$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa File: 1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa (raw, json) Hash identifier: ncveAd0pCeL08FutZy5H7kfgos/6RbBIvh2hbSIYqec= Subject key identifier: AC:6B:EF:33:94:F7:22:D1:B6:19:31:A9:20:0A:0A:8C:A2:01:64:6B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F860DCCF8EEEC1ABE9396240 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa Signing time: Sun 25 May 2025 12:09:28 +0000 ROA not before: Sun 25 May 2025 12:09:28 +0000 ROA not after: Sat 23 Aug 2025 12:09:28 +0000 asID: 214238 IP address blocks: 172.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:60:dc:cf:8e:ee:c1:ab:e9:39:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 12:09:28 2025 GMT Not After : Aug 23 12:09:28 2025 GMT Subject: CN=948f214e-4e4d-4f02-a739-6ac5b366319f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:c0:4f:37:5f:14:c7:8a:0d:ba:3b:b9:77: 7b:28:7f:da:ca:15:43:78:a1:e7:86:3f:17:d1:33: fd:e3:0f:92:52:ba:9e:08:b4:0d:94:e0:c9:98:07: f1:e8:bc:e1:51:95:f1:d9:cb:e8:62:a3:2c:9b:24: c5:e0:4d:8d:e2:73:a9:2f:74:a0:7c:ae:a3:36:8a: 20:00:99:70:52:7d:82:71:3b:bf:1c:b8:fa:77:f9: 98:37:22:60:46:c7:62:48:34:70:ab:bb:39:8e:87: a6:41:ab:bf:14:7a:a5:8b:e7:37:6e:6d:0f:45:30: 04:6e:f7:28:d7:c1:76:2b:4c:61:b0:ea:26:58:30: 50:07:01:56:63:9d:19:dc:f6:15:a3:10:bd:2e:6e: 18:05:72:4f:0f:7d:1b:a8:85:90:8f:a9:2c:58:8a: a0:be:68:f3:cd:bc:1c:6a:58:06:cf:f9:68:e6:b0: c5:2c:9b:d6:f5:c0:70:27:a0:b8:ad:cf:59:39:6a: 59:f9:b7:a5:99:c3:07:7f:8e:00:ac:f3:66:cf:1f: 19:46:cb:e7:41:aa:89:eb:c7:e1:ea:68:62:5d:9a: 42:1c:e8:3a:19:82:55:2d:c4:00:93:ef:16:c2:e6: 34:81:f0:4b:48:0e:c9:59:66:35:06:a8:50:83:b0: 0a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6B:EF:33:94:F7:22:D1:B6:19:31:A9:20:0A:0A:8C:A2:01:64:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:c9:27:1e:f8:ca:3c:ad:50:16:26:4f:ee:af:de:94:a3: 9f:ba:55:3e:51:f1:5d:89:e3:93:46:d4:a2:9f:f2:cf:04:e2: a9:17:8f:28:2a:8a:43:2b:bb:08:51:6c:c3:e6:2b:d2:25:c8: fd:02:1a:be:50:7c:40:d7:5a:18:0a:76:19:af:1a:a8:e4:2d: 35:ac:8c:d2:16:39:39:aa:4e:ed:ec:ad:f4:9a:ed:c3:32:af: 63:ec:e4:62:21:60:ba:5b:0a:62:98:7e:3b:af:7c:ed:94:8a: 64:3f:c9:a4:61:72:97:de:36:f3:cd:cd:01:c2:23:47:28:7c: da:23:eb:23:22:e2:b3:bd:cb:f1:10:75:01:c3:1d:8c:09:62: 7c:19:b6:4e:3a:55:c8:2f:01:6e:25:57:8e:5e:8a:ca:97:6a: 43:e3:c6:71:76:5e:77:95:1e:f7:40:ad:ef:ef:36:9a:af:46: c9:b8:fa:d7:57:88:82:23:fb:4b:0e:f0:7f:34:8d:ec:c7:2a: 08:a7:64:9c:df:05:5d:40:54:35:a9:5f:02:ab:af:48:6d:13: d1:6f:bf:f1:fb:32:6f:33:27:61:f4:28:6a:12:7f:b3:21:26: d4:38:7c:42:8a:a8:f2:c2:b6:4a:27:a2:06:b6:90:f8:2f:9c: f3:21:18:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4YNzPju7Bq+k5YkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyNTEyMDkyOFoXDTI1MDgyMzEyMDkyOFowLzEtMCsGA1UEAxMk OTQ4ZjIxNGUtNGU0ZC00ZjAyLWE3MzktNmFjNWIzNjYzMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1TATzdfFMeKDbo7uXd7KH/ayhVDeKHnhj8X 0TP94w+SUrqeCLQNlODJmAfx6LzhUZXx2cvoYqMsmyTF4E2N4nOpL3SgfK6jNoog AJlwUn2CcTu/HLj6d/mYNyJgRsdiSDRwq7s5joemQau/FHqli+c3bm0PRTAEbvco 18F2K0xhsOomWDBQBwFWY50Z3PYVoxC9Lm4YBXJPD30bqIWQj6ksWIqgvmjzzbwc algGz/lo5rDFLJvW9cBwJ6C4rc9ZOWpZ+belmcMHf44ArPNmzx8ZRsvnQaqJ68fh 6mhiXZpCHOg6GYJVLcQAk+8WwuY0gfBLSA7JWWY1BqhQg7AKMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxr7zOU9yLRthkxqSAKCoyiAWRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWZiZjBlYzQtZGJmMC0z YzdhLWIyYWMtMzA2OWFmZmM1YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9uySce+Mo8rVAWJk/ur96Uo5+6VT5R8V2J45NG1KKf8s8E4qkXjygq ikMruwhRbMPmK9IlyP0CGr5QfEDXWhgKdhmvGqjkLTWsjNIWOTmqTu3srfSa7cMy r2Ps5GIhYLpbCmKYfjuvfO2UimQ/yaRhcpfeNvPNzQHCI0cofNoj6yMi4rO9y/EQ dQHDHYwJYnwZtk46VcgvAW4lV45eisqXakPjxnF2XneVHvdAre/vNpqvRsm4+tdX iIIj+0sO8H80jezHKginZJzfBV1AVDWpXwKrr0htE9Fvv/H7Mm8zJ2H0KGoSf7Mh JtQ4fEKKqPLCtkonoga2kPgvnPMhGNI= -----END CERTIFICATE-----Generated at Sat Jun 7 11:53:23 2025 by rpki-client