$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/653c1188-3d47-30eb-a35e-e02f1c442d38.roa File: 653c1188-3d47-30eb-a35e-e02f1c442d38.roa (raw, json) Hash identifier: kQTD42N/USGe/aUYdGLJtGUkU3jciMzqUQCZZmk820w= Subject key identifier: D6:2E:3D:26:CC:A0:50:D1:46:A0:B2:2F:A2:92:D2:F9:EA:2B:42:F3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164FA9C84F007D6A2760EE0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/653c1188-3d47-30eb-a35e-e02f1c442d38.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 172.252.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fa:9c:84:f0:07:d6:a2:76:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=ee4b0303-ca1c-4cb8-aed1-c766bfa4b247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d8:5e:b3:5d:f5:8d:c0:7f:43:a5:11:8b:ba: 31:96:80:a4:72:d5:69:af:cf:45:67:af:63:80:4a: 86:c6:23:83:cd:a5:98:c3:a5:7a:d6:81:87:b0:dc: e7:09:0a:15:01:f5:3e:f3:11:7e:63:e2:02:f0:b7: 6b:ea:4a:68:15:49:66:81:0a:4e:e0:fc:de:87:79: 8b:ab:e8:54:ed:0c:45:30:29:8f:1f:5f:31:f2:91: dc:d1:9e:3e:ff:9e:a2:2d:75:11:05:69:30:f7:25: 4e:f2:a7:1f:74:12:c4:80:b0:fc:a3:fd:c6:cd:94: 43:9c:e7:b8:cb:dd:8e:f2:3d:29:6c:c1:32:fd:da: 60:58:3a:84:10:2c:73:06:16:4b:58:e7:de:8d:14: b9:62:6c:90:60:39:6c:02:70:77:9a:0b:02:54:e3: 47:0b:e4:97:ed:c5:40:fb:cb:e3:de:62:cc:8b:12: 0d:18:c4:06:82:b1:8e:6e:6e:b1:4e:e2:be:1c:fa: dd:04:bf:42:48:19:64:e3:32:52:af:03:44:c1:aa: 7b:f1:9e:f8:40:ed:87:9d:f7:80:c9:ca:6e:23:b1: 4d:01:ce:78:de:08:80:23:11:8c:5d:c0:68:28:26: 90:44:b8:53:86:42:5d:f6:42:c0:96:73:17:a9:ea: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:3D:26:CC:A0:50:D1:46:A0:B2:2F:A2:92:D2:F9:EA:2B:42:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/653c1188-3d47-30eb-a35e-e02f1c442d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b4:57:bd:a1:a7:c7:05:0b:15:55:5f:25:c0:ad:45:16:35: bc:aa:bd:e2:1c:c3:2d:e8:b2:6d:3e:fe:0c:3d:97:25:e1:96: 48:9e:49:d6:16:f2:6f:d8:7d:bc:00:98:ec:49:a6:21:a0:c6: 91:b6:6b:d6:86:2a:09:0b:7a:e5:3b:d9:7d:4e:42:62:91:ad: 47:ff:1b:89:11:f0:e3:dd:e1:5f:88:d1:8c:3d:25:4b:53:b5: 7e:74:ad:4e:b5:c7:6a:0e:4e:11:bf:5c:ad:ad:f7:48:65:ca: 0e:df:39:a9:e0:7e:0a:df:55:2a:c9:5f:3e:d6:14:5d:5e:67: 7f:13:13:4a:21:c8:04:19:6d:2e:93:32:22:35:75:66:e5:e7: 83:9d:08:fc:18:04:67:dd:a2:64:0e:59:dc:6c:db:f8:93:0e: c6:b9:4b:24:c9:c7:b5:e1:f4:c8:be:23:67:c9:5e:91:84:2c: 16:4b:42:29:f3:f1:77:f8:3f:e0:2c:d0:dd:3a:4c:57:16:17: 60:7d:8c:f5:37:cc:ce:da:9d:f4:87:2d:26:86:22:80:a6:cb: 1e:b7:13:b9:a3:69:62:bd:3f:90:9a:42:d3:d4:c2:08:bd:b5: b2:b9:e9:cd:e8:f4:03:8c:db:a7:5c:9c:6d:f8:6a:06:cd:49: 35:47:47:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPqchPAH1qJ2DuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZWU0YjAzMDMtY2ExYy00Y2I4LWFlZDEtYzc2NmJmYTRiMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhthes131jcB/Q6URi7oxloCkctVpr89FZ69j gEqGxiODzaWYw6V61oGHsNznCQoVAfU+8xF+Y+IC8Ldr6kpoFUlmgQpO4Pzeh3mL q+hU7QxFMCmPH18x8pHc0Z4+/56iLXURBWkw9yVO8qcfdBLEgLD8o/3GzZRDnOe4 y92O8j0pbMEy/dpgWDqEECxzBhZLWOfejRS5YmyQYDlsAnB3mgsCVONHC+SX7cVA +8vj3mLMixINGMQGgrGObm6xTuK+HPrdBL9CSBlk4zJSrwNEwap78Z74QO2HnfeA ycpuI7FNAc543giAIxGMXcBoKCaQRLhThkJd9kLAlnMXqeouJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYuPSbMoFDRRqCyL6KS0vnqK0LzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjUzYzExODgtM2Q0Ny0z MGViLWEzNWUtZTAyZjFjNDQyZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE60V72hp8cFCxVVXyXArUUWNbyqveIcwy3osm0+/gw9lyXhlkieSdYW 8m/YfbwAmOxJpiGgxpG2a9aGKgkLeuU72X1OQmKRrUf/G4kR8OPd4V+I0Yw9JUtT tX50rU61x2oOThG/XK2t90hlyg7fOangfgrfVSrJXz7WFF1eZ38TE0ohyAQZbS6T MiI1dWbl54OdCPwYBGfdomQOWdxs2/iTDsa5SyTJx7Xh9Mi+I2fJXpGELBZLQinz 8Xf4P+As0N06TFcWF2B9jPU3zM7anfSHLSaGIoCmyx63E7mjaWK9P5CaQtPUwgi9 tbK56c3o9AOM26dcnG34agbNSTVHR6Q= -----END CERTIFICATE-----Generated at Fri Jun 6 16:56:55 2025 by rpki-client