$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa File: a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa (raw, json) Hash identifier: mMqFlQYf6QWYEBLNtrbPjrBsGxuizh2DW5pnC+da7uA= Subject key identifier: FC:7A:05:88:29:62:3E:04:DA:19:F8:7D:76:B2:D9:EC:53:D0:60:2F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848FFC653C14715B17996E98380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa Signing time: Tue 25 Feb 2025 10:57:37 +0000 ROA not before: Tue 25 Feb 2025 10:57:37 +0000 ROA not after: Mon 26 May 2025 09:57:37 +0000 asID: 400536 IP address blocks: 172.120.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:c6:53:c1:47:15:b1:79:96:e9:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 25 10:57:37 2025 GMT Not After : May 26 09:57:37 2025 GMT Subject: CN=cbb1b48d-f1fc-4fb2-876b-729173ec20e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:c2:d4:ec:05:11:f8:e8:05:2b:59:37:4f: 93:6f:84:0e:92:0e:ac:61:9b:cd:12:27:c5:4e:8e: 39:d5:44:d2:bf:a9:8e:c7:6a:a0:4c:03:22:ef:45: b5:fa:92:0e:9f:3a:f5:a7:80:52:45:2b:db:35:b5: 83:21:03:f3:e0:53:15:b8:bc:32:a4:11:c0:70:da: 91:cd:e5:c1:5f:66:0b:df:d4:85:a7:2a:c3:01:42: 02:30:05:4e:9e:6c:16:b2:c9:6a:6d:e1:54:96:cc: 74:b5:57:67:26:73:7c:58:b9:17:8e:2d:b4:19:8e: 0d:20:33:ee:f3:05:dc:e6:3c:ff:24:98:70:5b:ed: 97:fc:7a:88:ce:db:6f:38:8e:7e:22:1c:e8:3a:2e: 9f:54:75:59:ce:5b:ab:1f:a1:92:83:5c:73:e2:82: e1:98:f9:bb:07:85:f8:92:82:22:cb:a7:45:02:ef: 90:58:52:3d:a9:56:93:c2:fd:d0:5c:7d:7a:66:d5: 32:bb:6c:c8:94:db:4f:52:0f:7a:22:00:7a:95:43: 9d:37:d2:9b:96:e7:26:0e:e2:40:d6:7e:91:b8:f4: 27:ab:67:c0:e5:31:b6:fc:80:4b:be:b5:51:e8:3e: e0:af:9d:ef:bf:30:9b:ec:3d:6d:13:3c:8e:20:a0: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7A:05:88:29:62:3E:04:DA:19:F8:7D:76:B2:D9:EC:53:D0:60:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fc:98:8b:3d:b8:2a:ee:54:88:8a:f8:25:ef:65:9b:8b:92: b6:15:fb:6c:ee:6a:51:88:88:98:99:e4:a1:ad:9f:3e:21:36: 7e:29:74:ea:a6:d8:d7:d7:52:65:08:bf:34:be:e9:fd:8e:30: fb:f3:44:c2:a7:27:40:95:3a:d7:e6:97:2f:a6:c7:f4:55:aa: 4b:60:05:ca:85:75:6c:36:7b:04:74:ff:3f:0d:ba:96:0e:42: 83:80:58:cc:a8:11:51:ec:e2:cd:3e:9e:21:89:e3:69:31:24: f2:0b:f2:f5:08:0d:51:43:38:a9:38:ba:37:9e:bc:2f:66:fc: 28:1c:2c:7d:b2:d7:f9:44:1c:08:ba:d8:6d:a6:c6:9c:a1:42: 91:37:84:c1:17:bf:cd:29:67:02:13:2c:dc:94:07:1f:d0:1c: 5a:29:b0:e5:f4:a8:ce:28:33:5b:e6:d5:98:52:6d:26:55:38: b1:85:3b:ad:46:bc:29:c1:97:33:b8:d1:d2:ce:10:b9:50:aa: 58:13:03:ec:12:0c:a2:ef:c7:39:13:a1:3c:eb:ff:4e:85:16: e7:94:ec:7f:fa:59:79:73:7c:db:8d:40:2b:db:00:20:aa:87: f4:0b:3b:ff:07:70:cd:f2:73:d1:ae:b0:9d:53:44:50:65:da: e0:2a:3f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/xlPBRxWxeZbpg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyNTEwNTczN1oXDTI1MDUyNjA5NTczN1owLzEtMCsGA1UEAxMk Y2JiMWI0OGQtZjFmYy00ZmIyLTg3NmItNzI5MTczZWMyMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZXC1OwFEfjoBStZN0+Tb4QOkg6sYZvNEifF To451UTSv6mOx2qgTAMi70W1+pIOnzr1p4BSRSvbNbWDIQPz4FMVuLwypBHAcNqR zeXBX2YL39SFpyrDAUICMAVOnmwWsslqbeFUlsx0tVdnJnN8WLkXji20GY4NIDPu 8wXc5jz/JJhwW+2X/HqIzttvOI5+IhzoOi6fVHVZzlurH6GSg1xz4oLhmPm7B4X4 koIiy6dFAu+QWFI9qVaTwv3QXH16ZtUyu2zIlNtPUg96IgB6lUOdN9KblucmDuJA 1n6RuPQnq2fA5TG2/IBLvrVR6D7gr53vvzCb7D1tEzyOIKBa7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx6BYgpYj4E2hn4fXay2exT0GAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTVlMTExYjYtYmY4OC0z YTFhLTgxMzUtZTRiNjE2MGU2NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz8mIs9uCruVIiK+CXvZZuLkrYV+2zualGIiJiZ5KGtnz4hNn4pdOqm 2NfXUmUIvzS+6f2OMPvzRMKnJ0CVOtfmly+mx/RVqktgBcqFdWw2ewR0/z8NupYO QoOAWMyoEVHs4s0+niGJ42kxJPIL8vUIDVFDOKk4ujeevC9m/CgcLH2y1/lEHAi6 2G2mxpyhQpE3hMEXv80pZwITLNyUBx/QHFopsOX0qM4oM1vm1ZhSbSZVOLGFO61G vCnBlzO40dLOELlQqlgTA+wSDKLvxzkToTzr/06FFueU7H/6WXlzfNuNQCvbACCq h/QLO/8HcM3yc9GusJ1TRFBl2uAqPyE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:39:41 2025 by rpki-client