$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f69067e-1121-394d-bbd0-4e0db73143c0.roa File: 1f69067e-1121-394d-bbd0-4e0db73143c0.roa (raw, json) Hash identifier: ds4ulXycBbjnRI2CxJgQzD9XKOksf7Pb1BLqoYeMYIk= Subject key identifier: 0E:98:14:BF:E7:60:87:3E:A9:5A:0A:1C:07:04:82:DE:49:F1:5A:15 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858495F8D9AA96EF27F6B4FCCA200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f69067e-1121-394d-bbd0-4e0db73143c0.roa Signing time: Mon 31 Mar 2025 18:20:56 +0000 ROA not before: Mon 31 Mar 2025 18:20:56 +0000 ROA not after: Sun 29 Jun 2025 18:20:56 +0000 asID: 29182 IP address blocks: 172.252.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5f:8d:9a:a9:6e:f2:7f:6b:4f:cc:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 31 18:20:56 2025 GMT Not After : Jun 29 18:20:56 2025 GMT Subject: CN=4267d2f3-ec28-4afb-b8ef-b9ee250f00a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:a8:57:f4:79:66:23:d4:39:93:e9:fb:6d: a1:d8:71:1a:19:94:5f:d8:5c:a2:15:b6:f5:c6:57: 81:47:fb:df:91:b4:53:0f:7f:ca:3e:f6:8b:ed:3c: 5a:d2:fa:1c:76:0b:02:f3:60:aa:c5:24:52:de:92: 23:7e:a7:f0:fe:5a:b5:bf:5a:27:33:18:66:eb:42: 80:7f:df:6c:02:2d:32:84:64:66:9c:69:ab:f2:7f: 75:c2:af:0f:dd:29:8c:34:5e:79:aa:9f:65:dd:fd: 29:42:d6:21:df:f0:a4:af:bf:4b:6e:67:ee:3f:cd: d0:4e:f5:30:22:85:75:4e:27:83:71:d6:10:10:6a: 06:7d:49:ed:d1:ea:da:ea:71:4f:da:67:f3:6e:1b: c4:1a:0a:e6:a9:ef:45:cc:66:39:f8:f4:b6:36:6c: 70:04:03:92:28:c9:3e:6a:e2:e6:b0:6a:be:a3:26: b7:b8:b1:17:42:3b:4b:fe:44:ed:55:56:57:23:e8: e7:96:16:6f:2b:c7:07:e2:67:33:ed:0f:c9:52:5a: 3e:6f:00:b0:dd:d5:ad:6e:d8:0f:f4:ca:fd:48:f6: 1f:98:85:69:0d:88:b0:53:07:59:f0:07:f9:47:ea: 7d:12:79:96:5b:2a:6c:6c:03:ff:39:c2:56:8c:0a: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:98:14:BF:E7:60:87:3E:A9:5A:0A:1C:07:04:82:DE:49:F1:5A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f69067e-1121-394d-bbd0-4e0db73143c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7e:1e:14:a3:62:38:3f:01:df:94:bc:7c:5e:8a:f0:9c:1a: f8:d5:b6:d1:c4:01:ec:94:78:c5:c5:79:47:34:7d:b0:a1:85: a8:11:42:6b:a4:9b:38:ea:f9:a7:e0:70:e5:ce:7c:7b:8a:d6: 0b:88:bf:be:c3:10:cc:ce:ea:23:9b:b5:25:d6:53:97:ba:9a: 99:d9:e5:df:a4:6a:6f:a2:51:b5:da:fa:2a:8d:a9:78:fb:f2: a8:71:42:5e:a2:0c:2b:3d:9d:97:58:2f:40:04:14:51:f3:36: 9c:3a:f7:e6:8f:76:cc:d0:75:93:8b:58:9c:27:5f:63:24:12: ce:0e:2f:d9:8d:cb:49:78:4d:67:76:c6:4f:b2:c5:61:bf:fd: 07:d9:82:b2:60:49:7c:86:90:b1:dc:7f:ad:ff:b5:9d:cf:bb: 19:0a:dc:c6:c9:6b:e9:86:11:6a:ad:08:2b:5f:ed:56:f1:88: d6:d1:8a:a9:2c:2e:01:7f:ea:a7:ae:7d:66:20:0c:67:35:69: c0:b7:7d:54:5c:4b:15:33:81:f2:22:81:65:4e:dd:8f:31:8c: 81:5f:59:a6:0c:c2:a7:75:a5:55:ab:47:6c:77:10:bb:78:38: f0:07:9e:9f:8d:e7:7a:99:95:6b:95:6c:77:d8:eb:51:1c:5a: 51:05:a5:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfjZqpbvJ/a0/MogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMzMTE4MjA1NloXDTI1MDYyOTE4MjA1NlowLzEtMCsGA1UEAxMk NDI2N2QyZjMtZWMyOC00YWZiLWI4ZWYtYjllZTI1MGYwMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEyoV/R5ZiPUOZPp+22h2HEaGZRf2FyiFbb1 xleBR/vfkbRTD3/KPvaL7Txa0vocdgsC82CqxSRS3pIjfqfw/lq1v1onMxhm60KA f99sAi0yhGRmnGmr8n91wq8P3SmMNF55qp9l3f0pQtYh3/Ckr79LbmfuP83QTvUw IoV1TieDcdYQEGoGfUnt0era6nFP2mfzbhvEGgrmqe9FzGY5+PS2NmxwBAOSKMk+ auLmsGq+oya3uLEXQjtL/kTtVVZXI+jnlhZvK8cH4mcz7Q/JUlo+bwCw3dWtbtgP 9Mr9SPYfmIVpDYiwUwdZ8Af5R+p9EnmWWypsbAP/OcJWjAoaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6YFL/nYIc+qVoKHAcEgt5J8VoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWY2OTA2N2UtMTEyMS0z OTRkLWJiZDAtNGUwZGI3MzE0M2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPx9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9+HhSjYjg/Ad+UvHxeivCcGvjVttHEAeyUeMXFeUc0fbChhagRQmuk mzjq+afgcOXOfHuK1guIv77DEMzO6iObtSXWU5e6mpnZ5d+kam+iUbXa+iqNqXj7 8qhxQl6iDCs9nZdYL0AEFFHzNpw69+aPdszQdZOLWJwnX2MkEs4OL9mNy0l4TWd2 xk+yxWG//QfZgrJgSXyGkLHcf63/tZ3PuxkK3MbJa+mGEWqtCCtf7VbxiNbRiqks LgF/6qeufWYgDGc1acC3fVRcSxUzgfIigWVO3Y8xjIFfWaYMwqd1pVWrR2x3ELt4 OPAHnp+N53qZlWuVbHfY61EcWlEFpWE= -----END CERTIFICATE-----Generated at Mon Apr 7 10:50:56 2025 by rpki-client