$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa File: 647054b9-78ea-3619-a0b4-74c569cf324e.roa (raw, json) Hash identifier: lfvIstJmaD8NT+ET7gmnCrE3Wk2dIWsw3nJCPiJj+xY= Subject key identifier: 17:03:E8:04:F8:C9:24:7C:6B:49:8C:A6:36:B4:A9:47:75:B2:C3:02 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848BFEB93E7D73DE0E7A7354780 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 3257 IP address blocks: 172.121.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:93:e7:d7:3d:e0:e7:a7:35:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=77661ffb-9ee2-4b37-99ca-ba4fc15d8c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:52:a0:44:9b:f7:25:4a:03:4a:2b:2e:e3: c3:19:fc:dc:53:0b:e4:be:ec:96:26:d7:48:07:17: 41:75:e5:55:94:14:84:52:c5:64:01:b6:b5:89:ee: e1:b7:e2:9e:1a:4c:34:70:83:59:e9:50:de:19:01: 0c:b0:84:d7:63:a9:55:96:ab:fb:ab:29:e3:ed:7a: ac:b8:6a:0d:24:9a:20:49:a3:7a:e1:88:d3:3b:ae: 27:4b:2d:0f:d1:1c:d3:26:14:a1:e0:c3:b7:69:d1: 30:42:65:49:df:d8:10:41:eb:cc:71:1f:8a:1d:87: 75:49:84:03:ec:b3:3a:da:ca:5d:1c:bb:c6:0e:50: df:6e:b7:ce:c1:e8:1a:c5:26:00:3b:2b:6f:82:90: 33:57:f6:d8:7b:37:b6:b1:eb:d4:bf:6f:8c:80:e8: c9:f5:3d:75:c3:bf:0d:6b:4a:37:99:4d:6b:2d:07: 19:6e:52:45:72:5a:06:57:8a:43:80:73:f0:88:32: 55:e5:64:f0:69:93:1b:2f:8a:39:78:ed:51:ed:3f: 87:38:69:d0:0f:38:81:f9:54:ff:89:57:dc:a0:2d: 7f:f1:2f:e1:ad:3f:9f:77:d9:0d:69:66:83:7c:6e: 4b:b2:fa:eb:b5:f7:5d:f0:1b:98:f5:ff:3e:15:f4: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:03:E8:04:F8:C9:24:7C:6B:49:8C:A6:36:B4:A9:47:75:B2:C3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c4:43:82:09:22:56:82:1b:91:2b:cd:3f:62:db:5c:01:26: 3b:64:ae:a5:03:d0:f0:d4:e1:2c:68:66:59:e6:3f:2f:b0:61: b1:d4:54:f5:e4:e3:d7:32:16:fd:7b:83:f1:aa:34:0f:b2:2d: 43:6b:c8:ce:7f:13:79:81:e7:cc:7c:3c:74:64:98:d1:33:e4: 4e:9d:77:d8:ee:08:a7:75:ac:ad:62:d6:ff:7c:90:16:ee:2d: ce:c8:4b:b2:f7:3f:12:72:ba:fc:d1:77:b4:5b:91:9b:90:c9: 4e:0c:df:fe:ab:74:32:00:e6:dd:41:62:3c:6f:20:f7:d5:a9: 48:13:17:a0:2c:45:72:0c:a4:bf:48:60:25:05:09:3e:77:0f: 21:c1:d6:4d:10:68:9b:46:8d:a2:b0:64:44:31:d7:f1:6a:d4: b3:5e:c4:0a:59:90:1b:72:de:f1:a5:0c:cd:aa:a1:a5:82:42: 1f:e4:f8:4a:56:f5:b3:9c:e6:b9:da:7d:ea:7d:25:b4:42:91: 21:9c:17:b6:06:7e:c6:09:eb:f0:1d:83:90:a6:f6:04:ad:ce: 77:b6:4c:02:5c:c3:20:27:ae:d2:52:1a:0c:04:e0:80:fb:5c: 71:9b:b1:08:a0:b4:e4:24:2c:98:aa:37:9a:d7:91:33:b4:d4: 38:06:ea:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65Pn1z3g56c1R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk Nzc2NjFmZmItOWVlMi00YjM3LTk5Y2EtYmE0ZmMxNWQ4YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0hSoESb9yVKA0orLuPDGfzcUwvkvuyWJtdI BxdBdeVVlBSEUsVkAba1ie7ht+KeGkw0cINZ6VDeGQEMsITXY6lVlqv7qynj7Xqs uGoNJJogSaN64YjTO64nSy0P0RzTJhSh4MO3adEwQmVJ39gQQevMcR+KHYd1SYQD 7LM62spdHLvGDlDfbrfOwegaxSYAOytvgpAzV/bYeze2sevUv2+MgOjJ9T11w78N a0o3mU1rLQcZblJFcloGV4pDgHPwiDJV5WTwaZMbL4o5eO1R7T+HOGnQDziB+VT/ iVfcoC1/8S/hrT+fd9kNaWaDfG5Lsvrrtfdd8BuY9f8+FfTDMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcD6AT4ySR8a0mMpja0qUd1ssMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjQ3MDU0YjktNzhlYS0z NjE5LWEwYjQtNzRjNTY5Y2YzMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTEQ4IJIlaCG5ErzT9i21wBJjtkrqUD0PDU4SxoZlnmPy+wYbHUVPXk 49cyFv17g/GqNA+yLUNryM5/E3mB58x8PHRkmNEz5E6dd9juCKd1rK1i1v98kBbu Lc7IS7L3PxJyuvzRd7RbkZuQyU4M3/6rdDIA5t1BYjxvIPfVqUgTF6AsRXIMpL9I YCUFCT53DyHB1k0QaJtGjaKwZEQx1/Fq1LNexApZkBty3vGlDM2qoaWCQh/k+EpW 9bOc5rnafep9JbRCkSGcF7YGfsYJ6/Adg5Cm9gStzne2TAJcwyAnrtJSGgwE4ID7 XHGbsQigtOQkLJiqN5rXkTO01DgG6vQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:23 2025 by rpki-client