$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db879116-d1c7-3d12-a0de-40b6384c6393.roa File: db879116-d1c7-3d12-a0de-40b6384c6393.roa (raw, json) Hash identifier: Xkgo4P0WuhbnG5XQy0uwOC2/MEpVfTDu400eI/lm1vg= Subject key identifier: 76:25:A7:A4:57:5E:3E:46:A7:A5:34:D1:44:33:37:E4:C7:42:E4:D2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848EA59E8A9D41475F3FCA6DE40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db879116-d1c7-3d12-a0de-40b6384c6393.roa Signing time: Mon 17 Feb 2025 18:47:12 +0000 ROA not before: Mon 17 Feb 2025 18:47:12 +0000 ROA not after: Sun 18 May 2025 17:47:12 +0000 asID: 55201 IP address blocks: 172.121.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ea:59:e8:a9:d4:14:75:f3:fc:a6:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 17 18:47:12 2025 GMT Not After : May 18 17:47:12 2025 GMT Subject: CN=95dc4c50-1495-43ff-b59c-2a83ae0c6ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:32:79:dc:d6:88:88:12:0b:bd:0b:18:58:31: 3c:68:32:86:57:b2:ab:eb:43:06:71:fb:8b:82:16: 0e:9a:8c:d8:ac:f9:e7:2a:09:28:2a:45:28:bd:60: 42:0c:84:d2:e2:0d:82:08:4e:f3:ec:6d:52:4e:b6: ad:c7:b0:4e:cd:3a:a7:c7:1e:0e:0a:14:8c:9f:38: 92:39:6c:5a:ba:44:e9:db:af:03:22:5b:56:a6:57: 6e:70:21:69:f6:01:21:89:14:1a:4a:31:9f:5e:ad: fc:dc:59:00:d9:31:c7:90:f9:87:3e:63:e5:e0:ed: 91:77:10:83:97:b0:99:56:f6:f8:88:a2:d0:73:b9: 38:7c:0b:48:80:12:4d:7c:a1:53:aa:c5:f6:89:21: b0:2b:73:b4:5f:b8:8e:90:20:af:36:a8:55:ce:22: c6:52:be:d2:f9:5b:56:c7:6d:f0:a2:96:28:58:66: 84:cb:d8:da:dc:17:3e:bc:aa:e4:a3:e3:f8:0f:55: 79:0b:24:35:0c:ae:2a:2d:16:c2:be:42:5c:c8:73: 2b:4d:c3:9a:91:89:0d:78:c5:84:c5:17:1b:46:21: 86:95:10:ba:af:a5:e2:09:d4:9f:b4:be:69:82:63: cb:9d:d8:75:4f:8f:ad:b6:c4:f6:8c:0b:79:1f:93: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:25:A7:A4:57:5E:3E:46:A7:A5:34:D1:44:33:37:E4:C7:42:E4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db879116-d1c7-3d12-a0de-40b6384c6393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:85:c2:49:d7:67:19:3d:4e:ed:2b:13:2a:ff:e0:1b:f2:88: de:3b:3d:55:13:34:89:79:4d:39:84:d3:da:cd:3b:75:48:8e: 9f:08:54:f3:a8:4b:c4:67:8f:77:53:50:7c:f5:4e:15:70:bc: 77:75:d8:fe:86:f5:62:ae:5b:48:35:87:d0:46:87:55:13:85: fe:67:1f:b1:e1:da:56:47:ff:5a:0e:58:47:84:42:cc:03:2e: 0f:b6:a2:7e:ad:89:e3:5f:0d:e9:da:6b:5a:5a:1c:e1:f8:d9: 7e:e4:28:21:c3:3f:90:53:a1:c8:c4:18:d6:42:63:a0:ae:bc: fc:49:83:71:01:bb:5f:a4:55:60:df:e3:e2:43:f3:3c:4c:d0: de:a3:28:68:f4:3b:d0:4a:9f:24:1b:ac:9e:5d:90:2a:3e:19: ca:69:16:9f:29:87:11:19:f6:bd:1b:e9:14:5e:34:de:84:81: 53:c4:98:2d:e2:2e:71:c4:df:95:b7:f0:db:f9:a8:bb:27:f6: f1:56:ac:ed:6f:c5:ee:8b:df:7a:ff:33:5c:3c:28:a5:f3:30: 8d:c6:0a:fb:41:6c:8d:d4:2f:f9:eb:0e:ca:69:69:04:8d:70: c4:64:9f:18:d2:92:8d:66:88:cd:17:84:e3:34:3f:4e:95:b1: 25:18:fc:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjqWeip1BR18/ym3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxNzE4NDcxMloXDTI1MDUxODE3NDcxMlowLzEtMCsGA1UEAxMk OTVkYzRjNTAtMTQ5NS00M2ZmLWI1OWMtMmE4M2FlMGM2ZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DJ53NaIiBILvQsYWDE8aDKGV7Kr60MGcfuL ghYOmozYrPnnKgkoKkUovWBCDITS4g2CCE7z7G1STratx7BOzTqnxx4OChSMnziS OWxaukTp268DIltWplducCFp9gEhiRQaSjGfXq383FkA2THHkPmHPmPl4O2RdxCD l7CZVvb4iKLQc7k4fAtIgBJNfKFTqsX2iSGwK3O0X7iOkCCvNqhVziLGUr7S+VtW x23wopYoWGaEy9ja3Bc+vKrko+P4D1V5CyQ1DK4qLRbCvkJcyHMrTcOakYkNeMWE xRcbRiGGlRC6r6XiCdSftL5pgmPLndh1T4+ttsT2jAt5H5O46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYlp6RXXj5Gp6U00UQzN+THQuTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGI4NzkxMTYtZDFjNy0z ZDEyLWEwZGUtNDBiNjM4NGM2MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOFwknXZxk9Tu0rEyr/4BvyiN47PVUTNIl5TTmE09rNO3VIjp8IVPOo S8Rnj3dTUHz1ThVwvHd12P6G9WKuW0g1h9BGh1UThf5nH7Hh2lZH/1oOWEeEQswD Lg+2on6tieNfDenaa1paHOH42X7kKCHDP5BTocjEGNZCY6CuvPxJg3EBu1+kVWDf 4+JD8zxM0N6jKGj0O9BKnyQbrJ5dkCo+GcppFp8phxEZ9r0b6RReNN6EgVPEmC3i LnHE35W38Nv5qLsn9vFWrO1vxe6L33r/M1w8KKXzMI3GCvtBbI3UL/nrDsppaQSN cMRknxjSko1miM0XhOM0P06VsSUY/Ec= -----END CERTIFICATE-----Generated at Sun Apr 6 17:49:21 2025 by rpki-client