$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa File: 1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa (raw, json) Hash identifier: G09vIDy1goRTC7fvcSr2aGc2zT0MFXl9NDz4zpkYHFU= Subject key identifier: AA:3B:C5:B3:F3:10:0C:4E:F7:86:58:AE:9E:B1:8B:AD:05:7C:64:92 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D64127615367A7B8B950FB20 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:27:61:53:67:a7:b8:b9:50:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=88ec2470-04f2-444b-b642-6bb9ebe0fe99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:b7:bd:1e:b4:64:05:85:17:76:0f:b2:0f: c6:59:a2:82:3e:3f:b5:d9:46:80:f2:14:05:26:c5: 3e:29:5a:8b:0b:d2:0f:51:49:d3:d2:55:fb:f1:0b: 43:6e:d1:40:ea:20:94:c7:37:5f:e7:69:fa:b5:20: ad:6b:f5:4c:f3:d5:d9:f4:9b:a0:33:87:10:95:d3: eb:32:d7:cc:0f:1d:d7:a5:4c:c1:01:51:cb:1d:e9: 03:97:70:be:1e:32:08:d5:1b:6d:b2:0d:b6:9f:a1: 01:4b:78:07:39:ff:44:4d:e6:73:14:c0:e6:c0:a2: 38:0a:a2:b9:0e:08:26:3e:3c:97:c2:9d:7f:d4:c8: f4:b9:f2:82:6a:9d:f1:24:d2:83:4d:04:d1:d0:d6: 75:22:a4:f3:1e:3e:5f:75:15:52:89:5e:ce:7b:5b: 60:7b:55:60:ea:e0:de:0d:fc:df:6f:f8:4b:dc:08: b4:ef:71:f2:58:c3:c3:e4:6a:71:f0:11:d6:f4:94: 87:a3:c6:84:70:fc:19:e0:3f:59:52:61:c7:bd:f1: 9b:b1:a3:ef:89:c9:a5:0f:c7:38:cb:cd:70:f6:fb: 7f:09:ba:d0:c4:6b:7f:6f:9d:8f:01:60:61:dd:43: 44:09:39:c1:e4:54:ff:e4:d4:c2:3d:1c:15:17:51: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3B:C5:B3:F3:10:0C:4E:F7:86:58:AE:9E:B1:8B:AD:05:7C:64:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cd:1d:45:6f:de:20:bb:02:86:1b:e5:ad:bf:ea:60:1a:8e: 53:e7:c2:1e:d4:72:96:84:e0:f7:93:5d:c0:40:0f:20:f9:0f: 84:93:b1:44:13:db:51:14:c1:98:b6:bc:10:69:59:5b:f6:fc: 4e:ff:94:90:ab:7b:44:fe:a0:0b:2f:ba:89:7a:8f:4c:33:6d: 09:3f:cb:0f:98:82:69:aa:3a:4a:db:2a:72:a6:83:99:8f:ec: 24:d3:0b:a8:25:9d:98:d7:7d:4d:4b:76:38:67:71:9e:f6:58: a6:24:93:a5:8d:c9:2e:a8:93:0b:b7:47:d6:45:a6:cf:3f:22: ef:0a:6c:94:33:7b:b7:5d:96:cd:d9:c6:a4:65:1c:c7:3a:53: 69:16:ac:7f:87:46:2d:87:0c:ac:a0:5c:fb:2e:77:99:bb:31: 34:2b:90:ba:7c:76:5a:a3:72:f5:2e:88:9b:88:de:93:06:7e: e6:83:33:e3:2d:03:30:50:41:56:97:e0:fe:32:3d:07:53:e1: 9f:33:9c:10:d4:e7:92:ee:5b:47:73:b1:bb:b0:14:94:e3:10: 80:48:0d:85:24:6d:5b:da:37:0f:41:65:ab:21:ff:27:68:08: b4:bb:10:07:4f:74:6a:46:69:e1:7e:1f:62:0a:42:19:f5:1e: 43:30:2e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSdhU2enuLlQ+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODhlYzI0NzAtMDRmMi00NDRiLWI2NDItNmJiOWViZTBmZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFe3vR60ZAWFF3YPsg/GWaKCPj+12UaA8hQF JsU+KVqLC9IPUUnT0lX78QtDbtFA6iCUxzdf52n6tSCta/VM89XZ9JugM4cQldPr MtfMDx3XpUzBAVHLHekDl3C+HjII1Rttsg22n6EBS3gHOf9ETeZzFMDmwKI4CqK5 DggmPjyXwp1/1Mj0ufKCap3xJNKDTQTR0NZ1IqTzHj5fdRVSiV7Oe1tge1Vg6uDe Dfzfb/hL3Ai073HyWMPD5Gpx8BHW9JSHo8aEcPwZ4D9ZUmHHvfGbsaPvicmlD8c4 y81w9vt/CbrQxGt/b52PAWBh3UNECTnB5FT/5NTCPRwVF1EGYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo7xbPzEAxO94ZYrp6xi60FfGSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWE0NjAwNzQtNWNiOC0z MmRiLThlYzgtZmFiY2U0ZDJmMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjNHUVv3iC7AoYb5a2/6mAajlPnwh7UcpaE4PeTXcBADyD5D4STsUQT 21EUwZi2vBBpWVv2/E7/lJCre0T+oAsvuol6j0wzbQk/yw+YgmmqOkrbKnKmg5mP 7CTTC6glnZjXfU1LdjhncZ72WKYkk6WNyS6okwu3R9ZFps8/Iu8KbJQze7ddls3Z xqRlHMc6U2kWrH+HRi2HDKygXPsud5m7MTQrkLp8dlqjcvUuiJuI3pMGfuaDM+Mt AzBQQVaX4P4yPQdT4Z8znBDU55LuW0dzsbuwFJTjEIBIDYUkbVvaNw9BZash/ydo CLS7EAdPdGpGaeF+H2IKQhn1HkMwLgw= -----END CERTIFICATE-----Generated at Sun Apr 6 07:22:37 2025 by rpki-client