$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa File: b325f6f1-0016-3250-a9e2-462a29e132f3.roa (raw, json) Hash identifier: VhQImCAcv/xCAn49he8FhgmKiQUSTgZAnBi6FnN7N6k= Subject key identifier: FA:44:3D:99:90:05:0F:A4:4E:9E:D2:CA:B4:90:DB:16:B6:2F:B3:46 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848F200A4DA140B59635099DE30 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa Signing time: Thu 20 Feb 2025 12:33:48 +0000 ROA not before: Thu 20 Feb 2025 12:33:48 +0000 ROA not after: Wed 21 May 2025 11:33:48 +0000 asID: 18779 IP address blocks: 172.252.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:00:a4:da:14:0b:59:63:50:99:de:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 20 12:33:48 2025 GMT Not After : May 21 11:33:48 2025 GMT Subject: CN=7977c8b4-57b8-4097-aeb1-cb6a4fbbdf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:37:22:49:00:fc:57:26:4c:5c:7a:e9:30: da:01:0d:03:66:ea:6e:7e:87:1c:57:e7:2c:59:6a: 1c:c7:66:e6:f5:f0:be:bb:62:9c:6e:3b:cd:aa:ab: 06:65:08:93:cf:0a:94:1a:17:7b:fb:d7:72:8a:6c: b0:1f:5d:c5:ca:d9:d8:df:1a:ec:c2:0c:f3:f8:11: 98:03:fe:b8:11:f6:83:15:f2:b7:ae:14:1c:fd:91: ec:dc:68:9a:7f:a3:15:5e:72:3a:98:04:0f:8d:f9: ad:ff:62:27:1c:72:bb:4b:fc:e8:9a:fd:d2:75:89: e5:ad:c6:1f:d9:b2:35:61:98:a2:3a:8c:95:12:d1: b7:7e:10:5d:61:cc:de:b3:e5:ed:22:25:a0:b1:98: 5c:0f:b4:b1:c5:87:be:41:2f:ca:58:29:be:79:66: 79:9a:58:49:ce:d8:4e:2c:3e:f1:9d:d9:92:7c:d9: 65:f9:16:87:bb:00:ee:03:1a:65:52:be:94:74:68: 8b:0d:65:21:ba:a9:c4:be:dc:88:1d:44:47:fa:3c: c1:9b:bb:7a:ab:c7:e9:bd:93:60:eb:45:81:9e:8d: 08:3f:f2:ca:46:f7:6d:92:74:b3:9d:24:73:02:69: 18:a4:c0:b3:d3:50:10:87:48:e8:e7:70:b2:11:cf: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:44:3D:99:90:05:0F:A4:4E:9E:D2:CA:B4:90:DB:16:B6:2F:B3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ae:99:a0:19:f5:43:10:86:f5:56:ac:b8:66:fc:08:ed:61: fb:7b:a3:f1:18:69:30:21:d4:ba:10:db:80:00:ff:10:37:ea: 7a:4b:84:56:27:4c:43:78:bf:05:56:ea:7a:be:e8:58:75:fd: 4c:95:fa:d6:94:6c:e1:58:ec:b2:99:82:ca:5e:90:37:52:b2: 1e:1e:7a:05:96:18:d2:36:e2:ea:c4:44:78:82:8e:8d:ae:bd: 55:73:7c:16:a9:76:65:85:00:26:7a:dd:ee:2e:81:b0:9c:e3: 4b:d7:e2:ba:41:4b:77:1e:ea:48:3a:60:fc:93:e4:86:5e:a5: ce:04:b8:0e:59:43:9d:87:eb:8c:18:6c:06:60:4f:23:fa:a2: 49:b9:9f:c9:18:01:92:ab:d5:a4:25:e7:87:f6:54:87:4f:f4: 53:6b:55:8f:4f:d8:00:fc:34:a3:63:70:58:04:0a:1d:a1:29: 21:0d:db:e0:fc:23:77:f1:d9:c3:68:f2:24:32:74:a6:ea:cb: 46:78:0c:c1:56:9f:9a:24:b0:42:13:6d:18:89:84:56:88:fc: 47:d8:32:3a:2d:cd:df:f3:01:48:68:0c:8f:20:a5:c2:12:fd: 89:57:21:40:5d:88:4d:2e:31:69:7c:a7:3a:4d:ad:4e:ae:25: 20:88:e4:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyAKTaFAtZY1CZ3jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyMDEyMzM0OFoXDTI1MDUyMTExMzM0OFowLzEtMCsGA1UEAxMk Nzk3N2M4YjQtNTdiOC00MDk3LWFlYjEtY2I2YTRmYmJkZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurc3IkkA/FcmTFx66TDaAQ0DZupufoccV+cs WWocx2bm9fC+u2KcbjvNqqsGZQiTzwqUGhd7+9dyimywH13FytnY3xrswgzz+BGY A/64EfaDFfK3rhQc/ZHs3Giaf6MVXnI6mAQPjfmt/2InHHK7S/zomv3SdYnlrcYf 2bI1YZiiOoyVEtG3fhBdYczes+XtIiWgsZhcD7SxxYe+QS/KWCm+eWZ5mlhJzthO LD7xndmSfNll+RaHuwDuAxplUr6UdGiLDWUhuqnEvtyIHURH+jzBm7t6q8fpvZNg 60WBno0IP/LKRvdtknSznSRzAmkYpMCz01AQh0jo53CyEc92EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpEPZmQBQ+kTp7SyrSQ2xa2L7NGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjMyNWY2ZjEtMDAxNi0z MjUwLWE5ZTItNDYyYTI5ZTEzMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6umaAZ9UMQhvVWrLhm/AjtYft7o/EYaTAh1LoQ24AA/xA36npLhFYn TEN4vwVW6nq+6Fh1/UyV+taUbOFY7LKZgspekDdSsh4eegWWGNI24urERHiCjo2u vVVzfBapdmWFACZ63e4ugbCc40vX4rpBS3ce6kg6YPyT5IZepc4EuA5ZQ52H64wY bAZgTyP6okm5n8kYAZKr1aQl54f2VIdP9FNrVY9P2AD8NKNjcFgECh2hKSEN2+D8 I3fx2cNo8iQydKbqy0Z4DMFWn5oksEITbRiJhFaI/EfYMjotzd/zAUhoDI8gpcIS /YlXIUBdiE0uMWl8pzpNrU6uJSCI5PU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:16:08 2025 by rpki-client