99:99:2b:d2:6d:86: 44:86:f9:af:61:48:71:11:18:c9:08:eb:e0:d1:5d:22:45:4c: 19:25:b8:7a:0e:a2:35:26:7d:89:82:41:65:fa:15:46:98:54: 34:64:19:cf:c7:5c:14:1f:25:19:3c:8d:b5:e0:db:73:b9:42: 11:fb:07:a0:62:f3:11:42:04:e7:a6:1b:08:65:f5:11:46:a0: f5:57:6f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiqB1g/7qsusmlAmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyNTE3NDkwNloXDTI1MDQyNTE2NDkwNlowLzEtMCsGA1UEAxMk MTc1NTE0ODgtNjA5MC00YzYwLTlhMGEtZjUwOTAxZWMyM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl+RFHmT2SAxZyBzE/6by4gJs46JXOiMKfiv wPOoN2ZSJiy95RdpT/6RaTCrgvuLL6CktsgwCOwx4fpen53ttVgNkHbMHaS9gGQG 2nE5dldGWmmjZYxxoHQubjyIuJZ2giyd3kNbmNaxSUpLY8Ut11usVBzBXGPSzJy+ mjAE643vCuIRspS96Eo3VYfKmWkv9kv4xQ63BUWWDF4z1YG8/NHFC6SNi8h4+ADj APqK/egaBcQr21u78eDNM0CBrvuEluIuU8ldOvW3xCupxFTRY9sC2MKxlPZoVIoN v+WRSq3VmE+ZPfDPvyw1KF7sHVXeSeM9AYhGa2IhrjOAcaMNrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6XYkSBUL2wbmCs0sldga1ThRGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTA3ZTc3OWYtNWQwYy0z ZDQ0LThiZjAtNWNkMzU2NGEyMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZkQjJAKdTeyjvTVmlXsYuJStBN3Wo/wFScG2alM1z6WrSiN8nxBKl5 k3Gk6sctfSYsh9Ujlwn6hIdxCPxstw3mLrvKJXTFc/y6PBONntkZCIohc/8oPn37 rDdvnrpcIAqNGuyF2hysUe0ktf09P76vEyCaHTyc7TRnwDXaT4tqHAEP5wwQhVjJ JOpoafhma7mXlRySg2YHyH34Ko4TSo5eVtdJRraerL1++PLObZmZK9JthkSG+a9h SHERGMkI6+DRXSJFTBkluHoOojUmfYmCQWX6FUaYVDRkGc/HXBQfJRk8jbXg23O5 QhH7B6Bi8xFCBOemGwhl9RFGoPVXb1I= -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:54 2025 by rpki-client