$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/587d3b28-fbe7-35f5-8d1b-df891c514c66.roa File: 587d3b28-fbe7-35f5-8d1b-df891c514c66.roa (raw, json) Hash identifier: Hc/ZgIw3hJr5n+qSqS/Zl8fhR+jIHlRGOIxz0B+qtKA= Subject key identifier: D8:C3:DE:4A:55:FF:2D:A2:04:37:62:8F:0E:78:7D:28:06:6E:9D:07 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848BFEB9385B575F275F7642BA0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/587d3b28-fbe7-35f5-8d1b-df891c514c66.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 3257 IP address blocks: 142.252.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:93:85:b5:75:f2:75:f7:64:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=c4269b96-11fb-4889-994b-9db799535dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:0b:f1:e3:8c:3f:95:0e:ed:74:97:44:a4: c6:d5:17:6b:c0:3d:fd:e2:2a:20:16:a6:7b:be:1d: 4c:6f:1f:01:f3:40:ec:14:88:20:a6:fa:6b:9e:44: 0e:c3:43:1c:c9:b6:16:7e:0f:76:a3:4d:69:27:9a: 00:ba:3a:fa:ec:c2:94:58:8c:fb:f0:a4:27:f3:2e: ce:ec:6c:85:9f:eb:12:7a:2d:e4:e4:41:7a:e4:5e: fd:71:21:2f:f9:ec:fa:d4:47:48:6f:c7:81:43:a1: 69:db:57:cb:db:a1:00:e1:35:d8:84:07:db:4b:b0: d6:d8:64:85:c4:6e:43:de:0b:6b:99:8d:57:6e:77: a3:9a:5f:41:50:c8:d2:e3:b2:c6:9c:b0:39:28:f9: 1e:75:ca:6c:76:dd:9b:8a:c2:22:7a:60:7a:a1:16: dd:6a:55:b2:06:45:fa:89:89:7a:d8:2a:8d:c4:3c: 64:52:9f:c7:e9:31:50:f9:20:be:2e:d8:cb:12:64: 16:76:11:d0:e0:23:7b:bb:6f:0b:50:6c:7a:45:87: 50:2e:ca:51:11:bc:fa:ae:6f:05:d6:78:38:40:c7: 88:56:8d:fd:62:e4:6c:fe:a4:4b:4f:65:e2:ba:b3: 34:6f:44:88:f9:e4:3b:32:5a:89:ef:41:c6:07:1e: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C3:DE:4A:55:FF:2D:A2:04:37:62:8F:0E:78:7D:28:06:6E:9D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/587d3b28-fbe7-35f5-8d1b-df891c514c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b7:4b:1e:ea:88:e0:13:e1:0a:91:87:30:87:89:19:a4:5e: 0c:d3:e1:73:1d:a9:f8:cf:c5:61:e6:eb:f3:70:38:ed:ac:85: 3b:57:5f:34:5a:49:dd:3d:2c:e8:56:79:7f:33:01:b6:a4:b7: bc:6c:4c:87:01:f0:25:b7:ef:c5:1a:01:82:90:5d:b8:21:f9: c0:98:85:22:16:23:f1:99:9f:86:70:1a:73:40:6a:a8:3b:80: b3:de:dd:7f:d8:6a:1a:01:3e:8d:5e:8a:85:64:cf:ee:38:5a: 00:81:a9:6c:db:d3:41:66:6b:2b:55:26:00:a9:f8:12:93:96: 07:4e:fb:ef:d1:0e:25:0b:8d:f6:3e:76:03:cb:5e:88:c0:fd: bb:a5:04:8c:6d:b9:12:74:98:97:d6:b9:e5:b5:8c:50:3b:85: 12:7b:56:f6:a8:48:4e:80:0c:aa:79:66:55:f1:a3:e9:3b:2f: 83:ed:a4:55:41:95:98:0b:00:8f:e3:ff:f2:0f:19:4f:cb:52: be:1f:64:d7:a2:0d:06:c6:d8:fd:81:c2:77:69:0f:bf:b5:7e: da:f0:3d:1f:9e:7d:6b:02:6f:e4:9e:3f:d7:a0:3d:35:1a:3d: ae:d9:5f:4a:7c:07:ed:8b:77:44:07:bf:58:ff:33:44:0b:bf: 09:05:73:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65OFtXXydfdkK6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YzQyNjliOTYtMTFmYi00ODg5LTk5NGItOWRiNzk5NTM1ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1kL8eOMP5UO7XSXRKTG1RdrwD394iogFqZ7 vh1Mbx8B80DsFIggpvprnkQOw0McybYWfg92o01pJ5oAujr67MKUWIz78KQn8y7O 7GyFn+sSei3k5EF65F79cSEv+ez61EdIb8eBQ6Fp21fL26EA4TXYhAfbS7DW2GSF xG5D3gtrmY1Xbnejml9BUMjS47LGnLA5KPkedcpsdt2bisIiemB6oRbdalWyBkX6 iYl62CqNxDxkUp/H6TFQ+SC+LtjLEmQWdhHQ4CN7u28LUGx6RYdQLspREbz6rm8F 1ng4QMeIVo39YuRs/qRLT2XiurM0b0SI+eQ7MlqJ70HGBx491wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjD3kpV/y2iBDdijw54fSgGbp0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTg3ZDNiMjgtZmJlNy0z NWY1LThkMWItZGY4OTFjNTE0YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW3Sx7qiOAT4QqRhzCHiRmkXgzT4XMdqfjPxWHm6/NwOO2shTtXXzRa Sd09LOhWeX8zAbakt7xsTIcB8CW378UaAYKQXbgh+cCYhSIWI/GZn4ZwGnNAaqg7 gLPe3X/YahoBPo1eioVkz+44WgCBqWzb00FmaytVJgCp+BKTlgdO++/RDiULjfY+ dgPLXojA/bulBIxtuRJ0mJfWueW1jFA7hRJ7VvaoSE6ADKp5ZlXxo+k7L4PtpFVB lZgLAI/j//IPGU/LUr4fZNeiDQbG2P2BwndpD7+1ftrwPR+efWsCb+SeP9egPTUa Pa7ZX0p8B+2Ld0QHv1j/M0QLvwkFc0Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:07 2025 by rpki-client