$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/125713f7-7859-353e-9e5d-656d025a8ff9.roa File: 125713f7-7859-353e-9e5d-656d025a8ff9.roa (raw, json) Hash identifier: mZIqAXiIUl2xS0kqX0JX3tAnYDC9CbIzll8DsFagnDk= Subject key identifier: 54:CA:C0:78:81:AD:DC:84:BC:20:C7:95:F6:F0:0A:2E:E0:5E:E5:C3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F85EF71EBADD4D35A1C8F680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/125713f7-7859-353e-9e5d-656d025a8ff9.roa Signing time: Sun 25 May 2025 12:05:38 +0000 ROA not before: Sun 25 May 2025 12:05:38 +0000 ROA not after: Sat 23 Aug 2025 12:05:38 +0000 asID: 214238 IP address blocks: 172.120.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:5e:f7:1e:ba:dd:4d:35:a1:c8:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 12:05:38 2025 GMT Not After : Aug 23 12:05:38 2025 GMT Subject: CN=990172f9-5f55-487d-8d14-005f8c13834f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:f5:dc:c1:81:d2:c0:49:7a:9f:5d:ce:c6: 32:23:81:62:96:f5:31:41:52:40:ab:0d:d3:99:44: 32:da:c0:23:04:79:35:8b:77:72:28:61:29:8b:6e: 3c:17:51:03:e5:f4:32:07:c0:cf:01:15:e9:a4:94: e8:43:7f:26:68:8c:27:aa:84:21:20:43:b7:06:b2: cc:fe:d1:61:6c:b9:19:f4:07:b5:76:3b:34:ac:37: e3:5d:91:b8:67:46:07:fd:d8:5e:8f:9c:06:c9:5a: 99:e9:08:ba:22:6d:77:01:53:f0:c3:c9:3b:92:39: 96:b9:f3:af:00:f9:d4:56:f2:b2:bb:28:0f:0a:ba: fc:46:21:ca:d0:b1:20:6e:06:cb:7e:fa:1e:7e:ae: 81:38:a3:b5:66:33:f1:a0:f2:ea:58:94:0e:aa:57: b9:f4:9d:cf:93:78:4a:36:8f:40:ab:4c:dc:d2:02: a6:82:df:db:d5:10:f0:05:35:c3:a4:0c:b1:fb:b6: f4:fb:89:eb:bd:83:bb:0d:d7:6d:54:cb:46:99:7e: 79:97:b6:37:11:67:68:cf:b6:80:69:ee:1d:73:4d: 88:7d:18:8d:b0:5e:68:16:ba:fa:e8:56:b5:30:00: 0c:19:b3:f6:2d:1e:d3:a4:b6:ed:1b:3c:66:b6:79: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CA:C0:78:81:AD:DC:84:BC:20:C7:95:F6:F0:0A:2E:E0:5E:E5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/125713f7-7859-353e-9e5d-656d025a8ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ea:13:03:0a:2e:81:d5:ef:9a:ef:9b:aa:be:d1:95:ae:b1: e6:67:2e:6f:d9:d6:88:7c:46:41:28:14:f9:00:44:30:99:7d: cc:91:51:11:de:8b:6e:9b:1c:1d:2a:e9:42:f3:b5:11:59:52: a2:34:80:fb:c9:ef:fa:89:9e:39:cb:1b:71:7e:8f:14:e4:75: 31:16:21:90:4a:05:4c:8a:93:d0:85:37:e8:64:24:32:9a:ed: d1:f6:8d:d8:19:3a:58:00:5a:5f:50:e7:6a:9d:db:34:44:8d: be:e7:3d:06:f6:c2:04:05:02:ec:e6:30:c8:33:d6:81:76:43: 60:1a:f9:9c:35:af:a4:72:de:d0:54:29:ae:d4:64:0f:12:ba: a1:08:b4:49:9f:df:c5:53:7b:f9:b1:9d:6d:45:d7:64:f0:8b: 95:5e:8e:de:5b:d1:db:2e:95:ee:1e:f8:56:00:21:8b:60:b3: 07:f7:8d:8e:47:e2:78:6e:b6:15:da:e7:87:c2:e5:7a:39:9d: d0:06:da:5d:0f:b7:64:58:17:7b:8c:50:03:a4:7f:30:4c:1d: 95:13:40:08:71:03:c6:9b:33:79:c0:9d:69:1b:d8:be:20:bf: 59:2a:e0:e0:2a:c9:1c:4b:a4:93:26:6a:77:02:c7:cb:f8:68: 4b:62:e7:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4Xvceut1NNaHI9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyNTEyMDUzOFoXDTI1MDgyMzEyMDUzOFowLzEtMCsGA1UEAxMk OTkwMTcyZjktNWY1NS00ODdkLThkMTQtMDA1ZjhjMTM4MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaz13MGB0sBJep9dzsYyI4FilvUxQVJAqw3T mUQy2sAjBHk1i3dyKGEpi248F1ED5fQyB8DPARXppJToQ38maIwnqoQhIEO3BrLM /tFhbLkZ9Ae1djs0rDfjXZG4Z0YH/dhej5wGyVqZ6Qi6Im13AVPww8k7kjmWufOv APnUVvKyuygPCrr8RiHK0LEgbgbLfvoefq6BOKO1ZjPxoPLqWJQOqle59J3Pk3hK No9Aq0zc0gKmgt/b1RDwBTXDpAyx+7b0+4nrvYO7DddtVMtGmX55l7Y3EWdoz7aA ae4dc02IfRiNsF5oFrr66Fa1MAAMGbP2LR7TpLbtGzxmtnnJJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTKwHiBrdyEvCDHlfbwCi7gXuXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTI1NzEzZjctNzg1OS0z NTNlLTllNWQtNjU2ZDAyNWE4ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXqEwMKLoHV75rvm6q+0ZWuseZnLm/Z1oh8RkEoFPkARDCZfcyRURHe i26bHB0q6ULztRFZUqI0gPvJ7/qJnjnLG3F+jxTkdTEWIZBKBUyKk9CFN+hkJDKa 7dH2jdgZOlgAWl9Q52qd2zREjb7nPQb2wgQFAuzmMMgz1oF2Q2Aa+Zw1r6Ry3tBU Ka7UZA8SuqEItEmf38VTe/mxnW1F12Twi5Vejt5b0dsule4e+FYAIYtgswf3jY5H 4nhuthXa54fC5Xo5ndAG2l0Pt2RYF3uMUAOkfzBMHZUTQAhxA8abM3nAnWkb2L4g v1kq4OAqyRxLpJMmancCx8v4aEti59M= -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:38 2025 by rpki-client