$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a38ff493-c767-3b20-972c-db3e7e9f6401.roa File: a38ff493-c767-3b20-972c-db3e7e9f6401.roa (raw, json) Hash identifier: iIgLniCAUVGrNB8HS7rqa+cWe98iz/bbU+2gZ8Jf5w8= Subject key identifier: EB:08:C0:FE:CB:D4:B3:13:4F:6E:FE:F1:46:C7:BF:9A:FE:DC:5D:64 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D641278E5AC856FC14317880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a38ff493-c767-3b20-972c-db3e7e9f6401.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:27:8e:5a:c8:56:fc:14:31:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=10ef75c0-f023-4bc2-8439-4115c3a41037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:fa:1c:08:54:02:d5:d0:68:40:6c:ab:4c: 70:32:53:27:03:46:48:08:c6:74:6c:7c:f0:8d:16: a6:fc:25:14:45:a8:6c:73:42:45:35:de:05:30:66: de:99:bc:d1:9e:83:70:c4:35:8c:6d:b2:f8:f4:43: a6:77:89:80:1e:9e:90:27:d0:ea:d1:51:69:29:54: 74:f1:1f:d7:18:36:7d:2c:03:e1:18:77:45:6f:41: 4e:11:c7:88:60:01:a9:54:4b:fe:d8:27:89:8e:8a: 15:b2:6d:99:39:6d:46:6b:cc:82:d2:b2:43:07:f9: 2e:45:74:86:39:d4:4d:dd:e3:af:47:93:00:9f:7c: 0f:1c:63:41:22:85:d7:ef:20:7d:22:f6:f7:5d:d3: 1b:b9:b7:9b:7c:c9:13:ce:0c:12:10:a4:34:94:73: 84:f4:a3:a8:ef:fe:b3:89:21:81:b6:76:60:32:c5: a6:a5:83:55:2b:a0:e7:5d:05:be:f0:e5:e4:f1:0a: 36:23:ae:bb:be:16:8f:bc:c3:e2:e2:b5:c4:d3:e9: 04:7e:28:6c:c2:d3:8d:51:cd:02:08:c9:e8:b1:c0: 6a:4d:e3:1a:32:22:9b:05:d7:57:8c:f1:8e:d7:98: 08:08:17:58:cd:68:82:a6:0a:b5:54:57:63:25:8a: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:08:C0:FE:CB:D4:B3:13:4F:6E:FE:F1:46:C7:BF:9A:FE:DC:5D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a38ff493-c767-3b20-972c-db3e7e9f6401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:15:be:b3:1f:05:a5:f2:fc:a8:2b:97:81:87:6d:66:a1:2b: bc:10:35:5e:ae:11:54:22:c7:75:4d:9f:86:e9:e2:63:69:e5: b9:b2:35:36:e5:e3:8a:da:a0:2e:9a:da:7c:8b:04:e8:6f:d4: 45:b9:67:cc:35:6c:04:07:eb:58:eb:ac:32:a5:26:01:53:ae: 14:4e:1c:b8:d3:47:b4:69:c9:dc:dd:35:4f:b9:c0:74:20:67: bb:54:70:9c:4b:8b:d7:8f:09:3a:41:27:17:31:a2:8d:a0:d9: 33:87:b8:74:53:32:32:0c:6e:72:79:1f:de:14:ca:16:d0:ae: c0:d7:f3:50:7d:f4:e7:a5:65:d7:59:df:79:0e:8b:e1:c3:0b: 27:0d:90:78:e1:b5:41:96:cd:fb:14:0b:3e:2e:17:1d:76:8a: 83:8d:8a:f4:a2:a2:f1:df:d3:ac:32:49:26:1f:6d:ac:a9:a0: 60:6e:dd:b7:e7:bf:4f:62:c2:67:83:66:c6:2c:0f:c4:2c:e7: a1:d6:e2:0b:77:4d:0b:9a:38:45:b2:62:7f:26:88:ac:9e:7b: 04:e3:87:0b:c2:11:35:36:c1:1f:d9:37:cd:e7:54:14:ac:1a: 79:34:71:d1:d9:28:88:88:4c:b6:c5:62:86:74:c6:aa:3a:a0: 7b:dd:5f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSeOWshW/BQxeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTBlZjc1YzAtZjAyMy00YmMyLTg0MzktNDExNWMzYTQxMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbv6HAhUAtXQaEBsq0xwMlMnA0ZICMZ0bHzw jRam/CUURahsc0JFNd4FMGbembzRnoNwxDWMbbL49EOmd4mAHp6QJ9Dq0VFpKVR0 8R/XGDZ9LAPhGHdFb0FOEceIYAGpVEv+2CeJjooVsm2ZOW1Ga8yC0rJDB/kuRXSG OdRN3eOvR5MAn3wPHGNBIoXX7yB9Ivb3XdMbubebfMkTzgwSEKQ0lHOE9KOo7/6z iSGBtnZgMsWmpYNVK6DnXQW+8OXk8Qo2I667vhaPvMPi4rXE0+kEfihswtONUc0C CMnoscBqTeMaMiKbBddXjPGO15gICBdYzWiCpgq1VFdjJYpPowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsIwP7L1LMTT27+8UbHv5r+3F1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTM4ZmY0OTMtYzc2Ny0z YjIwLTk3MmMtZGIzZTdlOWY2NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwVvrMfBaXy/Kgrl4GHbWahK7wQNV6uEVQix3VNn4bp4mNp5bmyNTbl 44raoC6a2nyLBOhv1EW5Z8w1bAQH61jrrDKlJgFTrhROHLjTR7RpydzdNU+5wHQg Z7tUcJxLi9ePCTpBJxcxoo2g2TOHuHRTMjIMbnJ5H94UyhbQrsDX81B99OelZddZ 33kOi+HDCycNkHjhtUGWzfsUCz4uFx12ioONivSiovHf06wySSYfbaypoGBu3bfn v09iwmeDZsYsD8Qs56HW4gt3TQuaOEWyYn8miKyeewTjhwvCETU2wR/ZN83nVBSs Gnk0cdHZKIiITLbFYoZ0xqo6oHvdX6k= -----END CERTIFICATE-----Generated at Sat Apr 5 22:32:21 2025 by rpki-client