$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7682e285-5b70-3d10-b69a-0edda3956fd5.roa File: 7682e285-5b70-3d10-b69a-0edda3956fd5.roa (raw, json) Hash identifier: qyhf11qCKmQSn1Mf3gchVO/imPdp3AK6PbLM78X9Iqo= Subject key identifier: 96:A7:B9:F0:24:28:9C:94:A6:80:18:6C:D8:6D:79:78:CD:8D:47:71 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849274C1F8145DD51A8090DC050 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7682e285-5b70-3d10-b69a-0edda3956fd5.roa Signing time: Tue 11 Mar 2025 14:43:44 +0000 ROA not before: Tue 11 Mar 2025 14:43:44 +0000 ROA not after: Mon 09 Jun 2025 14:43:44 +0000 asID: 215071 IP address blocks: 172.121.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:4c:1f:81:45:dd:51:a8:09:0d:c0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 11 14:43:44 2025 GMT Not After : Jun 9 14:43:44 2025 GMT Subject: CN=08c5faaf-a76a-4f08-b23e-ffb2e485c4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:e0:0f:42:30:2f:fb:89:a8:c5:a6:1d:47: d6:7e:76:0c:4e:b4:39:e2:1a:23:6a:0b:48:ff:34: 9d:26:19:f6:9a:67:8f:3e:c1:18:57:71:60:2f:0b: b9:a1:95:33:bd:22:d7:4b:dc:9e:72:1a:3b:58:52: 55:fc:08:43:c3:2d:29:48:81:d0:ba:6e:d7:02:78: d6:a6:7a:bf:b9:fd:1e:8f:c4:4a:ef:37:78:1e:35: 0b:24:77:73:0b:fb:7c:58:94:cc:e7:06:2f:21:01: cd:39:a2:94:fa:3a:0c:3a:b2:55:24:bb:5e:6e:97: ae:2e:69:74:83:91:92:d2:ae:a5:79:97:2a:e5:26: cb:ed:21:7c:3e:99:bc:cb:b8:15:89:be:cc:31:bf: 1a:c5:e7:ee:e7:3f:b9:e7:35:68:61:ed:c2:4b:a2: a0:67:5e:22:65:c9:b2:4d:46:cd:01:bc:2e:d7:c6: a7:ac:2e:15:4a:b3:7f:fb:f4:9c:d9:35:75:ef:5b: b2:90:60:aa:df:f4:f9:d1:98:d3:d3:e7:44:ff:de: 0f:85:14:ed:62:09:29:14:24:39:4c:39:ea:45:fa: 3e:61:06:de:a8:47:7d:13:36:0c:dc:6a:e4:24:79: 4e:dc:9a:7e:2f:83:0c:63:28:2a:ca:08:50:57:da: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A7:B9:F0:24:28:9C:94:A6:80:18:6C:D8:6D:79:78:CD:8D:47:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7682e285-5b70-3d10-b69a-0edda3956fd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3f:b5:d0:05:14:1f:cb:64:64:13:cf:a2:33:c5:b7:7f:d2: 70:69:1c:b7:34:eb:f1:09:de:14:d7:86:4b:e9:68:b8:80:ed: 50:1f:bd:ae:d9:2e:65:70:0e:ff:c8:6e:78:30:08:f5:1d:63: 8d:dc:7b:4e:9e:88:a8:1b:af:45:ea:09:93:f2:ed:ca:15:01: c0:ef:4d:ac:ad:58:78:f0:03:68:e7:03:f0:98:ec:41:d3:98: 12:94:71:0c:18:cb:51:f6:70:16:0c:d8:53:2c:66:76:71:f8: 2d:07:ec:ab:66:95:a8:12:5d:25:bc:be:3e:20:f9:45:ec:ee: 1c:a3:44:50:78:54:fb:bc:05:2e:92:2b:76:0c:d8:b7:4f:a7: ac:cd:67:02:f6:8d:bf:b9:cc:eb:00:9e:a4:2f:10:26:e3:86: 9b:32:2e:c1:cd:cf:74:17:91:8c:ee:31:78:bf:c8:71:91:59: c2:0e:a2:86:50:3f:c4:ef:32:1e:ee:c3:95:16:7e:71:f0:45: 01:1a:43:8f:a7:24:b0:16:82:5c:85:03:4d:d8:2c:04:ad:ed: fb:1b:f7:c2:1f:5f:2c:fb:58:91:57:63:0e:df:75:47:7b:1c: d2:99:4b:5b:bd:29:55:e3:99:84:88:d9:88:f8:f7:93:71:4d: b2:6d:d6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEknTB+BRd1RqAkNwFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMxMTE0NDM0NFoXDTI1MDYwOTE0NDM0NFowLzEtMCsGA1UEAxMk MDhjNWZhYWYtYTc2YS00ZjA4LWIyM2UtZmZiMmU0ODVjNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowXgD0IwL/uJqMWmHUfWfnYMTrQ54hojagtI /zSdJhn2mmePPsEYV3FgLwu5oZUzvSLXS9yecho7WFJV/AhDwy0pSIHQum7XAnjW pnq/uf0ej8RK7zd4HjULJHdzC/t8WJTM5wYvIQHNOaKU+joMOrJVJLtebpeuLml0 g5GS0q6leZcq5SbL7SF8Ppm8y7gVib7MMb8axefu5z+55zVoYe3CS6KgZ14iZcmy TUbNAbwu18anrC4VSrN/+/Sc2TV171uykGCq3/T50ZjT0+dE/94PhRTtYgkpFCQ5 TDnqRfo+YQbeqEd9EzYM3GrkJHlO3Jp+L4MMYygqyghQV9qOCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJanufAkKJyUpoAYbNhteXjNjUdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzY4MmUyODUtNWI3MC0z ZDEwLWI2OWEtMGVkZGEzOTU2ZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHm0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw/tdAFFB/LZGQTz6Izxbd/0nBpHLc06/EJ3hTXhkvpaLiA7VAfva7Z LmVwDv/IbngwCPUdY43ce06eiKgbr0XqCZPy7coVAcDvTaytWHjwA2jnA/CY7EHT mBKUcQwYy1H2cBYM2FMsZnZx+C0H7KtmlagSXSW8vj4g+UXs7hyjRFB4VPu8BS6S K3YM2LdPp6zNZwL2jb+5zOsAnqQvECbjhpsyLsHNz3QXkYzuMXi/yHGRWcIOooZQ P8TvMh7uw5UWfnHwRQEaQ4+nJLAWglyFA03YLASt7fsb98IfXyz7WJFXYw7fdUd7 HNKZS1u9KVXjmYSI2Yj495NxTbJt1gA= -----END CERTIFICATE-----Generated at Sun Apr 6 17:54:23 2025 by rpki-client