$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/212057f5-e624-3035-9ce9-6d2e719bf97b.roa File: 212057f5-e624-3035-9ce9-6d2e719bf97b.roa (raw, json) Hash identifier: H+NSaPa/MeRKGCXu6GgGCe9zBltU9Ko2XbH4KGv3qrE= Subject key identifier: 96:0B:CD:3D:11:7D:CF:F9:0A:40:91:BF:C0:BE:DC:28:3B:AD:D9:58 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D641294B662571CEAEFF9DC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/212057f5-e624-3035-9ce9-6d2e719bf97b.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:29:4b:66:25:71:ce:ae:ff:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=9c15ae0b-757c-46a0-8d97-abd7c7dca05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:f2:77:4b:fc:12:4b:32:dc:64:49:f1:a9: 6c:fc:de:2d:39:c1:fb:af:3d:0c:32:ed:8a:d4:e2: 3e:40:59:2d:60:05:74:28:f5:11:1b:06:02:c3:ce: 88:cc:1a:47:a7:2f:53:5e:93:8f:4f:ea:c2:3b:6e: fa:8d:76:e0:0c:52:a9:89:75:df:85:e6:f8:2e:ec: d3:ba:18:15:48:05:6d:c7:e4:f7:9d:1d:a3:c2:80: 9a:d4:a9:84:d2:a7:ed:19:db:fd:21:e3:26:1f:9e: 6a:9b:5b:77:1c:c9:7e:53:28:1f:6e:3d:91:3e:31: e8:59:61:6b:38:a8:a9:be:1d:aa:d7:3c:b2:ec:6e: 31:09:e4:40:5d:c6:c2:c3:6c:76:28:dd:5a:6c:6f: ee:b2:23:a7:17:a0:f2:65:48:41:d5:58:d7:55:96: 47:47:35:39:4c:db:00:33:5b:b0:33:b2:54:c9:b6: 97:20:87:38:c0:87:2a:07:5e:c8:61:d0:d3:d3:08: f8:97:d9:ee:a0:77:87:4d:4c:13:f3:95:43:bd:16: 50:37:4e:1a:c0:ee:e4:84:47:e2:98:0b:b8:aa:b1: 18:16:c4:82:df:be:05:3d:53:8f:08:42:93:1a:3f: 9e:42:9f:d8:79:79:b7:45:39:c3:e8:00:ca:4e:68: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0B:CD:3D:11:7D:CF:F9:0A:40:91:BF:C0:BE:DC:28:3B:AD:D9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/212057f5-e624-3035-9ce9-6d2e719bf97b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ae:eb:4e:2e:8b:a2:fe:c1:ad:70:e1:72:e7:b8:40:10:91: 21:5b:00:0b:af:0d:21:88:a9:25:db:02:2c:7c:99:84:6b:e3: 43:1a:5c:7f:3f:7c:5d:0b:bf:bc:0e:1b:5f:3b:3d:fb:7b:60: f3:ee:40:00:b8:ac:b0:8e:7f:bd:12:c7:cf:26:a3:6c:75:af: 2e:5b:12:bb:b9:c3:be:3a:84:31:54:3a:be:12:55:8d:18:cb: 5c:7f:dc:57:ef:b3:92:22:76:bf:5b:17:5c:ee:f0:7e:b9:6d: 2c:8a:ed:48:96:a5:32:8c:32:d9:a5:51:d9:3e:60:a4:10:b2: b6:6b:cb:35:64:21:36:30:14:01:d4:2a:8b:8e:d9:a1:22:82: 23:7d:dc:ff:45:55:24:9f:56:dd:56:f5:b8:1b:b6:50:9c:ea: d5:98:1b:d7:d0:ac:00:aa:22:85:bd:61:78:3d:24:e5:aa:63: 20:97:fa:a3:16:20:c5:1e:65:b4:c8:fa:48:5a:97:3f:05:d2: 39:d8:75:c4:f6:7b:19:bb:e9:fd:c7:74:ba:da:13:ca:13:97: 14:9e:ee:82:20:25:a0:11:f8:b5:6f:a8:1e:c7:19:5e:35:55: af:e7:35:18:cc:7e:78:ff:8d:56:c9:ae:6f:b2:a5:77:44:f8: c6:7b:8e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSlLZiVxzq7/ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWMxNWFlMGItNzU3Yy00NmEwLThkOTctYWJkN2M3ZGNhMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpfyd0v8Eksy3GRJ8als/N4tOcH7rz0MMu2K 1OI+QFktYAV0KPURGwYCw86IzBpHpy9TXpOPT+rCO276jXbgDFKpiXXfheb4LuzT uhgVSAVtx+T3nR2jwoCa1KmE0qftGdv9IeMmH55qm1t3HMl+Uygfbj2RPjHoWWFr OKipvh2q1zyy7G4xCeRAXcbCw2x2KN1abG/usiOnF6DyZUhB1VjXVZZHRzU5TNsA M1uwM7JUybaXIIc4wIcqB17IYdDT0wj4l9nuoHeHTUwT85VDvRZQN04awO7khEfi mAu4qrEYFsSC374FPVOPCEKTGj+eQp/YeXm3RTnD6ADKTmhZlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYLzT0Rfc/5CkCRv8C+3Cg7rdlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjEyMDU3ZjUtZTYyNC0z MDM1LTljZTktNmQyZTcxOWJmOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+u604ui6L+wa1w4XLnuEAQkSFbAAuvDSGIqSXbAix8mYRr40MaXH8/ fF0Lv7wOG187Pft7YPPuQAC4rLCOf70Sx88mo2x1ry5bEru5w746hDFUOr4SVY0Y y1x/3Ffvs5Iidr9bF1zu8H65bSyK7UiWpTKMMtmlUdk+YKQQsrZryzVkITYwFAHU KouO2aEigiN93P9FVSSfVt1W9bgbtlCc6tWYG9fQrACqIoW9YXg9JOWqYyCX+qMW IMUeZbTI+khalz8F0jnYdcT2exm76f3HdLraE8oTlxSe7oIgJaAR+LVvqB7HGV41 Va/nNRjMfnj/jVbJrm+ypXdE+MZ7jks= -----END CERTIFICATE-----Generated at Sat Apr 5 13:24:48 2025 by rpki-client