$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa File: 2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa (raw, json) Hash identifier: hdJLsP2v16o9t6WGd8nIqrPieC8iULQaYqCrnrdKha0= Subject key identifier: 16:3F:EB:96:B5:8D:98:C8:CC:9B:91:AA:06:B2:25:E5:CB:B5:08:DE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848AA0534A15406943F5B75D720 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa Signing time: Sat 25 Jan 2025 17:44:48 +0000 ROA not before: Sat 25 Jan 2025 17:44:48 +0000 ROA not after: Fri 25 Apr 2025 16:44:48 +0000 asID: 18779 IP address blocks: 172.120.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:05:34:a1:54:06:94:3f:5b:75:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 25 17:44:48 2025 GMT Not After : Apr 25 16:44:48 2025 GMT Subject: CN=82105099-3ab3-4983-ba56-15b290ce71ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:63:9d:42:11:f3:51:ca:f2:15:cd:ea:bc: 2d:97:fc:c8:e7:89:a7:3d:60:21:97:36:84:77:2c: 90:1e:5d:6e:6a:bd:60:8f:6a:63:fb:b9:77:2c:3f: 67:df:65:02:98:70:e9:8f:86:00:1c:72:0b:01:81: a7:e7:c3:41:e1:da:de:0f:c0:4f:b6:78:a2:bc:4c: 60:de:20:70:11:e1:db:2c:72:20:26:da:ca:c6:be: 21:64:e4:c8:45:73:40:08:cb:71:9a:a9:62:54:5a: 3a:86:bd:2a:75:44:62:e1:b4:d7:a8:6a:0b:38:1e: 30:b9:a1:6a:5d:67:d3:ff:11:a8:40:36:c7:24:99: bc:a7:5a:6b:bb:67:eb:eb:f5:c2:a7:04:b4:a7:f9: 6d:73:84:cb:41:50:19:10:92:8a:a9:7e:4e:e0:05: a4:59:82:1c:17:d4:56:85:8a:4a:cc:b4:23:4a:a0: 1f:94:73:80:d8:1f:3c:f6:13:71:10:96:cc:66:ee: 1c:5d:b9:68:44:ea:9d:13:60:96:24:6b:d7:f7:62: 3a:5f:9d:d7:bb:d8:65:73:f8:1b:a0:52:77:64:01: 28:09:ed:06:f6:5f:c6:0b:2e:b6:c0:a2:02:d1:30: 73:91:6b:e4:a4:6a:ca:e7:fa:35:0f:03:50:56:a3: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:EB:96:B5:8D:98:C8:CC:9B:91:AA:06:B2:25:E5:CB:B5:08:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:35:6f:fd:42:d3:11:fb:45:42:d6:75:5f:6a:c2:17:e5:9b: 65:d5:58:65:eb:83:de:ca:e5:b7:67:d1:22:7f:44:74:58:94: a6:b6:20:fe:e7:7d:d8:85:3a:70:04:4e:ca:ac:be:8c:3f:46: 1b:54:e3:26:4b:a6:f5:87:90:27:8e:8a:64:3a:8f:5f:4d:e0: ba:57:4b:c6:6b:ef:99:34:a5:12:5c:76:97:0d:ce:94:20:84: 72:17:2f:22:77:bf:f7:dd:a4:b7:63:c1:74:f2:11:a6:ac:f9: 12:ae:47:24:c6:25:0e:12:7a:33:ed:c4:c6:fc:ec:1a:9f:50: 88:ed:98:fb:e1:2e:d7:0a:25:f7:f6:60:92:d1:99:c7:ed:5b: f6:0c:ad:9e:fe:4a:23:dd:60:c3:74:74:40:b4:f1:4d:3d:3c: e4:5a:45:55:64:ab:61:82:c9:57:5d:bf:7d:9e:20:16:21:a4: 3f:c6:1e:ef:b4:86:70:8f:ff:fa:c6:b8:e1:70:9b:a4:0f:5a: 68:17:5e:34:62:e2:33:74:31:54:5d:3a:57:27:9e:38:a2:c6: 19:17:bd:5a:81:bb:55:db:3a:16:84:cf:14:c9:f4:25:6f:b3: 09:65:23:aa:d8:7e:44:a5:aa:56:56:ad:d9:a7:a3:8c:74:83: a6:d3:a1:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiqBTShVAaUP1t11yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyNTE3NDQ0OFoXDTI1MDQyNTE2NDQ0OFowLzEtMCsGA1UEAxMk ODIxMDUwOTktM2FiMy00OTgzLWJhNTYtMTViMjkwY2U3MWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ1jnUIR81HK8hXN6rwtl/zI54mnPWAhlzaE dyyQHl1uar1gj2pj+7l3LD9n32UCmHDpj4YAHHILAYGn58NB4dreD8BPtniivExg 3iBwEeHbLHIgJtrKxr4hZOTIRXNACMtxmqliVFo6hr0qdURi4bTXqGoLOB4wuaFq XWfT/xGoQDbHJJm8p1pru2fr6/XCpwS0p/ltc4TLQVAZEJKKqX5O4AWkWYIcF9RW hYpKzLQjSqAflHOA2B889hNxEJbMZu4cXbloROqdE2CWJGvX92I6X53Xu9hlc/gb oFJ3ZAEoCe0G9l/GCy62wKIC0TBzkWvkpGrK5/o1DwNQVqOKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY/65a1jZjIzJuRqgayJeXLtQjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmE3YjFhYzYtYWExNC0z NmZjLWEwZjgtMWJiN2JjZWMyNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk1b/1C0xH7RULWdV9qwhflm2XVWGXrg97K5bdn0SJ/RHRYlKa2IP7n fdiFOnAETsqsvow/RhtU4yZLpvWHkCeOimQ6j19N4LpXS8Zr75k0pRJcdpcNzpQg hHIXLyJ3v/fdpLdjwXTyEaas+RKuRyTGJQ4SejPtxMb87BqfUIjtmPvhLtcKJff2 YJLRmcftW/YMrZ7+SiPdYMN0dEC08U09PORaRVVkq2GCyVddv32eIBYhpD/GHu+0 hnCP//rGuOFwm6QPWmgXXjRi4jN0MVRdOlcnnjiixhkXvVqBu1XbOhaEzxTJ9CVv swllI6rYfkSlqlZWrdmno4x0g6bToRk= -----END CERTIFICATE-----Generated at Sat Apr 12 02:18:28 2025 by rpki-client