$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa File: d91bf0e9-627a-31e7-9857-da9afc43a642.roa (raw, json) Hash identifier: ZgCEn5lbslX2QCDUga2ZzXo3oNNA3TzeO4BhJKmDzME= Subject key identifier: 9E:58:3D:C4:ED:AB:0B:B2:45:F7:79:EB:37:09:A0:E7:D8:7A:27:38 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D641287F8FAA011E5A4E55A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:28:7f:8f:aa:01:1e:5a:4e:55:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=7f5aca46-c25a-4f45-ae93-ce13d296b307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:5c:29:a6:cb:d0:bb:63:53:a9:da:93:f4: ef:60:a1:01:c0:fd:24:58:09:d7:fc:d1:8e:6e:33: 21:9d:28:71:d2:82:9b:d4:0f:07:4a:0a:21:e5:1d: 25:e1:00:c9:21:2f:ee:b0:f8:52:16:ef:f7:56:12: 37:e5:45:4a:fd:82:58:31:3e:c7:e6:95:24:79:8f: c8:4d:d6:11:e0:ee:33:14:f8:39:b2:d9:24:5d:51: e0:26:d1:f0:3c:62:3c:73:7a:18:d9:61:02:ba:a7: af:e4:5a:8e:bf:44:d9:d6:ef:c3:cd:79:e4:19:27: 61:72:ca:1b:b6:b9:3a:f2:41:82:05:48:21:cf:49: 7e:c7:6e:09:13:46:b5:2b:53:6a:74:ab:67:cd:95: 9d:a7:58:e7:e9:02:21:2f:c2:2d:93:4f:b7:fd:83: 82:4f:99:20:b9:a4:9f:f1:38:d5:ef:36:01:2a:d5: ac:37:65:4e:35:06:0f:f3:3a:41:51:5d:be:ac:e7: f6:dd:50:ad:bc:49:1f:a6:74:35:10:0d:50:07:4b: ee:b9:95:23:94:89:63:a8:68:e2:2e:e2:1d:83:a1: b8:9b:07:fb:ec:81:63:4e:80:fb:d1:26:80:4b:4b: b9:ba:1e:a0:60:68:6a:ee:6d:64:03:19:5c:63:fe: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:58:3D:C4:ED:AB:0B:B2:45:F7:79:EB:37:09:A0:E7:D8:7A:27:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e3:e1:1a:c7:9f:96:8b:67:a2:4c:ee:9e:9a:3f:71:9e:69: c9:ea:29:e8:43:d6:4f:8d:4c:31:96:a6:78:8a:1d:65:4a:fe: a8:82:50:5c:01:3f:7e:99:6c:fa:d6:c6:ea:c6:14:98:c0:1d: 43:76:d6:bf:80:a4:4e:16:54:85:0f:9f:f9:e9:46:7e:05:64: 40:01:56:87:55:8b:aa:bf:88:f7:9c:9d:81:e4:57:c2:3e:e0: 14:5b:8d:61:de:ea:fc:64:dc:96:59:27:94:fe:6b:e4:3c:a8: 44:16:ca:e4:ca:87:63:89:24:00:27:cc:10:43:87:1b:99:3b: a7:d4:b0:c6:45:54:f0:63:55:43:04:e2:27:65:51:de:44:59: b6:1d:da:0d:f4:51:37:c0:78:6b:6f:6d:e1:9a:76:80:1e:75: e7:60:e8:17:91:23:1a:96:61:fe:94:38:18:0d:1e:3b:35:90: 7c:86:80:bb:71:85:87:e2:5c:c9:57:8b:49:21:b5:6d:b1:37: 33:7c:80:7a:bc:a6:6b:5c:c0:3b:79:bb:19:e7:ce:ae:24:09: 5d:fc:01:32:59:ef:7c:a0:06:78:89:95:36:ef:46:42:57:4e: 7c:8d:11:33:e3:55:ae:c4:92:2e:ef:3a:93:f9:0b:b4:10:bb: 8e:ee:ec:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSh/j6oBHlpOVaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk N2Y1YWNhNDYtYzI1YS00ZjQ1LWFlOTMtY2UxM2QyOTZiMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1FcKabL0LtjU6nak/TvYKEBwP0kWAnX/NGO bjMhnShx0oKb1A8HSgoh5R0l4QDJIS/usPhSFu/3VhI35UVK/YJYMT7H5pUkeY/I TdYR4O4zFPg5stkkXVHgJtHwPGI8c3oY2WECuqev5FqOv0TZ1u/DzXnkGSdhcsob trk68kGCBUghz0l+x24JE0a1K1NqdKtnzZWdp1jn6QIhL8Itk0+3/YOCT5kguaSf 8TjV7zYBKtWsN2VONQYP8zpBUV2+rOf23VCtvEkfpnQ1EA1QB0vuuZUjlIljqGji LuIdg6G4mwf77IFjToD70SaAS0u5uh6gYGhq7m1kAxlcY/64twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5YPcTtqwuyRfd56zcJoOfYeic4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDkxYmYwZTktNjI3YS0z MWU3LTk4NTctZGE5YWZjNDNhNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHi9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbj4RrHn5aLZ6JM7p6aP3GeacnqKehD1k+NTDGWpniKHWVK/qiCUFwB P36ZbPrWxurGFJjAHUN21r+ApE4WVIUPn/npRn4FZEABVodVi6q/iPecnYHkV8I+ 4BRbjWHe6vxk3JZZJ5T+a+Q8qEQWyuTKh2OJJAAnzBBDhxuZO6fUsMZFVPBjVUME 4idlUd5EWbYd2g30UTfAeGtvbeGadoAededg6BeRIxqWYf6UOBgNHjs1kHyGgLtx hYfiXMlXi0khtW2xNzN8gHq8pmtcwDt5uxnnzq4kCV38ATJZ73ygBniJlTbvRkJX TnyNETPjVa7Eki7vOpP5C7QQu47u7C0= -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:05 2025 by rpki-client