$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/83c788b3-ca9c-3ca0-8047-f276282f63a7.roa File: 83c788b3-ca9c-3ca0-8047-f276282f63a7.roa (raw, json) Hash identifier: 7RDF1Z3tK/yeXY/Ctja2TFVwY1Be+tTZFD33mVbpHCw= Subject key identifier: 65:AB:53:85:3D:5B:AF:8F:6D:66:9D:5F:49:50:A0:E8:98:E5:A9:12 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164FCCB77E5571D27855780 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/83c788b3-ca9c-3ca0-8047-f276282f63a7.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 172.252.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fc:cb:77:e5:57:1d:27:85:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=23a69963-79e9-45e8-84c7-4f1079e100c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:23:e8:03:23:53:cd:83:d2:54:f1:67:77: d1:5d:97:ac:23:20:f1:95:c9:45:3f:51:39:1f:fc: 21:c9:90:d3:a5:f0:9a:a1:d0:1f:e2:dd:22:44:36: 84:4b:db:a2:ad:1e:a2:80:fc:38:69:1e:7f:4a:e2: ed:c8:e5:e7:d5:0d:6d:73:9d:6d:d8:5c:6a:98:7d: d9:04:ee:b5:03:c7:c4:0b:e9:70:dc:08:c2:a8:ed: c2:f2:15:a3:93:e4:49:6e:1e:85:97:bd:54:14:75: a8:44:23:80:f9:87:ea:0a:03:a6:5a:f5:5e:a0:56: 18:70:13:9d:9b:5c:44:df:bd:20:8b:00:d3:ce:15: b6:05:11:25:eb:1b:4c:54:8a:59:a7:e8:a7:10:60: a9:70:3c:a8:29:59:9b:70:ab:a9:25:1e:9a:61:38: 84:30:14:e0:a1:d0:86:ee:fb:0d:b7:f4:73:35:ba: 08:04:11:ec:db:77:7c:87:a5:51:bb:5c:3c:f4:44: 57:e2:c1:fb:3e:cc:ef:d4:cc:0b:99:70:98:d9:4d: f9:db:08:47:90:5c:3b:ea:c3:cb:98:e4:74:fd:1c: 94:dc:57:64:82:93:fa:a7:79:95:f7:95:35:a5:c0: 70:65:30:68:e1:65:25:ee:ad:bb:03:61:91:19:b9: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:53:85:3D:5B:AF:8F:6D:66:9D:5F:49:50:A0:E8:98:E5:A9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/83c788b3-ca9c-3ca0-8047-f276282f63a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:31:92:9a:24:01:15:b0:ef:40:62:90:85:fb:7d:8b:e5:54: ed:7a:52:7b:32:11:2e:bd:ce:b9:ac:dd:9b:d0:8b:4a:15:ed: 93:49:bd:73:d0:9e:e2:39:4d:95:3c:32:29:57:f2:93:9d:25: 52:18:cb:14:f5:5d:50:45:d7:20:e8:0c:96:86:09:ec:0e:1f: 08:0d:cc:c8:a6:a5:37:12:65:93:71:bf:a4:ac:5b:90:c0:14: e6:f7:47:d0:12:f7:6f:d5:52:02:f8:43:15:a9:f3:f8:18:b3: a9:2d:41:33:b9:a4:9c:8f:94:2e:7e:54:08:23:e6:2e:58:aa: c7:cf:6f:32:af:13:3c:45:95:a6:e9:b6:41:45:cc:e7:07:41: 95:ec:fd:28:54:39:b9:bb:33:29:ce:62:3b:7c:0a:f8:50:42: 6f:c1:ac:1e:e2:2e:a7:7e:cc:d5:e8:0a:c6:d7:a9:ed:ef:4e: c3:27:be:59:ca:cb:91:2d:0e:6d:ea:53:54:80:3e:fe:42:2d: 98:e8:a5:43:21:9e:54:f7:a0:51:31:1f:25:40:0e:b6:05:81: 27:20:d7:d6:fc:f0:79:36:5c:3c:4e:a1:05:53:7d:8b:32:e6: 83:31:ef:e9:d2:7b:f0:55:82:67:a9:99:40:e1:2b:87:c9:67: 20:d4:7a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPzLd+VXHSeFV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjNhNjk5NjMtNzllOS00NWU4LTg0YzctNGYxMDc5ZTEwMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsncj6AMjU82D0lTxZ3fRXZesIyDxlclFP1E5 H/whyZDTpfCaodAf4t0iRDaES9uirR6igPw4aR5/SuLtyOXn1Q1tc51t2FxqmH3Z BO61A8fEC+lw3AjCqO3C8hWjk+RJbh6Fl71UFHWoRCOA+YfqCgOmWvVeoFYYcBOd m1xE370giwDTzhW2BREl6xtMVIpZp+inEGCpcDyoKVmbcKupJR6aYTiEMBTgodCG 7vsNt/RzNboIBBHs23d8h6VRu1w89ERX4sH7Pszv1MwLmXCY2U352whHkFw76sPL mOR0/RyU3FdkgpP6p3mV95U1pcBwZTBo4WUl7q27A2GRGbmT7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWrU4U9W6+PbWadX0lQoOiY5akSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODNjNzg4YjMtY2E5Yy0z Y2EwLTgwNDctZjI3NjI4MmY2M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPy5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoxkpokARWw70BikIX7fYvlVO16UnsyES69zrms3ZvQi0oV7ZNJvXPQ nuI5TZU8MilX8pOdJVIYyxT1XVBF1yDoDJaGCewOHwgNzMimpTcSZZNxv6SsW5DA FOb3R9AS92/VUgL4QxWp8/gYs6ktQTO5pJyPlC5+VAgj5i5YqsfPbzKvEzxFlabp tkFFzOcHQZXs/ShUObm7MynOYjt8CvhQQm/BrB7iLqd+zNXoCsbXqe3vTsMnvlnK y5EtDm3qU1SAPv5CLZjopUMhnlT3oFExHyVADrYFgScg19b88Hk2XDxOoQVTfYsy 5oMx7+nSe/BVgmepmUDhK4fJZyDUej0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:09 2025 by rpki-client