$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41e8db8a-aad1-3d83-87b3-0f188390512f.roa File: 41e8db8a-aad1-3d83-87b3-0f188390512f.roa (raw, json) Hash identifier: 7SVn3QGZuuxo+4oKC4d6CFU5UFgA+u6AAGH+rrULgY8= Subject key identifier: A2:7D:35:29:D7:83:CB:DB:9B:81:D0:AC:DA:3A:82:27:77:4B:E0:FC Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D641267AF10140196A282AE0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41e8db8a-aad1-3d83-87b3-0f188390512f.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:26:7a:f1:01:40:19:6a:28:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=eea4675f-f04b-45f8-ba67-0b07ef2315ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:14:6b:93:0b:2c:b4:71:53:26:7b:e3:65: 82:83:6d:07:c8:9d:13:4f:55:a5:41:ff:6c:b3:b5: a1:17:f5:2f:7e:83:46:48:01:d8:5c:bd:b3:8a:2a: 64:cc:f9:82:bf:67:ae:13:9e:95:cf:da:5e:ff:aa: 8e:5a:38:7c:ca:a8:dd:44:58:b6:36:aa:f2:e6:85: 91:30:0a:48:f1:bd:6c:a0:81:fd:2c:d7:64:e0:bb: f9:bc:11:c3:04:37:c0:c5:31:57:65:c8:b2:ca:bd: 64:3b:89:98:7d:38:93:2f:18:d7:13:90:83:b8:86: a7:a5:2a:d7:85:1c:e0:ca:f7:3e:73:7e:40:45:9a: 5e:b1:5a:b4:2c:ad:b5:f9:0a:f9:04:4f:88:d3:af: cb:6d:c0:34:d0:d3:6e:53:f5:22:04:bf:2f:3a:5b: 03:6a:2f:69:4b:b3:b1:7e:1d:3f:fb:6a:b8:50:60: 31:2b:24:ed:a2:50:12:0e:07:62:0d:f4:85:f0:6a: 52:68:57:83:e1:44:4d:68:e5:f9:9c:f0:55:11:33: 95:67:c9:84:31:3b:5c:21:3a:eb:dd:8f:b1:ab:3c: 99:e8:22:20:62:b9:01:3a:96:35:e8:7c:0b:5c:dc: 67:59:3e:21:28:8a:45:15:56:09:ef:b0:9b:6a:17: 20:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:35:29:D7:83:CB:DB:9B:81:D0:AC:DA:3A:82:27:77:4B:E0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41e8db8a-aad1-3d83-87b3-0f188390512f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:52:0f:fc:d1:8c:f2:0a:e1:bd:84:6c:af:48:b4:85:cb:87: 22:c7:4f:64:a7:71:c4:97:e4:5d:3c:85:97:36:4e:db:81:8e: 12:13:e3:9a:f9:93:4f:9a:a3:01:b8:20:71:91:30:4e:56:2d: 89:b0:dd:3b:6a:aa:53:08:e1:d4:5f:9d:f9:eb:19:74:f1:56: 07:01:fc:67:79:7b:73:e9:81:ef:ab:73:e1:ce:f7:79:64:eb: 73:e6:7b:6f:c7:84:32:ee:7c:61:13:0d:12:df:c6:c6:2c:54: 67:b1:56:83:ce:b7:84:3a:fe:91:5a:91:dc:62:5e:49:45:5e: e6:96:65:13:bb:c0:47:4c:0b:9f:eb:73:e9:21:13:1f:00:bd: 48:f8:e2:99:c5:50:e5:65:e9:df:3f:07:ce:c0:c7:9d:42:9f: a6:34:4c:6e:6e:c7:38:8d:48:b7:1e:37:a5:73:aa:e6:7a:55: 93:26:37:9b:b0:88:8e:e7:34:86:4f:79:32:3e:41:75:bb:3b: 76:dd:84:17:89:5a:44:b3:2a:f2:45:7c:59:43:5b:ea:fb:a6: 93:fe:38:4f:2a:87:53:31:e5:f6:39:3e:89:e0:a1:2f:49:04: 34:64:8c:9d:c9:f6:e1:77:8f:ee:77:6c:03:ae:0e:37:32:cd: 8e:0c:d6:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSZ68QFAGWooKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWVhNDY3NWYtZjA0Yi00NWY4LWJhNjctMGIwN2VmMjMxNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhkUa5MLLLRxUyZ742WCg20HyJ0TT1WlQf9s s7WhF/UvfoNGSAHYXL2ziipkzPmCv2euE56Vz9pe/6qOWjh8yqjdRFi2Nqry5oWR MApI8b1soIH9LNdk4Lv5vBHDBDfAxTFXZciyyr1kO4mYfTiTLxjXE5CDuIanpSrX hRzgyvc+c35ARZpesVq0LK21+Qr5BE+I06/LbcA00NNuU/UiBL8vOlsDai9pS7Ox fh0/+2q4UGAxKyTtolASDgdiDfSF8GpSaFeD4URNaOX5nPBVETOVZ8mEMTtcITrr 3Y+xqzyZ6CIgYrkBOpY16HwLXNxnWT4hKIpFFVYJ77CbahcgAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ9NSnXg8vbm4HQrNo6gid3S+D8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDFlOGRiOGEtYWFkMS0z ZDgzLTg3YjMtMGYxODgzOTA1MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBSD/zRjPIK4b2EbK9ItIXLhyLHT2SnccSX5F08hZc2TtuBjhIT45r5 k0+aowG4IHGRME5WLYmw3TtqqlMI4dRfnfnrGXTxVgcB/Gd5e3Ppge+rc+HO93lk 63Pme2/HhDLufGETDRLfxsYsVGexVoPOt4Q6/pFakdxiXklFXuaWZRO7wEdMC5/r c+khEx8AvUj44pnFUOVl6d8/B87Ax51Cn6Y0TG5uxziNSLceN6VzquZ6VZMmN5uw iI7nNIZPeTI+QXW7O3bdhBeJWkSzKvJFfFlDW+r7ppP+OE8qh1Mx5fY5PongoS9J BDRkjJ3J9uF3j+53bAOuDjcyzY4M1jM= -----END CERTIFICATE-----Generated at Sat Apr 5 13:07:33 2025 by rpki-client