$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d15f021a-bb23-3777-9a0b-0312984fc5b0.roa File: d15f021a-bb23-3777-9a0b-0312984fc5b0.roa (raw, json) Hash identifier: 0hSJnlVPaRydNom78EEqXdyzm+RWgva5ukG2GqElwwQ= Subject key identifier: DA:2D:F1:9F:32:C7:CA:7E:C1:17:97:AB:22:83:1A:1C:15:2C:D5:5F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D64128AB79ADEA89BA8FDAE0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d15f021a-bb23-3777-9a0b-0312984fc5b0.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:28:ab:79:ad:ea:89:ba:8f:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=884705e9-162a-4f6c-954b-3e2a1e91355e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:44:3f:c6:f1:c8:67:66:44:7d:9c:3c:7f: ef:2e:8c:93:bb:93:e5:6f:7e:fa:79:47:55:76:7f: 66:6f:8c:3c:37:c8:28:39:0c:d7:da:7b:86:da:6c: f5:9c:6f:2a:cb:9d:65:16:4c:70:10:0c:a9:e3:76: a0:90:8d:88:c4:03:43:db:e4:00:8a:b9:f9:3f:4b: a7:b7:84:2a:30:4b:85:d7:7b:79:1d:06:a4:79:3c: e0:e1:65:e9:d7:55:4d:4c:87:1d:1e:ac:92:93:9a: d5:33:91:c7:7e:11:18:88:04:d1:68:1a:4e:b5:bd: 7c:1e:22:b5:ae:91:88:a2:7c:96:9c:b3:11:ba:b6: 03:b6:37:48:55:77:5d:82:96:18:da:ab:45:6e:77: e3:16:32:de:f5:ee:65:79:7f:22:f0:57:5e:2c:98: 94:10:5a:27:cc:95:77:5f:20:4c:27:cc:11:fa:d6: e3:eb:02:a4:9e:8e:f8:fd:e1:a2:dc:8c:a1:f7:00: 38:79:8b:65:40:9e:1e:a1:5e:83:10:6e:dc:b5:91: 52:b9:58:c9:44:66:a2:b8:b3:fa:18:91:4f:e4:43: 06:09:8c:a5:76:76:b5:ee:59:06:24:96:06:c0:c8: c4:ae:d2:6c:91:98:a4:4b:7d:97:99:7c:30:03:16: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2D:F1:9F:32:C7:CA:7E:C1:17:97:AB:22:83:1A:1C:15:2C:D5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d15f021a-bb23-3777-9a0b-0312984fc5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6b:cb:ef:c8:52:61:06:26:8e:20:dc:da:3f:c0:1a:86:80: 22:ac:19:fb:99:67:3c:a6:1d:5c:90:cd:ae:d3:d7:11:5a:eb: 2f:c3:4f:9e:12:7c:b7:3c:04:a5:ba:4c:95:2b:cd:17:10:25: db:6a:dc:ad:14:99:8c:ec:14:9f:99:cf:f9:c3:92:9b:a6:02: 31:bc:48:2b:c1:c9:a2:7a:af:20:5b:39:c2:44:6f:fe:17:a8: 70:d7:88:58:14:05:e0:77:04:25:0d:03:50:3f:f3:21:c4:97: df:01:45:c7:7f:d9:79:66:77:af:f0:d3:83:1e:1a:f4:a7:0e: c8:6c:f9:52:d9:32:e5:b2:95:86:83:ac:c7:b6:1f:82:0f:90: 3d:88:1d:ab:d4:dd:65:64:52:ad:11:26:b1:48:33:0d:ad:4c: 23:a2:f8:a5:61:7f:9e:7f:07:98:1d:00:91:7a:59:c1:40:54: 45:71:03:1c:39:1a:cc:1d:07:7c:28:93:bf:96:c3:2f:d4:5c: 2d:61:0d:c0:90:4d:7c:14:74:20:73:2a:1e:5c:af:a3:41:cf: 5a:0e:65:6f:9e:df:c8:fe:54:87:2e:29:38:f0:e2:51:d4:69: d0:07:fb:fe:31:7a:73:44:e5:71:3d:98:87:d0:8a:ee:c3:dd: 6b:c7:6a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSirea3qibqP2uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODg0NzA1ZTktMTYyYS00ZjZjLTk1NGItM2UyYTFlOTEzNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb1EP8bxyGdmRH2cPH/vLoyTu5Plb376eUdV dn9mb4w8N8goOQzX2nuG2mz1nG8qy51lFkxwEAyp43agkI2IxAND2+QAirn5P0un t4QqMEuF13t5HQakeTzg4WXp11VNTIcdHqySk5rVM5HHfhEYiATRaBpOtb18HiK1 rpGIonyWnLMRurYDtjdIVXddgpYY2qtFbnfjFjLe9e5leX8i8FdeLJiUEFonzJV3 XyBMJ8wR+tbj6wKkno74/eGi3Iyh9wA4eYtlQJ4eoV6DEG7ctZFSuVjJRGaiuLP6 GJFP5EMGCYyldna17lkGJJYGwMjErtJskZikS32XmXwwAxblVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNot8Z8yx8p+wReXqyKDGhwVLNVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDE1ZjAyMWEtYmIyMy0z Nzc3LTlhMGItMDMxMjk4NGZjNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERry+/IUmEGJo4g3No/wBqGgCKsGfuZZzymHVyQza7T1xFa6y/DT54S fLc8BKW6TJUrzRcQJdtq3K0UmYzsFJ+Zz/nDkpumAjG8SCvByaJ6ryBbOcJEb/4X qHDXiFgUBeB3BCUNA1A/8yHEl98BRcd/2Xlmd6/w04MeGvSnDshs+VLZMuWylYaD rMe2H4IPkD2IHavU3WVkUq0RJrFIMw2tTCOi+KVhf55/B5gdAJF6WcFAVEVxAxw5 GswdB3wok7+Wwy/UXC1hDcCQTXwUdCBzKh5cr6NBz1oOZW+e38j+VIcuKTjw4lHU adAH+/4xenNE5XE9mIfQiu7D3WvHaiM= -----END CERTIFICATE-----Generated at Sat Apr 5 13:24:52 2025 by rpki-client