$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42fa9312-77d4-32c8-8a7f-c15729289fe1.roa File: 42fa9312-77d4-32c8-8a7f-c15729289fe1.roa (raw, json) Hash identifier: 8o52reZlTUU+yc8Us+sOla4HPFmbxMXTHheQjK7RSJM= Subject key identifier: 9A:DB:45:DB:78:B2:CD:4E:51:51:28:BF:9D:06:69:E6:08:42:A2:E0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848EC96AA2B12EB719FEB403580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42fa9312-77d4-32c8-8a7f-c15729289fe1.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 209854 IP address blocks: 172.120.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:aa:2b:12:eb:71:9f:eb:40:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=4df13b54-304f-4295-ab91-46b8a8969c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:01:29:ff:26:fc:34:94:8b:56:e5:7f:a2: 13:72:8f:9b:38:bd:e0:2e:da:e9:80:6f:21:db:0c: 81:66:b7:60:7d:6b:61:9a:ef:58:e3:2b:35:01:dc: c3:25:c4:50:a9:85:13:17:ca:e0:23:94:b0:e6:1f: 7a:6c:10:24:92:1e:18:5e:8c:0c:7d:14:a1:82:24: a9:9f:2d:da:19:25:0d:3f:f5:9e:f2:15:3f:01:a6: 15:9d:5f:49:32:90:0e:fe:3a:87:8c:e5:53:45:8f: 47:1b:d7:3f:c3:4c:4b:51:06:c0:12:e5:df:01:b6: 42:d3:23:74:e8:36:e6:bf:40:68:ee:83:70:ad:1b: 86:c2:d8:0a:89:24:a2:db:67:75:52:c3:cf:6d:12: 5a:4f:40:e8:63:d4:87:1c:3a:84:6d:e8:85:60:33: 11:73:88:56:29:64:e9:ce:8c:3a:10:f2:30:bb:b1: 31:e0:23:e8:7d:af:c2:00:88:36:65:90:8d:41:48: f1:59:ec:83:0d:b1:5c:29:f6:b7:b2:1a:ed:e8:bc: 46:4b:f3:88:d8:ac:9c:7c:4e:9d:f4:d5:13:05:e2: 27:2a:26:8b:7b:5f:b6:1b:24:2d:d3:a1:b9:f4:f2: 34:93:df:b9:80:5c:02:7e:4b:85:65:c8:fb:01:96: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:45:DB:78:B2:CD:4E:51:51:28:BF:9D:06:69:E6:08:42:A2:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42fa9312-77d4-32c8-8a7f-c15729289fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6a:62:12:de:9d:ed:f6:ef:f5:93:66:59:f6:61:7c:6c:92: 1b:14:83:7d:c6:94:6e:79:78:e9:98:3f:10:71:a4:38:6f:c7: 18:d9:a0:fe:8d:49:4a:95:90:40:0a:b8:3c:68:53:40:85:79: 4c:c7:6a:98:56:95:3d:60:09:ca:e0:74:1c:42:88:c5:40:2e: b9:1e:ac:6b:a5:7c:be:83:7e:8b:db:f5:87:00:29:ac:6d:60: 0f:01:47:2f:80:55:e8:ab:68:b0:17:06:8e:33:a5:71:ef:9e: 7e:20:a7:fc:54:ab:af:f7:61:b6:c5:93:7e:4e:94:de:f4:cf: 27:17:60:c0:d8:6a:53:7f:0d:e9:11:92:ed:7d:75:29:da:e3: f5:8c:28:65:f3:b1:fe:6b:f9:a3:12:55:4b:25:45:31:ef:03: f9:49:f3:50:f5:92:17:a0:a3:d5:f9:61:12:99:b8:7c:00:de: 62:98:d8:2f:75:5f:f1:d8:71:de:95:87:36:a1:30:45:77:16: 2c:bf:91:56:22:8b:f8:d7:44:36:c7:c5:49:f3:f8:3c:1b:7c: c8:28:62:89:67:fa:74:74:66:55:6a:24:b5:b2:7c:c6:84:36: 54:12:03:2e:60:2e:db:3a:9a:41:2a:12:b4:9d:37:8b:f2:da: 21:8b:d3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqorEutxn+tANYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NGRmMTNiNTQtMzA0Zi00Mjk1LWFiOTEtNDZiOGE4OTY5YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5gBKf8m/DSUi1blf6ITco+bOL3gLtrpgG8h 2wyBZrdgfWthmu9Y4ys1AdzDJcRQqYUTF8rgI5Sw5h96bBAkkh4YXowMfRShgiSp ny3aGSUNP/We8hU/AaYVnV9JMpAO/jqHjOVTRY9HG9c/w0xLUQbAEuXfAbZC0yN0 6Dbmv0Bo7oNwrRuGwtgKiSSi22d1UsPPbRJaT0DoY9SHHDqEbeiFYDMRc4hWKWTp zow6EPIwu7Ex4CPofa/CAIg2ZZCNQUjxWeyDDbFcKfa3shrt6LxGS/OI2KycfE6d 9NUTBeInKiaLe1+2GyQt06G59PI0k9+5gFwCfkuFZcj7AZbnawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrbRdt4ss1OUVEov50GaeYIQqLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDJmYTkzMTItNzdkNC0z MmM4LThhN2YtYzE1NzI5Mjg5ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhqYhLene327/WTZln2YXxskhsUg33GlG55eOmYPxBxpDhvxxjZoP6N SUqVkEAKuDxoU0CFeUzHaphWlT1gCcrgdBxCiMVALrkerGulfL6Dfovb9YcAKaxt YA8BRy+AVeiraLAXBo4zpXHvnn4gp/xUq6/3YbbFk35OlN70zycXYMDYalN/DekR ku19dSna4/WMKGXzsf5r+aMSVUslRTHvA/lJ81D1khego9X5YRKZuHwA3mKY2C91 X/HYcd6VhzahMEV3Fiy/kVYii/jXRDbHxUnz+DwbfMgoYoln+nR0ZlVqJLWyfMaE NlQSAy5gLts6mkEqErSdN4vy2iGL0xE= -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:25 2025 by rpki-client