$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d1af7a11-2914-317d-98f2-2c9ee38c31c9.roa File: d1af7a11-2914-317d-98f2-2c9ee38c31c9.roa (raw, json) Hash identifier: ueQirqXAg2ir72q9I2D9DLXnQpMDOlJ1kStOMDPb1LU= Subject key identifier: 55:82:B1:80:2C:97:5B:EA:23:9A:24:87:90:5A:8C:53:96:A7:F7:B2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D64128F3059C1C7AA2E412B0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d1af7a11-2914-317d-98f2-2c9ee38c31c9.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:28:f3:05:9c:1c:7a:a2:e4:12:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=050eba7f-34c0-403c-b658-d8d59fc729f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7e:34:ef:ed:30:84:be:02:3d:d3:d2:f7:9f: 92:68:0e:8f:56:27:26:d7:49:3b:de:5d:71:6a:17: 52:ec:d5:12:e6:36:e5:06:d9:02:85:59:24:32:d5: 27:2e:7e:1d:fa:18:43:c7:28:52:df:cd:93:df:d1: 50:b3:35:eb:01:44:b4:16:90:22:90:1d:a0:11:a9: b0:7c:79:fd:51:b8:ee:41:e6:fd:d7:d4:26:15:4b: 2d:97:ce:5f:95:93:9d:14:dc:70:d5:ad:db:52:61: f3:d1:89:27:f1:ad:d2:b0:32:d4:2b:02:5a:fb:de: 8f:75:43:0a:b1:d3:10:0d:c8:1c:64:fa:d1:84:ef: 8c:b6:4d:92:3b:ac:be:c7:90:1a:77:c8:cd:18:02: 8b:cf:18:71:c0:00:b4:96:0a:06:65:a8:31:07:1d: d9:8d:c9:91:50:01:de:cb:21:9e:59:2d:ce:a4:5b: 89:ac:ea:fa:6a:f1:7a:41:7b:4c:4e:e0:b4:db:14: 7c:fe:67:9d:4e:ce:2c:67:1d:28:17:a9:6b:73:dc: 7b:9d:78:b0:e9:f5:5f:2b:ea:6c:95:62:f6:25:b0: 83:8a:89:d0:6f:aa:5c:d9:a9:68:41:08:c0:6a:8c: 02:47:09:21:0f:d0:71:24:a5:f0:bf:fa:c9:79:4b: 96:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:82:B1:80:2C:97:5B:EA:23:9A:24:87:90:5A:8C:53:96:A7:F7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d1af7a11-2914-317d-98f2-2c9ee38c31c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ee:52:b3:3d:b1:a3:4a:0d:57:8b:6c:82:b5:31:f2:8c:e7: 45:f3:4d:fb:04:70:e2:45:78:63:2c:3c:b5:e3:0d:b1:20:94: 8e:4c:07:ac:85:f5:69:ee:07:9a:43:58:23:f9:2f:f1:5f:4d: f1:2b:1a:98:2c:28:af:ba:69:f5:69:e2:81:be:78:7c:4a:c7: 9c:f3:7c:ba:11:39:e3:23:ac:1b:c5:2f:93:c2:7e:51:c3:4c: 0a:09:e2:cc:a3:be:bb:17:0c:6d:c1:7c:20:e7:76:a5:5e:a4: 84:7c:8c:7a:1b:88:5c:8b:86:0a:ae:d6:4f:29:51:75:e4:16: c5:90:fb:49:54:56:4a:33:8a:f4:6f:df:02:4f:01:b8:1f:c2: 6f:bc:49:4d:96:63:27:e2:c9:b7:7e:0f:2e:2a:75:f7:0d:d7: f0:2b:6b:9b:95:29:dc:cb:4a:65:62:8e:37:e4:88:a2:f9:9b: 48:d2:a7:ca:81:c8:4d:6f:62:c2:cc:ae:9c:20:33:3c:32:05: d4:65:9f:8b:87:e8:b7:c4:1b:cc:39:1f:d6:b3:16:ba:6a:21: 9d:35:86:83:a3:f3:fc:a2:6f:a5:4e:95:1b:6c:3c:25:5f:ec: 16:09:18:95:b5:13:c3:cf:4e:d8:36:78:eb:2c:73:7c:af:36: c8:1f:6f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSjzBZwceqLkErAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDUwZWJhN2YtMzRjMC00MDNjLWI2NTgtZDhkNTlmYzcyOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H407+0whL4CPdPS95+SaA6PVicm10k73l1x ahdS7NUS5jblBtkChVkkMtUnLn4d+hhDxyhS382T39FQszXrAUS0FpAikB2gEamw fHn9UbjuQeb919QmFUstl85flZOdFNxw1a3bUmHz0Ykn8a3SsDLUKwJa+96PdUMK sdMQDcgcZPrRhO+Mtk2SO6y+x5Aad8jNGAKLzxhxwAC0lgoGZagxBx3ZjcmRUAHe yyGeWS3OpFuJrOr6avF6QXtMTuC02xR8/medTs4sZx0oF6lrc9x7nXiw6fVfK+ps lWL2JbCDionQb6pc2aloQQjAaowCRwkhD9BxJKXwv/rJeUuWOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWCsYAsl1vqI5okh5BajFOWp/eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDFhZjdhMTEtMjkxNC0z MTdkLTk4ZjItMmM5ZWUzOGMzMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7uUrM9saNKDVeLbIK1MfKM50XzTfsEcOJFeGMsPLXjDbEglI5MB6yF 9WnuB5pDWCP5L/FfTfErGpgsKK+6afVp4oG+eHxKx5zzfLoROeMjrBvFL5PCflHD TAoJ4syjvrsXDG3BfCDndqVepIR8jHobiFyLhgqu1k8pUXXkFsWQ+0lUVkozivRv 3wJPAbgfwm+8SU2WYyfiybd+Dy4qdfcN1/Ara5uVKdzLSmVijjfkiKL5m0jSp8qB yE1vYsLMrpwgMzwyBdRln4uH6LfEG8w5H9azFrpqIZ01hoOj8/yib6VOlRtsPCVf 7BYJGJW1E8PPTtg2eOssc3yvNsgfb3o= -----END CERTIFICATE-----Generated at Wed Apr 9 17:12:27 2025 by rpki-client