$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b20c8f96-7db9-3b4f-8ad4-cb2a2968adb4.roa File: b20c8f96-7db9-3b4f-8ad4-cb2a2968adb4.roa (raw, json) Hash identifier: 1kFRWQzhMyD40ePBFWRIJ50dDXAjKOLd/geO2O+ISRg= Subject key identifier: 36:46:7E:7E:C5:6F:F5:23:7F:6C:C9:8C:82:95:9C:8F:97:9E:52:2A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F861054838D032E00D994680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b20c8f96-7db9-3b4f-8ad4-cb2a2968adb4.roa Signing time: Sun 25 May 2025 12:09:47 +0000 ROA not before: Sun 25 May 2025 12:09:47 +0000 ROA not after: Sat 23 Aug 2025 12:09:47 +0000 asID: 214238 IP address blocks: 142.252.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:61:05:48:38:d0:32:e0:0d:99:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 12:09:47 2025 GMT Not After : Aug 23 12:09:47 2025 GMT Subject: CN=69c595cb-bf5e-4541-9b51-ca735d510e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:ec:b8:52:b0:3e:57:71:10:fd:17:08:82: e4:8d:d3:2a:35:d9:9b:95:60:ac:44:43:dc:2e:d3: cb:35:35:87:99:61:d4:3a:83:27:fb:ee:f1:52:9c: dd:62:44:98:b6:59:26:74:a5:70:2f:e0:38:cb:39: fc:19:9a:12:7b:00:21:76:aa:7e:21:bf:ee:30:41: f1:d8:06:ee:cd:b8:3a:7a:38:f0:8a:8b:23:76:bd: 7f:30:f2:57:a6:ba:30:9a:bc:44:4c:63:4a:bb:eb: 59:ef:45:33:66:b6:03:54:f5:5a:24:99:2b:e0:e0: 3f:e7:26:5a:c2:ce:b8:77:6b:08:a1:73:88:a1:40: f7:9a:dc:b1:32:77:1b:71:63:10:dc:bb:17:dd:3d: 83:ff:91:15:ab:70:81:d1:01:3d:1b:56:24:58:05: 1e:15:90:ff:52:30:9c:b6:6f:5d:34:5e:0c:3b:72: 76:64:ac:e0:c4:64:fa:d2:f2:64:ad:f5:d5:af:23: 62:ae:66:3f:09:03:8b:ab:0b:f3:60:83:4e:e8:fa: fe:4a:7a:7b:55:37:6a:41:14:cb:57:0b:2a:86:b7: ce:3b:b3:83:8d:b9:43:82:b0:93:01:68:bf:f9:aa: 63:1c:d0:13:0a:d1:9d:7a:8c:23:04:36:a5:16:bd: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:46:7E:7E:C5:6F:F5:23:7F:6C:C9:8C:82:95:9C:8F:97:9E:52:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b20c8f96-7db9-3b4f-8ad4-cb2a2968adb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:27:08:49:54:47:fe:05:87:18:b2:b1:f2:bb:be:25:d1:a0: 99:df:20:b3:37:58:a6:08:ac:07:29:a2:f7:20:70:28:6c:ad: 59:18:89:ad:f1:8d:11:1f:15:aa:e0:44:d4:f7:35:ee:a9:6e: dd:bd:ab:aa:64:d2:9f:96:e8:f8:63:e3:6f:05:a9:05:8d:f9: 45:33:90:85:65:5d:ff:7e:b2:3a:2d:56:44:f3:a4:8d:c1:67: db:7c:53:69:30:1f:00:61:da:01:a8:c0:b9:75:5c:f6:52:38: 3c:08:a7:0d:05:dc:72:f6:ea:e5:4f:9c:e5:a0:60:5e:0f:c2: 09:54:09:3c:dc:4b:da:31:52:e6:f5:d2:68:77:d4:bc:38:5a: 6e:dd:07:f0:22:0e:06:e6:6b:7b:32:60:05:ae:c5:a5:83:07: 54:dc:68:bd:08:ca:e3:05:e4:69:03:ca:0e:ca:f4:cc:57:4a: 1d:91:6b:6e:9a:7f:4d:16:c1:11:75:14:59:dd:5c:65:aa:42: 40:02:20:8e:be:0c:21:f4:44:f3:80:ce:4e:68:e3:7f:28:fa: ce:3c:5d:89:a4:86:6a:ef:f0:3c:78:ec:53:69:7d:8d:f1:90: 69:80:2a:ef:83:2c:3c:87:37:85:1d:d0:99:3f:b7:7b:18:9c: 6d:70:f4:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4YQVIONAy4A2ZRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyNTEyMDk0N1oXDTI1MDgyMzEyMDk0N1owLzEtMCsGA1UEAxMk NjljNTk1Y2ItYmY1ZS00NTQxLTliNTEtY2E3MzVkNTEwZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0nsuFKwPldxEP0XCILkjdMqNdmblWCsREPc LtPLNTWHmWHUOoMn++7xUpzdYkSYtlkmdKVwL+A4yzn8GZoSewAhdqp+Ib/uMEHx 2Abuzbg6ejjwiosjdr1/MPJXprowmrxETGNKu+tZ70UzZrYDVPVaJJkr4OA/5yZa ws64d2sIoXOIoUD3mtyxMncbcWMQ3LsX3T2D/5EVq3CB0QE9G1YkWAUeFZD/UjCc tm9dNF4MO3J2ZKzgxGT60vJkrfXVryNirmY/CQOLqwvzYINO6Pr+Snp7VTdqQRTL VwsqhrfOO7ODjblDgrCTAWi/+apjHNATCtGdeowjBDalFr2RWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZGfn7Fb/Ujf2zJjIKVnI+XnlIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjIwYzhmOTYtN2RiOS0z YjRmLThhZDQtY2IyYTI5NjhhZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0nCElUR/4FhxiysfK7viXRoJnfILM3WKYIrAcpovcgcChsrVkYia3x jREfFargRNT3Ne6pbt29q6pk0p+W6Phj428FqQWN+UUzkIVlXf9+sjotVkTzpI3B Z9t8U2kwHwBh2gGowLl1XPZSODwIpw0F3HL26uVPnOWgYF4PwglUCTzcS9oxUub1 0mh31Lw4Wm7dB/AiDgbma3syYAWuxaWDB1TcaL0IyuMF5GkDyg7K9MxXSh2Ra26a f00WwRF1FFndXGWqQkACII6+DCH0RPOAzk5o438o+s48XYmkhmrv8Dx47FNpfY3x kGmAKu+DLDyHN4Ud0Jk/t3sYnG1w9HA= -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:17 2025 by rpki-client