$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6c1b40-91fa-3431-a028-a6c4ad127667.roa File: 2f6c1b40-91fa-3431-a028-a6c4ad127667.roa (raw, json) Hash identifier: /Czs2L4hq9LBW2buHTOx5q2u4EZGgb4EUQoDqbJM5Dg= Subject key identifier: 01:2D:6C:D2:EB:41:44:65:A1:84:95:A2:A3:FA:82:7F:53:D9:91:39 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848AA054B76D78063956FCA0500 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6c1b40-91fa-3431-a028-a6c4ad127667.roa Signing time: Sat 25 Jan 2025 17:44:58 +0000 ROA not before: Sat 25 Jan 2025 17:44:58 +0000 ROA not after: Fri 25 Apr 2025 16:44:58 +0000 asID: 18779 IP address blocks: 172.120.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:05:4b:76:d7:80:63:95:6f:ca:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 25 17:44:58 2025 GMT Not After : Apr 25 16:44:58 2025 GMT Subject: CN=260255ce-459f-477c-b72e-70143db1cece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:b8:fc:b6:34:bb:70:24:63:b4:66:f9:b3: 13:32:25:55:5b:c7:76:bd:99:87:55:e7:e1:ba:b1: 8b:ee:56:77:1f:5e:99:20:72:b3:8d:99:59:7b:89: a8:22:66:54:8d:1a:db:4d:4b:1d:89:bc:f7:2a:ad: 26:f1:bc:b1:e2:f7:0d:fa:59:d9:40:02:03:2e:49: 54:9c:62:61:f0:7f:e3:64:0f:34:72:a4:a7:25:05: ed:ba:ab:23:26:66:5c:1e:5d:d6:45:53:1f:de:f2: 95:ec:f1:de:78:ad:93:28:67:33:73:58:ee:f4:a2: ef:d5:e2:69:d8:d2:e1:7c:58:2d:31:3d:5c:b7:49: 12:b8:b6:25:4f:7d:d3:e6:e0:80:b3:f0:26:77:4e: 76:a0:6b:9f:63:3c:99:2d:a7:02:ac:1e:77:8b:a8: 23:60:a4:63:4b:6f:83:96:83:9c:41:22:a8:7e:50: 8a:75:cb:f7:2d:f9:94:b5:e1:2a:d6:17:70:08:93: 46:39:ec:c9:9f:07:89:38:62:c9:d3:c2:68:55:14: 04:de:fb:43:2b:8d:c7:27:a3:b9:c5:09:02:65:81: 3f:70:60:85:ce:8f:15:6a:76:8e:59:01:aa:3e:8c: 68:cd:ca:da:6d:26:23:76:48:37:6b:1e:0c:ea:e5: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2D:6C:D2:EB:41:44:65:A1:84:95:A2:A3:FA:82:7F:53:D9:91:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6c1b40-91fa-3431-a028-a6c4ad127667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:18:bb:9f:dc:9b:54:56:81:61:4d:f6:f3:5a:5d:ae:20:0a: ba:6c:60:70:ef:0c:a6:01:23:e2:a2:a1:6f:1e:a1:d2:7a:02: 26:97:46:86:08:8b:72:53:ed:9a:ab:a1:c5:d1:72:e9:91:4c: e6:1c:87:31:56:68:75:e6:fb:66:44:7f:81:85:7e:b9:fa:fb: c0:5f:5e:36:82:1b:38:91:62:aa:5a:38:91:06:31:07:cf:de: b6:72:c3:02:3c:b8:0d:a6:40:c4:a3:c7:7c:67:4b:c0:8f:57: 17:c8:0f:6b:74:1d:f9:ee:1b:70:3a:25:28:45:c3:0f:17:08: 44:ca:68:81:98:41:11:f1:25:c2:34:19:15:e3:5e:8c:db:40: 18:b9:d8:2b:a0:ac:50:ff:e7:aa:9b:4c:98:57:d1:a1:bf:bf: bb:4a:f1:47:f8:18:7b:5c:cf:c7:d4:e6:c0:f5:e0:bb:9a:5f: 97:2a:88:0a:93:e3:11:79:db:5b:19:41:58:e9:bd:58:82:d1: 50:63:4c:06:f4:d5:77:27:6a:d4:30:14:dd:22:15:52:8e:a5: 72:c7:53:d5:2e:e2:e8:6a:21:b4:a1:a4:1d:3f:86:d0:25:9c: 5d:0e:54:60:e8:d7:c7:c8:f8:4b:27:01:1f:8e:26:b3:7a:db: 17:37:df:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiqBUt214BjlW/KBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyNTE3NDQ1OFoXDTI1MDQyNTE2NDQ1OFowLzEtMCsGA1UEAxMk MjYwMjU1Y2UtNDU5Zi00NzdjLWI3MmUtNzAxNDNkYjFjZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ24/LY0u3AkY7Rm+bMTMiVVW8d2vZmHVefh urGL7lZ3H16ZIHKzjZlZe4moImZUjRrbTUsdibz3Kq0m8byx4vcN+lnZQAIDLklU nGJh8H/jZA80cqSnJQXtuqsjJmZcHl3WRVMf3vKV7PHeeK2TKGczc1ju9KLv1eJp 2NLhfFgtMT1ct0kSuLYlT33T5uCAs/Amd052oGufYzyZLacCrB53i6gjYKRjS2+D loOcQSKoflCKdcv3LfmUteEq1hdwCJNGOezJnweJOGLJ08JoVRQE3vtDK43HJ6O5 xQkCZYE/cGCFzo8VanaOWQGqPoxozcrabSYjdkg3ax4M6uVu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEtbNLrQURloYSVoqP6gn9T2ZE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmY2YzFiNDAtOTFmYS0z NDMxLWEwMjgtYTZjNGFkMTI3NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwYu5/cm1RWgWFN9vNaXa4gCrpsYHDvDKYBI+KioW8eodJ6AiaXRoYI i3JT7ZqrocXRcumRTOYchzFWaHXm+2ZEf4GFfrn6+8BfXjaCGziRYqpaOJEGMQfP 3rZywwI8uA2mQMSjx3xnS8CPVxfID2t0HfnuG3A6JShFww8XCETKaIGYQRHxJcI0 GRXjXozbQBi52CugrFD/56qbTJhX0aG/v7tK8Uf4GHtcz8fU5sD14LuaX5cqiAqT 4xF521sZQVjpvViC0VBjTAb01XcnatQwFN0iFVKOpXLHU9Uu4uhqIbShpB0/htAl nF0OVGDo18fI+EsnAR+OJrN62xc33wU= -----END CERTIFICATE-----Generated at Fri Apr 11 22:52:29 2025 by rpki-client