$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ca61d22-58be-3aa6-9b21-320cde8c688e.roa File: 3ca61d22-58be-3aa6-9b21-320cde8c688e.roa (raw, json) Hash identifier: 9A+d4UTR3FTCQVmby9EIZWqwXHwf8D9DDdsEcK301Zo= Subject key identifier: F5:C0:4E:14:5C:4C:23:F2:C6:16:A7:23:EF:6C:29:F3:AB:83:7F:72 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848C150D2A9B3E57A792CDD7100 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ca61d22-58be-3aa6-9b21-320cde8c688e.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 149440 IP address blocks: 172.121.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d2:a9:b3:e5:7a:79:2c:dd:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=0b479916-b4c7-4716-989c-259c3948db10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:89:c1:3c:58:2c:ee:20:6b:73:fd:a6:6a: bc:5d:65:28:a7:34:3d:3a:ef:8f:9f:62:4a:fb:54: d4:f5:93:85:92:45:87:86:cd:e1:5f:ec:fc:60:4b: 5e:ab:5c:11:7e:76:c6:3c:44:ca:46:bf:de:0e:97: 1b:2f:8a:ea:81:75:95:88:d4:a1:00:63:79:9f:0d: 3f:8e:ba:c0:54:5f:cc:4f:7d:ad:40:50:be:cc:da: 67:e0:fd:4a:31:39:ac:dd:3c:ce:e3:17:ec:fb:bf: e4:42:6a:83:2b:e1:02:24:f3:f8:49:fe:61:9a:1d: cd:06:4a:fc:fa:a7:0a:7d:ab:2d:aa:d3:b5:e4:85: 40:b7:ab:15:d7:1c:d0:a7:7a:f7:41:39:ff:ea:90: b9:80:2b:31:64:64:a8:78:96:cd:ed:63:d1:48:20: 23:52:a5:9b:9d:8c:40:8f:f3:d1:55:0c:aa:b5:db: 98:46:81:e8:f8:bf:33:fa:ad:bd:43:13:0c:c5:5c: 96:40:96:a1:d7:c5:4d:e3:69:64:5d:45:d7:b6:77: 58:07:ce:91:b8:3f:cc:1f:78:be:fc:a3:6a:fb:e0: 08:39:6c:a5:13:eb:6f:37:97:74:4c:f1:80:2c:82: e9:19:fb:1e:f1:c2:a2:55:b8:ea:1b:e6:f2:bb:42: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C0:4E:14:5C:4C:23:F2:C6:16:A7:23:EF:6C:29:F3:AB:83:7F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ca61d22-58be-3aa6-9b21-320cde8c688e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f5:5b:57:0f:1d:ac:b4:3a:b5:0c:21:b5:b8:e9:9d:12:00: e3:85:6b:6a:72:a2:36:c6:db:c1:ed:c8:fe:36:d0:64:04:ad: bc:4f:74:ea:c0:3e:85:f6:45:0c:a7:8e:3b:54:71:6c:e3:f8: 43:0e:b0:06:c6:e8:b9:03:2f:60:ba:8e:fd:7b:35:66:73:fe: a1:4f:62:9e:c6:b8:68:53:72:2b:0e:88:a8:e5:d7:6b:32:9c: 38:63:db:9c:43:da:58:a9:f8:c1:3d:43:50:6a:57:bc:9e:98: 53:de:fa:92:58:25:34:a8:82:7e:f9:4e:d7:51:fd:f1:50:e0: ad:40:6b:36:f9:e8:53:fb:6e:b9:64:4d:80:1f:be:f8:6d:f7: 1b:55:0a:0a:56:a9:87:9a:2d:01:69:9d:8b:7b:67:c6:16:89: fe:e0:c5:8f:81:4c:10:70:1d:0a:32:91:47:61:61:7d:56:e3: ba:cc:ea:9d:84:b1:62:ac:f2:9a:92:37:8c:a7:bc:c8:a7:89: 1e:5c:60:06:cf:0a:6d:4b:3f:8f:9b:d3:57:fc:ae:dc:bf:81: 83:a1:dc:9b:a6:47:84:89:d4:73:57:af:0b:ce:bd:d5:07:34: 27:6c:5d:35:d7:23:3b:b8:2e:27:fe:fb:4d:64:fd:d5:9d:24: 17:cb:ba:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNKps+V6eSzdcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MGI0Nzk5MTYtYjRjNy00NzE2LTk4OWMtMjU5YzM5NDhkYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoiJwTxYLO4ga3P9pmq8XWUopzQ9Ou+Pn2JK +1TU9ZOFkkWHhs3hX+z8YEteq1wRfnbGPETKRr/eDpcbL4rqgXWViNShAGN5nw0/ jrrAVF/MT32tQFC+zNpn4P1KMTms3TzO4xfs+7/kQmqDK+ECJPP4Sf5hmh3NBkr8 +qcKfastqtO15IVAt6sV1xzQp3r3QTn/6pC5gCsxZGSoeJbN7WPRSCAjUqWbnYxA j/PRVQyqtduYRoHo+L8z+q29QxMMxVyWQJah18VN42lkXUXXtndYB86RuD/MH3i+ /KNq++AIOWylE+tvN5d0TPGALILpGfse8cKiVbjqG+byu0K3jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXAThRcTCPyxhanI+9sKfOrg39yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2NhNjFkMjItNThiZS0z YWE2LTliMjEtMzIwY2RlOGM2ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX1W1cPHay0OrUMIbW46Z0SAOOFa2pyojbG28HtyP420GQErbxPdOrA PoX2RQynjjtUcWzj+EMOsAbG6LkDL2C6jv17NWZz/qFPYp7GuGhTcisOiKjl12sy nDhj25xD2lip+ME9Q1BqV7yemFPe+pJYJTSogn75TtdR/fFQ4K1Aazb56FP7brlk TYAfvvht9xtVCgpWqYeaLQFpnYt7Z8YWif7gxY+BTBBwHQoykUdhYX1W47rM6p2E sWKs8pqSN4ynvMiniR5cYAbPCm1LP4+b01f8rty/gYOh3JumR4SJ1HNXrwvOvdUH NCdsXTXXIzu4Lif++01k/dWdJBfLuuo= -----END CERTIFICATE-----Generated at Wed Apr 9 22:08:30 2025 by rpki-client