$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa File: dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa (raw, json) Hash identifier: xPjGwNeJdzAZEqsU/4u77Q0lLiYeQ0TlnidZlyucXVo= Subject key identifier: FC:81:CB:25:A8:50:5C:38:EB:8C:54:60:60:A9:77:22:A8:4E:C4:EE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848F2015803AB73C010ED8FB300 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa Signing time: Thu 20 Feb 2025 12:35:13 +0000 ROA not before: Thu 20 Feb 2025 12:35:13 +0000 ROA not after: Wed 21 May 2025 11:35:13 +0000 asID: 18779 IP address blocks: 172.252.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:01:58:03:ab:73:c0:10:ed:8f:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 20 12:35:13 2025 GMT Not After : May 21 11:35:13 2025 GMT Subject: CN=bf5ce038-d657-41cb-8011-5a6c2f59b0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:48:6a:4d:fa:61:5e:f9:ce:73:13:6b:46: 2c:86:a1:12:95:4d:39:e7:f1:36:37:a9:9f:3d:c9: 74:a5:ec:fd:0d:4d:8b:0f:4a:c6:4c:a0:bb:57:a7: ce:42:49:91:10:76:e1:7b:1e:44:43:f5:b3:d1:90: 7d:aa:0e:e6:1c:fd:06:90:eb:b3:d0:40:6b:e4:e7: ef:31:b0:39:1d:6e:a1:0e:af:94:19:4b:71:1d:13: e9:73:92:e3:d3:56:88:20:2c:70:16:a1:4f:cb:9c: 37:81:41:52:04:af:e2:9c:98:6d:42:18:56:fe:26: 69:df:f7:ee:e8:93:1d:63:2d:7d:c6:28:b6:35:78: fd:17:99:8b:98:bd:91:e8:e6:59:44:1c:73:2e:a1: 36:4b:1f:90:19:c3:5e:3a:df:49:c7:68:99:8d:27: d8:a2:60:93:18:3a:d8:ac:9e:82:c7:6b:45:0b:46: 1d:c3:b6:32:b4:ab:39:66:b2:02:23:2c:dc:95:d5: 66:38:7f:83:31:b1:81:9b:f2:d0:50:20:0f:53:c9: 01:7d:96:60:88:4f:d4:8e:46:62:2b:63:09:38:cf: 0e:28:94:5e:42:df:1c:b1:8f:04:9b:86:70:0f:0d: 2e:4f:bd:40:2f:07:18:92:b9:f1:5b:b8:44:fa:d2: e8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:CB:25:A8:50:5C:38:EB:8C:54:60:60:A9:77:22:A8:4E:C4:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1d:79:06:42:4a:01:14:70:f6:12:f3:21:c7:31:65:17:f3: 91:f3:4a:3f:4e:ad:b0:0e:87:f8:35:12:04:8d:3b:63:db:06: f0:b4:bb:ca:f3:70:3b:6e:2f:e5:ba:a0:85:08:fa:22:23:1f: 58:50:8d:e6:36:ee:c7:8f:15:35:7d:10:8a:f1:aa:f9:4c:2e: fa:80:db:39:77:9f:3a:1c:e4:63:15:3a:d4:ae:e5:4c:ae:09: d9:3e:7a:b1:8c:5c:c1:be:49:98:ae:c0:54:b2:1d:d1:49:54: 4b:e0:53:e3:78:1d:80:c7:fd:f6:03:5c:36:e4:ee:1b:95:b4: bc:96:53:2e:f4:c0:34:41:f6:9c:89:65:8b:ac:7f:64:93:c2: 11:4a:4a:ed:77:a6:0e:b4:24:cd:ed:ca:45:14:48:c2:7c:d7: f4:ac:e2:0a:48:7a:3c:e1:85:af:ff:d1:39:b7:7b:56:ef:43: 34:0e:24:ac:eb:f0:07:46:e7:a2:23:9e:74:e3:36:0d:2d:24: 4f:4f:32:ed:64:80:3b:31:5e:2c:35:32:4b:35:7e:c9:a6:fb: 57:69:96:56:ad:2c:fb:e2:37:3d:96:96:0a:07:41:ef:18:45: f5:6b:a2:5b:4a:39:c8:a0:ae:4f:a6:bf:56:7f:76:60:0e:69: 8c:1f:ba:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyAVgDq3PAEO2PswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyMDEyMzUxM1oXDTI1MDUyMTExMzUxM1owLzEtMCsGA1UEAxMk YmY1Y2UwMzgtZDY1Ny00MWNiLTgwMTEtNWE2YzJmNTliMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/JIak36YV75znMTa0YshqESlU055/E2N6mf Pcl0pez9DU2LD0rGTKC7V6fOQkmREHbhex5EQ/Wz0ZB9qg7mHP0GkOuz0EBr5Ofv MbA5HW6hDq+UGUtxHRPpc5Lj01aIICxwFqFPy5w3gUFSBK/inJhtQhhW/iZp3/fu 6JMdYy19xii2NXj9F5mLmL2R6OZZRBxzLqE2Sx+QGcNeOt9Jx2iZjSfYomCTGDrY rJ6Cx2tFC0Ydw7YytKs5ZrICIyzcldVmOH+DMbGBm/LQUCAPU8kBfZZgiE/UjkZi K2MJOM8OKJReQt8csY8Em4ZwDw0uT71ALwcYkrnxW7hE+tLoqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyByyWoUFw464xUYGCpdyKoTsTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGMxMGJiMDUtNDBjZC0z MTRmLWExZGMtNmUxZTEyYzRkMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEdeQZCSgEUcPYS8yHHMWUX85HzSj9OrbAOh/g1EgSNO2PbBvC0u8rz cDtuL+W6oIUI+iIjH1hQjeY27sePFTV9EIrxqvlMLvqA2zl3nzoc5GMVOtSu5Uyu Cdk+erGMXMG+SZiuwFSyHdFJVEvgU+N4HYDH/fYDXDbk7huVtLyWUy70wDRB9pyJ ZYusf2STwhFKSu13pg60JM3tykUUSMJ81/Ss4gpIejzhha//0Tm3e1bvQzQOJKzr 8AdG56IjnnTjNg0tJE9PMu1kgDsxXiw1Mks1fsmm+1dpllatLPviNz2WlgoHQe8Y RfVroltKOcigrk+mv1Z/dmAOaYwfusE= -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:47 2025 by rpki-client