$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa File: da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa (raw, json) Hash identifier: DpaIVEa2wjDNTQN8nyU8u0571G2etLrixF+B1iWPqdw= Subject key identifier: 2B:C7:88:74:94:61:0A:E3:32:CE:96:08:B3:6B:F5:3A:F6:C6:3F:54 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F860D2B98A6DC8C26AC9D580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa Signing time: Sun 25 May 2025 12:09:23 +0000 ROA not before: Sun 25 May 2025 12:09:23 +0000 ROA not after: Sat 23 Aug 2025 12:09:23 +0000 asID: 214238 IP address blocks: 172.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:60:d2:b9:8a:6d:c8:c2:6a:c9:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 12:09:23 2025 GMT Not After : Aug 23 12:09:23 2025 GMT Subject: CN=a072b5a0-ce74-4199-938c-6814843622a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:34:17:28:17:cf:15:21:c1:21:36:60:d3: 02:bb:39:dd:fd:29:66:a3:ec:6c:81:fb:73:25:12: d6:a1:bd:8c:27:68:f2:77:d0:1a:dc:85:8c:48:2b: cf:cd:76:7d:44:ac:f6:f7:12:2a:9f:48:86:de:d0: f8:94:e7:5c:31:95:5b:4f:b5:9d:b3:f1:74:d5:36: 98:d6:d6:7e:36:63:4f:e6:60:3f:23:55:70:b4:c9: 08:f9:0a:bb:32:e7:88:71:a2:87:b8:46:31:c3:0a: fc:ca:8b:98:89:88:24:96:8e:ca:00:2f:25:a0:80: c2:0a:dd:34:51:4a:e0:c4:fa:d7:6b:67:34:87:ff: 46:0c:fd:26:82:f9:da:1f:bf:80:8f:64:1e:61:b1: f5:46:f2:18:0f:95:84:1e:05:1f:8f:47:c1:3f:f2: ae:d0:e1:83:49:e5:00:c0:e4:c5:96:60:d7:cc:0e: 34:19:c8:fb:6f:90:12:f5:c5:b2:1b:80:19:9d:28: d7:27:c3:90:22:1c:b4:af:50:be:30:be:e7:51:0e: 54:d4:42:ff:6d:ea:3d:cf:ce:9d:c7:da:95:ad:93: e4:ac:98:91:f1:be:db:97:0e:56:c4:00:f7:5d:0e: 7c:97:5c:fb:a0:a1:49:5c:49:a1:e2:1c:94:d5:9b: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C7:88:74:94:61:0A:E3:32:CE:96:08:B3:6B:F5:3A:F6:C6:3F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9b:b0:57:b8:91:f3:79:14:f5:5f:a3:3e:9b:62:db:d2:d1: d4:e4:89:65:13:7f:18:ad:69:e2:cd:a4:0d:fa:f4:a6:21:f4: 70:80:93:6e:8a:dc:67:42:7e:ed:0a:ed:f9:3f:c7:56:27:03: fb:63:a3:19:04:a9:6c:7d:5d:4c:87:29:9b:e9:11:13:94:83: ef:aa:77:b3:ea:24:62:fe:4d:34:3a:7e:e7:ac:a1:e7:39:ab: 91:32:f4:31:6c:cd:70:0b:de:c7:18:76:73:91:e0:e0:e0:65: 58:c0:c3:fb:87:ef:91:65:ca:88:9e:6f:a1:38:78:d3:7c:78: ee:1a:ab:c5:ed:2e:30:86:ce:e3:5c:22:2c:ce:43:83:9d:44: 42:25:b7:f3:32:63:a2:95:f2:34:07:db:7b:07:5c:5d:b2:e1: 85:56:cc:52:84:96:a3:45:1e:14:ed:e6:a5:92:84:48:7f:57: 0c:a0:60:09:09:91:c7:c3:8a:85:34:9d:5c:c0:5a:08:83:69: 70:0b:20:3c:f5:04:ba:df:79:03:88:e4:a3:59:8b:15:d4:b3: f8:fc:87:30:77:53:b2:ce:30:b7:82:2b:e5:83:24:51:70:b5: 05:60:41:8c:e9:0f:d9:c2:ae:13:a1:0b:73:73:16:a4:97:37: 31:6a:15:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4YNK5im3IwmrJ1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyNTEyMDkyM1oXDTI1MDgyMzEyMDkyM1owLzEtMCsGA1UEAxMk YTA3MmI1YTAtY2U3NC00MTk5LTkzOGMtNjgxNDg0MzYyMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra00FygXzxUhwSE2YNMCuznd/Slmo+xsgftz JRLWob2MJ2jyd9Aa3IWMSCvPzXZ9RKz29xIqn0iG3tD4lOdcMZVbT7Wds/F01TaY 1tZ+NmNP5mA/I1VwtMkI+Qq7MueIcaKHuEYxwwr8youYiYgklo7KAC8loIDCCt00 UUrgxPrXa2c0h/9GDP0mgvnaH7+Aj2QeYbH1RvIYD5WEHgUfj0fBP/Ku0OGDSeUA wOTFlmDXzA40Gcj7b5AS9cWyG4AZnSjXJ8OQIhy0r1C+ML7nUQ5U1EL/beo9z86d x9qVrZPkrJiR8b7blw5WxAD3XQ58l1z7oKFJXEmh4hyU1ZtLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvHiHSUYQrjMs6WCLNr9Tr2xj9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGExY2FlNmMtMWU5NS0z NWIwLTlhMDAtZDJjNWE0NmYxNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFybsFe4kfN5FPVfoz6bYtvS0dTkiWUTfxitaeLNpA369KYh9HCAk26K 3GdCfu0K7fk/x1YnA/tjoxkEqWx9XUyHKZvpEROUg++qd7PqJGL+TTQ6fuesoec5 q5Ey9DFszXAL3scYdnOR4ODgZVjAw/uH75Flyoieb6E4eNN8eO4aq8XtLjCGzuNc IizOQ4OdREIlt/MyY6KV8jQH23sHXF2y4YVWzFKElqNFHhTt5qWShEh/VwygYAkJ kcfDioU0nVzAWgiDaXALIDz1BLrfeQOI5KNZixXUs/j8hzB3U7LOMLeCK+WDJFFw tQVgQYzpD9nCrhOhC3NzFqSXNzFqFbQ= -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:59 2025 by rpki-client