$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa File: 4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa (raw, json) Hash identifier: 4V1UbNUnppBlx/epdv4spSqLjkTsuTPtGQNyJIcKpSg= Subject key identifier: 61:C4:87:4F:83:42:04:8D:51:52:64:80:BB:1E:58:B9:7A:AF:21:F2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F860C8B67CDC5B9FD0A8B680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa Signing time: Sun 25 May 2025 12:09:18 +0000 ROA not before: Sun 25 May 2025 12:09:18 +0000 ROA not after: Sat 23 Aug 2025 12:09:18 +0000 asID: 214238 IP address blocks: 172.120.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:60:c8:b6:7c:dc:5b:9f:d0:a8:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 12:09:18 2025 GMT Not After : Aug 23 12:09:18 2025 GMT Subject: CN=bfc1c572-ed09-4b13-a7d1-260dca92bec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:b2:85:0b:03:a3:c6:65:10:53:43:f6:4b: 8d:71:ee:54:73:70:35:8a:20:b5:3d:0c:34:a9:1f: c7:87:85:01:80:9e:f8:cb:82:73:b5:0c:b0:70:b5: 6a:c8:1c:c5:c8:82:84:94:44:21:3a:bd:c1:27:22: cf:00:49:44:fe:29:9a:d8:3a:e4:1d:e6:a6:98:0a: ac:0c:11:d0:5f:8a:80:58:1b:ab:8c:c1:8c:4b:39: 95:35:be:03:a0:eb:98:b4:ba:2b:ea:ee:98:26:6f: 90:e7:9e:85:0b:7a:66:73:5a:87:85:5c:20:3e:b6: aa:64:13:f5:2c:4f:b7:31:ca:f4:b7:e6:d9:73:a8: 95:8e:41:53:a2:3b:4d:b8:d1:20:a4:8c:aa:d0:78: 83:71:90:7e:8b:65:e9:5c:10:16:2d:96:9c:14:2e: ed:8f:de:cd:11:a9:77:70:07:61:91:ed:0f:95:69: 4f:f4:c1:04:c2:48:ca:61:5d:54:ed:5f:0a:c0:c6: 8c:ec:02:4e:29:10:7d:f1:40:08:95:86:44:25:f5: 89:a2:21:d9:36:f1:44:48:d7:13:87:e8:6d:bb:cf: e4:74:fa:dc:06:4f:10:f8:05:71:55:a2:21:d1:35: 5e:31:d8:c0:10:85:0b:16:71:26:9c:f5:99:db:00: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C4:87:4F:83:42:04:8D:51:52:64:80:BB:1E:58:B9:7A:AF:21:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:98:ab:f6:58:23:a9:9b:f7:43:6c:a1:9b:b8:82:17:e3:c2: a8:84:71:ff:55:0e:35:8f:a3:fc:40:e2:40:56:63:a1:10:ce: 92:0c:b5:b3:04:42:df:b5:9c:3f:9c:4f:13:30:47:78:6e:84: d3:9f:aa:73:25:01:d6:4b:5c:b5:5e:e7:ed:32:a5:e7:7d:ff: 2e:8d:f2:e7:ba:39:0d:2c:05:2b:3c:e2:f8:c2:e8:f9:97:f8: 96:76:42:a6:ad:3c:72:21:1d:31:9d:25:2d:3d:72:d5:e5:8b: 12:a0:1c:d4:fc:99:cf:5b:69:fa:6f:d6:5b:29:9c:b6:2b:1d: 9f:f4:43:50:ce:de:a0:2e:4a:91:5b:db:ad:a2:98:13:0d:97: ae:e8:87:50:86:39:ce:80:c2:6b:f3:f9:37:59:f3:1d:e5:fe: 5b:dc:58:2b:0c:63:05:d3:a1:0f:a3:40:1a:d4:af:62:e9:3e: cb:16:1e:ba:ba:b3:03:c7:85:61:b7:7c:a1:ea:54:eb:81:cb: 10:11:26:4e:d5:e3:ad:28:05:66:81:96:d9:40:ee:0d:61:be: d4:e2:d9:14:ac:f6:6f:bd:7e:43:1c:79:a3:f3:24:4c:7b:0c: 1f:a5:90:dd:78:97:f3:6e:9d:c1:80:ad:b7:23:b2:74:ee:5b: 9d:a9:80:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4YMi2fNxbn9CotoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyNTEyMDkxOFoXDTI1MDgyMzEyMDkxOFowLzEtMCsGA1UEAxMk YmZjMWM1NzItZWQwOS00YjEzLWE3ZDEtMjYwZGNhOTJiZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWOyhQsDo8ZlEFND9kuNce5Uc3A1iiC1PQw0 qR/Hh4UBgJ74y4JztQywcLVqyBzFyIKElEQhOr3BJyLPAElE/ima2DrkHeammAqs DBHQX4qAWBurjMGMSzmVNb4DoOuYtLor6u6YJm+Q556FC3pmc1qHhVwgPraqZBP1 LE+3Mcr0t+bZc6iVjkFTojtNuNEgpIyq0HiDcZB+i2XpXBAWLZacFC7tj97NEal3 cAdhke0PlWlP9MEEwkjKYV1U7V8KwMaM7AJOKRB98UAIlYZEJfWJoiHZNvFESNcT h+htu8/kdPrcBk8Q+AVxVaIh0TVeMdjAEIULFnEmnPWZ2wAG+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHEh0+DQgSNUVJkgLseWLl6ryHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGQ0YTYyNWItYzhlYi0z NDViLWJjNjgtZTJhZjRlMmEyOWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOYq/ZYI6mb90NsoZu4ghfjwqiEcf9VDjWPo/xA4kBWY6EQzpIMtbME Qt+1nD+cTxMwR3huhNOfqnMlAdZLXLVe5+0yped9/y6N8ue6OQ0sBSs84vjC6PmX +JZ2QqatPHIhHTGdJS09ctXlixKgHNT8mc9bafpv1lspnLYrHZ/0Q1DO3qAuSpFb 262imBMNl67oh1CGOc6Awmvz+TdZ8x3l/lvcWCsMYwXToQ+jQBrUr2LpPssWHrq6 swPHhWG3fKHqVOuByxARJk7V460oBWaBltlA7g1hvtTi2RSs9m+9fkMceaPzJEx7 DB+lkN14l/NuncGArbcjsnTuW52pgDA= -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:48 2025 by rpki-client