$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4e5d2f7-1e92-3522-bffc-76b0e26e9726.roa File: e4e5d2f7-1e92-3522-bffc-76b0e26e9726.roa (raw, json) Hash identifier: Q2Bhi4lKDwP/0mIz0tMfhYn2jQ9+BdrTjFzRF+eWtZE= Subject key identifier: 0A:41:71:4D:78:D4:E2:D8:39:74:00:FE:F3:A7:90:0E:25:AD:37:41 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D641299BA27CECE2315BDF40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4e5d2f7-1e92-3522-bffc-76b0e26e9726.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:29:9b:a2:7c:ec:e2:31:5b:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=9b6d7464-6934-44ab-b4aa-ffe0204ae145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:58:bb:84:99:55:68:61:bf:2b:3c:ec:3e: cf:3b:b2:a4:58:18:95:95:31:af:ed:5e:bc:81:39: 14:2a:0d:57:a4:58:2f:1e:e9:38:05:64:54:c4:d0: 21:d9:f8:e2:2f:d6:cc:02:a2:b6:c5:7d:82:62:fa: 3d:c8:30:ab:38:b1:3f:64:d8:f3:d4:ee:85:5d:e9: 7a:f9:8b:ff:78:b5:01:d2:16:10:2c:e2:97:24:4b: e6:85:cd:d8:a2:fc:63:4f:af:29:3b:de:33:5d:0a: eb:a7:f8:af:85:83:24:3d:09:7f:3a:20:76:0d:33: 22:0f:74:ee:71:d6:cc:39:7b:c8:e6:75:75:24:39: 1f:8d:20:ae:3b:e4:b0:a9:47:13:0e:d8:ae:08:0b: 23:20:ab:11:f1:25:3e:55:63:4f:42:57:46:d5:7a: 48:d1:f1:ea:6b:f7:14:ab:bd:96:fc:a4:5c:66:ca: 49:18:d5:99:c2:33:70:2b:ed:19:65:a3:76:d6:83: 9a:1f:0f:d4:f5:73:6b:21:71:df:65:d4:9d:7e:6d: 3a:35:bd:e9:75:95:ed:bf:ee:9e:a0:a1:2e:74:26: 51:98:21:30:1c:4e:c0:35:f8:aa:d9:de:d5:44:b3: 71:45:0e:0a:0f:97:c4:6c:60:71:bb:98:10:1d:a6: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:41:71:4D:78:D4:E2:D8:39:74:00:FE:F3:A7:90:0E:25:AD:37:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4e5d2f7-1e92-3522-bffc-76b0e26e9726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b4:62:24:88:a8:fd:28:a8:bb:6e:c3:a3:31:ef:15:7c:c0: b5:2c:16:2e:bb:9e:6b:cc:90:78:b5:b1:6d:87:c9:39:6f:b6: 78:4f:d9:35:89:0d:43:30:31:0a:fa:d0:98:33:09:29:73:c2: 23:6a:89:7d:7b:86:f2:10:5d:7f:42:a3:90:57:98:f3:16:f4: 60:d7:79:b4:ad:bb:24:82:37:7e:10:51:8a:84:79:ce:4e:52: 77:91:3a:37:b2:bb:21:97:49:ce:58:02:b3:de:bb:b8:bf:52: 96:d9:22:ea:6a:e0:fa:f3:51:89:fc:3a:15:84:c7:fa:e2:ae: 69:ff:51:26:e6:c8:61:47:95:28:21:e6:75:88:14:ec:f1:5a: 22:9f:da:d0:d4:82:92:d5:a8:27:d6:09:86:22:03:c2:5f:68: f0:d8:87:4a:8c:e0:69:bd:3d:bf:fd:72:d8:8b:88:03:3c:98: 2f:93:29:5c:8f:8c:d4:aa:c9:d1:a2:65:8b:1b:9d:4f:6b:a2: 75:36:47:64:6b:11:69:4b:60:5e:13:32:04:39:e7:60:af:38: bb:bb:43:30:6d:9d:bc:80:12:25:bb:d2:ee:bd:63:57:7b:41: 53:68:a1:97:08:48:15:00:0c:2b:6a:b6:e7:bd:92:57:8e:5d: 1c:36:12:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSmbonzs4jFb30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWI2ZDc0NjQtNjkzNC00NGFiLWI0YWEtZmZlMDIwNGFlMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHxYu4SZVWhhvys87D7PO7KkWBiVlTGv7V68 gTkUKg1XpFgvHuk4BWRUxNAh2fjiL9bMAqK2xX2CYvo9yDCrOLE/ZNjz1O6FXel6 +Yv/eLUB0hYQLOKXJEvmhc3YovxjT68pO94zXQrrp/ivhYMkPQl/OiB2DTMiD3Tu cdbMOXvI5nV1JDkfjSCuO+SwqUcTDtiuCAsjIKsR8SU+VWNPQldG1XpI0fHqa/cU q72W/KRcZspJGNWZwjNwK+0ZZaN21oOaHw/U9XNrIXHfZdSdfm06Nb3pdZXtv+6e oKEudCZRmCEwHE7ANfiq2d7VRLNxRQ4KD5fEbGBxu5gQHabAewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApBcU141OLYOXQA/vOnkA4lrTdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTRlNWQyZjctMWU5Mi0z NTIyLWJmZmMtNzZiMGUyNmU5NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS0YiSIqP0oqLtuw6Mx7xV8wLUsFi67nmvMkHi1sW2HyTlvtnhP2TWJ DUMwMQr60JgzCSlzwiNqiX17hvIQXX9Co5BXmPMW9GDXebStuySCN34QUYqEec5O UneROjeyuyGXSc5YArPeu7i/UpbZIupq4PrzUYn8OhWEx/rirmn/USbmyGFHlSgh 5nWIFOzxWiKf2tDUgpLVqCfWCYYiA8JfaPDYh0qM4Gm9Pb/9ctiLiAM8mC+TKVyP jNSqydGiZYsbnU9ronU2R2RrEWlLYF4TMgQ552CvOLu7QzBtnbyAEiW70u69Y1d7 QVNooZcISBUADCtqtue9kleOXRw2El0= -----END CERTIFICATE-----Generated at Sat Apr 5 13:07:53 2025 by rpki-client