$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa File: 3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa (raw, json) Hash identifier: DmsqBCUb6MuvyL6ILqHKm7cZcwG2x3MGMC26kaKfxMI= Subject key identifier: 68:36:D4:D3:5C:C2:C8:BC:25:AD:A1:DA:24:C7:F0:93:1A:1B:35:D6 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858493077151CBC5BECA8C38BA540 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa Signing time: Fri 14 Mar 2025 21:32:34 +0000 ROA not before: Fri 14 Mar 2025 21:32:34 +0000 ROA not after: Thu 12 Jun 2025 21:32:34 +0000 asID: 55201 IP address blocks: 172.121.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:77:15:1c:bc:5b:ec:a8:c3:8b:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 14 21:32:34 2025 GMT Not After : Jun 12 21:32:34 2025 GMT Subject: CN=d51eb7de-daf3-4106-90d8-18e41bd83712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:6a:16:6b:d9:f2:3d:6c:19:84:39:4f:58: 47:88:fe:08:4c:b5:aa:78:94:53:45:87:eb:5f:a2: 4d:be:49:e5:30:2b:52:38:06:87:26:0d:72:45:15: 2b:1d:fb:1d:0f:db:b2:d3:33:7c:1c:82:38:5c:0e: 66:56:05:67:93:ac:e1:48:6f:e9:9c:55:b7:63:9a: 42:ff:9d:2a:1a:83:de:a4:78:c4:fe:c9:e4:bf:e3: f0:99:b8:21:55:ca:ba:31:77:30:e0:55:71:84:49: 90:db:57:da:8f:6e:bb:0b:86:3b:8f:1c:61:c3:33: 6a:f6:7d:48:c8:a8:e8:3f:dd:0d:cb:e5:de:8c:51: b0:7e:65:da:1c:99:5c:4e:04:86:9f:6e:5d:36:00: 36:08:02:d9:8b:92:ba:b0:85:1a:1e:ad:cf:73:cb: 84:d0:4b:a7:92:19:fa:7b:1e:c8:be:a6:51:6a:f3: bc:1c:3d:1a:9b:e2:80:1e:53:98:ff:7b:16:07:41: 0a:80:f7:0e:51:07:50:b2:8a:70:1c:0c:63:11:79: a6:3c:e1:46:56:1c:a2:37:e7:e2:cb:b3:72:65:d3: d8:3f:08:07:e1:34:a6:7b:b6:37:f3:ef:8c:df:44: 3e:4c:d4:a0:46:03:f5:b4:e9:5e:51:59:6b:2c:85: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:36:D4:D3:5C:C2:C8:BC:25:AD:A1:DA:24:C7:F0:93:1A:1B:35:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:07:a6:93:98:5a:ce:45:bc:c1:9a:7e:56:ba:6f:df:57:79: 70:ac:18:ee:5f:f7:dc:39:bd:11:e8:c8:ac:2e:bb:90:14:7d: ab:09:a7:45:2b:8e:7e:e6:6d:42:07:f1:ec:bb:9f:6c:10:22: 17:a1:27:90:32:f7:d1:da:b8:8b:6c:be:db:b9:79:5f:30:45: 6a:0c:97:d9:b9:22:1b:1d:76:bf:b9:07:c9:b8:28:fe:6d:51: 16:7b:2a:ca:e4:f0:06:f0:e4:03:e3:95:50:81:0d:90:c9:b9: fb:95:ed:a7:c0:f0:04:43:92:47:c2:f5:73:67:2e:4a:fe:0e: 4b:54:e1:3d:66:60:75:d2:38:4d:cd:88:6a:42:7f:63:e1:49: 74:c4:a1:64:ca:d7:88:64:ad:0b:0b:9a:14:35:8f:95:d8:c8: f0:37:bc:09:73:f4:98:88:f8:5c:27:ef:19:a4:bc:1d:a5:61: 5b:2d:9f:d0:d3:fe:6a:d9:11:80:e4:67:4f:13:69:7a:a9:63: fd:8f:96:44:d6:f3:07:43:3a:9e:fe:6c:f9:fd:9a:16:f0:c8: 4a:b0:eb:05:41:71:0a:68:37:83:73:0d:15:ee:50:42:ed:4a: 26:28:7a:11:d7:4f:ea:f5:f2:3c:29:b3:40:bb:63:84:97:e2: 30:a6:53:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwdxUcvFvsqMOLpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMxNDIxMzIzNFoXDTI1MDYxMjIxMzIzNFowLzEtMCsGA1UEAxMk ZDUxZWI3ZGUtZGFmMy00MTA2LTkwZDgtMThlNDFiZDgzNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75qFmvZ8j1sGYQ5T1hHiP4ITLWqeJRTRYfr X6JNvknlMCtSOAaHJg1yRRUrHfsdD9uy0zN8HII4XA5mVgVnk6zhSG/pnFW3Y5pC /50qGoPepHjE/snkv+PwmbghVcq6MXcw4FVxhEmQ21faj267C4Y7jxxhwzNq9n1I yKjoP90Ny+XejFGwfmXaHJlcTgSGn25dNgA2CALZi5K6sIUaHq3Pc8uE0Eunkhn6 ex7IvqZRavO8HD0am+KAHlOY/3sWB0EKgPcOUQdQsopwHAxjEXmmPOFGVhyiN+fi y7NyZdPYPwgH4TSme7Y38++M30Q+TNSgRgP1tOleUVlrLIW/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg21NNcwsi8Ja2h2iTH8JMaGzXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2RmYTg2NWItNTdlZS0z OWE0LWE3YjEtZGMzZTc1MGNkMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4HppOYWs5FvMGafla6b99XeXCsGO5f99w5vRHoyKwuu5AUfasJp0Ur jn7mbUIH8ey7n2wQIhehJ5Ay99HauItsvtu5eV8wRWoMl9m5Ihsddr+5B8m4KP5t URZ7Ksrk8Abw5APjlVCBDZDJufuV7afA8ARDkkfC9XNnLkr+DktU4T1mYHXSOE3N iGpCf2PhSXTEoWTK14hkrQsLmhQ1j5XYyPA3vAlz9JiI+Fwn7xmkvB2lYVstn9DT /mrZEYDkZ08TaXqpY/2PlkTW8wdDOp7+bPn9mhbwyEqw6wVBcQpoN4NzDRXuUELt SiYoehHXT+r18jwps0C7Y4SX4jCmU9A= -----END CERTIFICATE-----Generated at Sun Apr 6 17:51:49 2025 by rpki-client