$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8324f618-b623-32b0-982c-4a8ee1d9b7bc.roa File: 8324f618-b623-32b0-982c-4a8ee1d9b7bc.roa (raw, json) Hash identifier: XT39aptrz9Xg2Z9V1CpDrlhRXh+jwWDHxKgFdTdw1sU= Subject key identifier: 46:54:7F:DA:99:B4:CC:74:62:0E:AE:A7:CE:D1:B7:63:FF:55:AF:D4 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D64128CAE78C9E75608F89E8 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8324f618-b623-32b0-982c-4a8ee1d9b7bc.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:28:ca:e7:8c:9e:75:60:8f:89:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=cff2adc8-ca78-4783-8a6e-020b8ff090ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:9f:51:47:2f:32:2f:b7:f7:82:11:3e:d8: f8:44:29:48:45:9c:8c:3d:eb:4e:eb:e4:14:d9:67: a7:09:78:1a:73:49:e3:3e:3f:eb:8b:5c:17:4c:f1: 53:cd:7c:7e:78:6f:cb:da:b8:fd:0d:49:73:08:bd: e0:4b:45:4b:c9:64:00:ab:22:3b:14:8b:db:cd:0b: 8d:36:ef:3f:e1:62:65:80:c6:f5:ad:be:a2:9a:ba: 25:ad:2f:0e:d4:06:54:e9:58:86:cc:56:c8:dd:b2: ac:5c:47:e8:9f:11:ab:97:80:ad:ee:c3:c1:d7:ce: 37:49:95:bf:89:1f:24:6f:b4:d8:d5:b3:5f:57:26: 6b:14:18:6e:88:5f:03:15:b3:37:a3:e4:76:c8:e2: 10:43:99:7a:62:b3:37:57:b6:58:c8:af:52:1d:0b: 10:41:69:91:2c:32:ef:e9:f5:da:af:b6:93:3a:ec: 20:ac:23:29:b5:37:53:dd:d6:81:38:c6:0b:d8:62: b0:11:16:4b:86:05:1d:0e:a6:1e:74:07:28:18:6d: 82:45:5b:68:a0:58:2f:ce:eb:73:5d:1e:fb:ae:f9: 6c:47:05:d0:e7:9e:63:b8:c9:82:47:a3:c5:76:7b: 32:09:53:ad:c5:1a:4c:d9:1e:db:cd:ef:33:bb:90: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:54:7F:DA:99:B4:CC:74:62:0E:AE:A7:CE:D1:B7:63:FF:55:AF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8324f618-b623-32b0-982c-4a8ee1d9b7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4f:a8:59:76:b5:de:b6:42:96:95:ed:88:2c:81:e7:c2:53: 04:86:64:1b:fc:6a:51:f8:e8:33:65:e1:19:3e:0d:13:30:19: 7d:de:b6:30:6d:4b:d4:92:1b:e5:0a:96:88:b6:d0:aa:cf:25: 82:5f:65:8b:c6:d6:90:50:6f:c7:98:38:c8:9d:db:b9:92:79: 24:2f:22:b9:4f:09:37:33:3b:3f:91:0e:fd:13:7d:23:c8:61: 48:a9:02:b1:54:75:f1:f2:19:a5:8d:d8:61:fd:ae:0f:66:b7: f7:2b:17:12:d8:a2:b0:35:12:e3:cc:e9:34:5e:a5:d5:56:45: 0e:5e:1f:01:18:1c:b8:15:4a:9b:cc:62:bf:13:70:26:26:35: b8:69:98:c7:dd:25:5f:b6:20:08:9d:77:49:fc:7b:33:b8:e0: 40:be:b3:56:0f:fa:cb:d7:9a:2f:b7:c1:da:c6:1e:26:bb:f8: 51:51:ee:76:60:57:12:c3:87:b1:40:db:a4:d1:c4:7b:ad:5d: a6:28:86:7f:6a:5c:94:40:5d:43:0d:8c:99:6c:39:0c:43:9f: 15:a4:19:07:03:00:56:65:98:67:4a:89:48:2c:2c:4f:4f:69: 53:24:b7:88:34:90:87:c2:ad:1a:28:63:8e:80:12:f9:7d:92: 9f:de:4a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSjK54yedWCPiegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2ZmMmFkYzgtY2E3OC00NzgzLThhNmUtMDIwYjhmZjA5MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI+fUUcvMi+394IRPtj4RClIRZyMPetO6+QU 2WenCXgac0njPj/ri1wXTPFTzXx+eG/L2rj9DUlzCL3gS0VLyWQAqyI7FIvbzQuN Nu8/4WJlgMb1rb6imrolrS8O1AZU6ViGzFbI3bKsXEfonxGrl4Ct7sPB1843SZW/ iR8kb7TY1bNfVyZrFBhuiF8DFbM3o+R2yOIQQ5l6YrM3V7ZYyK9SHQsQQWmRLDLv 6fXar7aTOuwgrCMptTdT3daBOMYL2GKwERZLhgUdDqYedAcoGG2CRVtooFgvzutz XR77rvlsRwXQ555juMmCR6PFdnsyCVOtxRpM2R7bze8zu5BZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZUf9qZtMx0Yg6up87Rt2P/Va/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODMyNGY2MTgtYjYyMy0z MmIwLTk4MmMtNGE4ZWUxZDliN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtPqFl2td62QpaV7YgsgefCUwSGZBv8alH46DNl4Rk+DRMwGX3etjBt S9SSG+UKloi20KrPJYJfZYvG1pBQb8eYOMid27mSeSQvIrlPCTczOz+RDv0TfSPI YUipArFUdfHyGaWN2GH9rg9mt/crFxLYorA1EuPM6TRepdVWRQ5eHwEYHLgVSpvM Yr8TcCYmNbhpmMfdJV+2IAidd0n8ezO44EC+s1YP+svXmi+3wdrGHia7+FFR7nZg VxLDh7FA26TRxHutXaYohn9qXJRAXUMNjJlsOQxDnxWkGQcDAFZlmGdKiUgsLE9P aVMkt4g0kIfCrRooY46AEvl9kp/eSqw= -----END CERTIFICATE-----Generated at Sat Apr 5 23:20:40 2025 by rpki-client