$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a33a404d-dc8b-348a-9902-d4a7596716e8.roa File: a33a404d-dc8b-348a-9902-d4a7596716e8.roa (raw, json) Hash identifier: hsbZqoN8UulABRQnTqQJkF0mRKL4vVHj99qno616R5k= Subject key identifier: 27:71:8B:28:9F:E6:C0:7E:78:E1:EC:B8:80:48:3E:A3:16:10:FA:76 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F85F486372CAA004948F1550 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a33a404d-dc8b-348a-9902-d4a7596716e8.roa Signing time: Sun 25 May 2025 12:06:17 +0000 ROA not before: Sun 25 May 2025 12:06:17 +0000 ROA not after: Sat 23 Aug 2025 12:06:17 +0000 asID: 214238 IP address blocks: 172.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:5f:48:63:72:ca:a0:04:94:8f:15:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 12:06:17 2025 GMT Not After : Aug 23 12:06:17 2025 GMT Subject: CN=15f943d1-ebd8-4c3d-ac57-fa60299c8036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:4f:4f:45:c7:f3:5a:2e:27:08:83:eb:6f: 0e:13:e2:80:77:e8:17:1a:bd:ce:97:30:ab:db:bd: f7:2f:18:ce:62:69:0e:f8:bc:8f:7c:3c:17:04:2a: 04:5a:fd:72:a4:5f:84:c7:1c:53:a3:da:37:68:e9: 2f:cd:5d:0a:31:b2:79:1b:44:ba:1f:ad:68:d0:93: b2:ba:3f:3e:29:7a:5a:0c:35:9a:f2:84:0e:5c:49: df:59:af:f8:50:13:55:db:b7:9f:00:38:ae:ac:9c: 28:26:20:e8:12:db:fe:f5:64:96:3e:59:87:7f:54: fd:78:28:ca:a5:7c:c6:90:f3:b8:fa:01:fd:9c:4b: 98:a2:d1:21:c6:aa:78:db:cf:82:72:8a:a3:2a:36: dd:04:42:ff:f5:d3:0b:24:e4:39:ca:2a:aa:2f:10: 96:da:0c:0b:63:04:92:a3:a4:00:2c:24:a3:97:34: a7:02:c6:52:b9:7a:48:4c:9d:eb:a0:ec:8d:4b:d9: a1:10:c0:2a:ac:1c:ab:a7:c8:5b:4c:92:57:66:97: 88:5e:94:3e:be:81:7f:e1:e4:a9:e4:00:cc:30:7f: f7:a6:1e:ac:ca:07:09:7f:7e:90:c3:02:fe:26:7e: b9:c2:9b:e9:f6:70:ac:3f:c7:55:2f:62:89:28:be: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:71:8B:28:9F:E6:C0:7E:78:E1:EC:B8:80:48:3E:A3:16:10:FA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a33a404d-dc8b-348a-9902-d4a7596716e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f9:18:bb:c4:e9:2e:a8:7a:f6:22:b9:af:c5:42:1c:89:7f: 79:42:54:8b:10:3f:6c:5f:26:02:15:44:f4:a6:a8:9c:f4:66: 21:bb:cf:61:6d:2b:a4:50:aa:7c:d6:c8:6f:de:f8:f0:77:22: c2:3a:d6:70:a4:53:68:10:4e:ca:d7:13:61:97:71:62:1c:d8: 1b:33:11:2d:eb:18:85:a8:11:c8:90:fb:eb:31:a8:9c:18:c7: fa:c7:5a:ea:4b:64:90:aa:60:d3:00:79:90:74:2c:59:20:0c: 27:82:63:c4:b5:bf:51:ec:12:a9:69:d0:c1:ea:08:b5:0b:c3: a2:83:1b:e0:2b:b6:2d:60:f0:e6:08:b2:9f:ed:1a:69:57:7e: 53:cf:3f:d8:9b:af:e1:bd:c7:40:43:5e:16:bc:2c:a6:80:4c: 0c:15:92:0c:bf:7c:0b:c2:a8:75:d8:16:d8:86:5a:cf:0f:74: 33:80:c8:1f:06:30:1e:6a:ab:0d:41:4c:6d:ea:25:b5:b1:32: a5:eb:4f:d0:c6:b5:72:b7:1b:f6:d6:cc:73:d9:d3:03:c5:3b: b0:85:2c:2e:48:72:9f:83:19:af:62:e4:67:f0:06:2f:78:ad: 4a:15:d3:18:a7:48:61:d8:af:8d:6c:a6:b1:33:26:f3:58:dd: a5:ef:96:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4X0hjcsqgBJSPFVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyNTEyMDYxN1oXDTI1MDgyMzEyMDYxN1owLzEtMCsGA1UEAxMk MTVmOTQzZDEtZWJkOC00YzNkLWFjNTctZmE2MDI5OWM4MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5lPT0XH81ouJwiD628OE+KAd+gXGr3OlzCr 2733LxjOYmkO+LyPfDwXBCoEWv1ypF+ExxxTo9o3aOkvzV0KMbJ5G0S6H61o0JOy uj8+KXpaDDWa8oQOXEnfWa/4UBNV27efADiurJwoJiDoEtv+9WSWPlmHf1T9eCjK pXzGkPO4+gH9nEuYotEhxqp428+CcoqjKjbdBEL/9dMLJOQ5yiqqLxCW2gwLYwSS o6QALCSjlzSnAsZSuXpITJ3roOyNS9mhEMAqrByrp8hbTJJXZpeIXpQ+voF/4eSp 5ADMMH/3ph6sygcJf36QwwL+Jn65wpvp9nCsP8dVL2KJKL4O9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdxiyif5sB+eOHsuIBIPqMWEPp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTMzYTQwNGQtZGM4Yi0z NDhhLTk5MDItZDRhNzU5NjcxNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv5GLvE6S6oevYiua/FQhyJf3lCVIsQP2xfJgIVRPSmqJz0ZiG7z2Ft K6RQqnzWyG/e+PB3IsI61nCkU2gQTsrXE2GXcWIc2BszES3rGIWoEciQ++sxqJwY x/rHWupLZJCqYNMAeZB0LFkgDCeCY8S1v1HsEqlp0MHqCLULw6KDG+Arti1g8OYI sp/tGmlXflPPP9ibr+G9x0BDXha8LKaATAwVkgy/fAvCqHXYFtiGWs8PdDOAyB8G MB5qqw1BTG3qJbWxMqXrT9DGtXK3G/bWzHPZ0wPFO7CFLC5Icp+DGa9i5GfwBi94 rUoV0xinSGHYr41sprEzJvNY3aXvljM= -----END CERTIFICATE-----Generated at Fri Jun 6 19:43:43 2025 by rpki-client