$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa File: 6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa (raw, json) Hash identifier: DU+cp3tUr9VjDJnQtMgRg7MW9G7VDo65KU5v0AWA0BE= Subject key identifier: 20:4E:95:B4:D8:52:11:BA:FF:45:2A:D8:81:7B:43:2B:E1:32:E2:05 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848A1B70A2E84F5FBE59A3C9FC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa Signing time: Wed 22 Jan 2025 18:20:50 +0000 ROA not before: Wed 22 Jan 2025 18:20:50 +0000 ROA not after: Tue 22 Apr 2025 17:20:50 +0000 asID: 400536 IP address blocks: 172.120.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:b7:0a:2e:84:f5:fb:e5:9a:3c:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 22 18:20:50 2025 GMT Not After : Apr 22 17:20:50 2025 GMT Subject: CN=e7eb3575-cba6-44a2-b581-bd1c907e50c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:46:fc:e2:66:60:d6:0e:da:54:62:06:9e: 77:cc:fc:9a:f7:a1:0b:d6:b0:cc:6b:4b:31:3b:cb: 9d:72:1a:60:e2:5e:a2:21:67:d1:bf:96:f0:ff:25: b2:33:ed:af:8b:10:4f:44:e6:6a:32:35:16:50:42: 55:8c:6b:65:63:d6:06:07:84:54:21:80:de:7d:17: b0:21:a3:7e:19:d0:83:24:75:c4:e5:2a:b9:b7:47: bd:59:13:f3:33:a9:33:ae:be:39:b1:b6:ee:4c:a1: 58:ca:c9:b5:34:bb:af:8b:66:a6:6f:47:1a:d6:0a: 0d:1a:a9:7f:08:76:74:ba:78:f4:84:8a:bb:06:0b: 8e:31:9e:3a:29:96:21:e8:8e:64:70:7d:6d:df:44: e1:92:09:d5:99:c1:5c:6e:53:d9:b1:9d:16:ce:ca: cf:a8:e9:4b:dc:a7:d3:eb:2f:5f:44:50:1f:88:45: 95:e4:b7:89:2c:ca:b1:cb:75:25:2c:77:c5:e4:70: c1:20:78:9e:f6:da:83:af:02:41:04:ce:35:a5:a6: b6:77:f6:30:f8:5c:68:67:bf:d8:bd:33:94:4f:61: a7:f2:c8:87:3b:06:b6:4a:39:ed:52:76:cd:68:56: 55:9a:17:e2:25:95:a7:82:dc:e1:b1:9b:ab:a4:f3: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:95:B4:D8:52:11:BA:FF:45:2A:D8:81:7B:43:2B:E1:32:E2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:14:1b:53:1c:fc:c6:bc:d3:b8:fe:46:0b:ec:b6:9e:11:52: 3a:5a:34:62:86:e2:99:1c:0b:5b:d4:4b:a9:7f:77:07:7c:bc: 55:8b:3f:7a:dc:fc:09:c2:33:2c:02:b0:53:90:d2:d2:d3:91: 3a:56:9e:33:d6:24:38:b0:85:48:f4:19:6f:e3:00:69:d1:ba: ea:d2:be:cd:97:02:f6:b8:e7:84:a1:b3:28:6c:8f:55:e8:51: 75:09:36:71:7b:1d:64:5f:fe:d7:23:72:a4:2d:40:1f:07:7a: 10:be:04:98:52:16:53:96:54:94:91:81:46:fc:76:69:f3:b6: d7:e0:29:54:ab:95:82:6a:6c:9b:02:7b:9d:ba:5d:02:9f:29: 28:7e:94:4e:c1:f1:b4:b5:ad:8b:8d:4c:70:bf:48:78:c3:48: ab:a6:90:ef:81:31:1c:ec:3d:f0:7a:6a:e4:50:13:6e:b5:3c: a4:be:44:62:37:f4:cb:73:bc:26:d7:e2:c0:fe:3a:88:58:75: 21:92:a2:18:25:f6:ed:35:cb:86:1e:e6:36:7d:1c:e7:ed:ae: 5d:d2:9b:5c:1e:9a:ae:83:8f:fb:b5:bb:83:86:c3:15:25:f3: b6:d3:35:eb:9f:b9:53:fb:03:8f:ec:15:39:fb:9e:c7:be:93: d7:e4:25:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihtwouhPX75Zo8n8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyMjE4MjA1MFoXDTI1MDQyMjE3MjA1MFowLzEtMCsGA1UEAxMk ZTdlYjM1NzUtY2JhNi00NGEyLWI1ODEtYmQxYzkwN2U1MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomFG/OJmYNYO2lRiBp53zPya96EL1rDMa0sx O8udchpg4l6iIWfRv5bw/yWyM+2vixBPROZqMjUWUEJVjGtlY9YGB4RUIYDefRew IaN+GdCDJHXE5Sq5t0e9WRPzM6kzrr45sbbuTKFYysm1NLuvi2amb0ca1goNGql/ CHZ0unj0hIq7BguOMZ46KZYh6I5kcH1t30ThkgnVmcFcblPZsZ0WzsrPqOlL3KfT 6y9fRFAfiEWV5LeJLMqxy3UlLHfF5HDBIHie9tqDrwJBBM41paa2d/Yw+FxoZ7/Y vTOUT2Gn8siHOwa2SjntUnbNaFZVmhfiJZWngtzhsZurpPO6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBOlbTYUhG6/0Uq2IF7QyvhMuIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjU1N2NmYTYtNWY0Ni0z ODNkLThmMjAtOWY3NmQwZjlmZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEUG1Mc/Ma807j+Rgvstp4RUjpaNGKG4pkcC1vUS6l/dwd8vFWLP3rc /AnCMywCsFOQ0tLTkTpWnjPWJDiwhUj0GW/jAGnRuurSvs2XAva454Shsyhsj1Xo UXUJNnF7HWRf/tcjcqQtQB8HehC+BJhSFlOWVJSRgUb8dmnzttfgKVSrlYJqbJsC e526XQKfKSh+lE7B8bS1rYuNTHC/SHjDSKumkO+BMRzsPfB6auRQE261PKS+RGI3 9MtzvCbX4sD+OohYdSGSohgl9u01y4Ye5jZ9HOftrl3Sm1wemq6Dj/u1u4OGwxUl 87bTNeufuVP7A4/sFTn7nse+k9fkJUQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:32:36 2025 by rpki-client