$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5eb4113-f605-3493-a00d-deeb1a386da3.roa File: f5eb4113-f605-3493-a00d-deeb1a386da3.roa (raw, json) Hash identifier: KwrADZYOFfRJZVu9wGyvquEuscU/oyj2xmsJIB2gYEo= Subject key identifier: 5C:F0:8C:9C:D8:68:97:86:5C:5E:E6:E1:E2:0E:16:A0:4E:93:43:33 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848F200FB1C94F11D808A53B000 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5eb4113-f605-3493-a00d-deeb1a386da3.roa Signing time: Thu 20 Feb 2025 12:34:29 +0000 ROA not before: Thu 20 Feb 2025 12:34:29 +0000 ROA not after: Wed 21 May 2025 11:34:29 +0000 asID: 18779 IP address blocks: 172.252.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:00:fb:1c:94:f1:1d:80:8a:53:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 20 12:34:29 2025 GMT Not After : May 21 11:34:29 2025 GMT Subject: CN=fd76583b-9947-4d25-9edb-16bd54a2a9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:59:45:46:8f:91:32:bf:25:a8:4a:7b:06: c5:3e:0d:b4:1e:c7:b1:08:2f:96:91:3a:93:b1:d2: 59:1a:7c:6d:aa:96:aa:6a:ea:9a:47:22:a4:2c:85: d8:b9:f1:7a:72:7f:a4:b8:0e:77:e4:45:f1:6d:a9: e8:e7:06:ab:88:8b:22:c5:7b:a4:1a:43:7e:75:37: 47:cc:42:22:d3:47:61:c3:93:21:dc:1f:2c:1d:e8: 03:ba:f8:e4:77:e5:3f:c2:56:13:95:c6:cc:dd:e7: db:3d:17:ce:32:7a:71:93:78:d0:b6:89:93:9c:8a: 6d:62:76:23:d0:4e:dd:3a:e7:69:4a:6a:e1:94:7e: 40:a8:51:b6:74:d6:55:1a:0d:34:7f:a3:97:e4:f7: fe:f1:24:0e:c9:6a:3b:e8:1a:54:ec:67:bb:3e:85: d6:8d:d9:ad:64:49:63:fa:52:3c:05:c7:97:f4:1e: 3d:93:7f:c2:c7:9d:a5:aa:47:cf:73:51:9d:11:fa: 9c:17:4a:d1:04:00:11:f2:45:ec:b9:e1:aa:fe:bc: 0a:14:dc:f6:4b:e8:95:4e:56:ea:dd:1b:8f:0a:9f: 2d:a9:9b:53:6d:84:cf:b7:59:66:aa:d2:22:f7:2b: 15:ec:74:b3:17:49:af:ac:14:08:ad:15:70:f2:93: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:8C:9C:D8:68:97:86:5C:5E:E6:E1:E2:0E:16:A0:4E:93:43:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5eb4113-f605-3493-a00d-deeb1a386da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b4:9d:ea:1a:78:b7:09:56:a4:2a:b2:27:a5:f1:80:08:e5: e2:a3:6c:f8:4e:af:f7:ec:42:bc:d2:73:f8:24:a2:cd:20:67: be:f9:29:9b:cb:c8:bd:63:8d:e8:1f:8b:9a:5d:41:d8:b3:50: 75:ac:99:a5:46:d8:66:a6:46:cf:6b:16:c7:13:a1:1a:16:e3: a6:70:df:f0:c0:8f:73:3d:5d:cc:34:25:9c:79:16:7a:8d:ab: 93:23:27:56:1c:da:a5:d3:9b:2f:97:40:44:c6:c1:dc:95:7f: 4b:a1:b0:48:ad:76:ce:28:f9:d3:f4:08:f3:67:f2:75:5e:74: 67:66:66:f2:ad:50:16:fa:4f:a3:a8:06:58:d1:89:8b:ab:de: 47:dc:8a:93:f5:5b:9f:7c:c7:74:7d:0b:fa:28:47:88:e6:14: 52:c1:4a:60:f6:4b:b2:b2:ec:62:bf:39:d1:a1:ee:04:23:99: b8:ff:9b:d7:5f:0a:d8:65:c6:54:0e:59:99:2e:b4:0b:f8:44: d2:cc:f5:d7:58:ff:d7:08:15:96:24:25:4a:ca:74:9c:0b:e6: de:01:1a:23:b0:10:76:a1:20:48:85:26:73:20:c9:25:47:1b: 24:80:fc:69:99:48:8f:b3:d9:5f:e3:25:32:8d:03:e5:77:28: db:c9:85:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyAPsclPEdgIpTsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyMDEyMzQyOVoXDTI1MDUyMTExMzQyOVowLzEtMCsGA1UEAxMk ZmQ3NjU4M2ItOTk0Ny00ZDI1LTllZGItMTZiZDU0YTJhOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSVZRUaPkTK/JahKewbFPg20HsexCC+WkTqT sdJZGnxtqpaqauqaRyKkLIXYufF6cn+kuA535EXxbano5wariIsixXukGkN+dTdH zEIi00dhw5Mh3B8sHegDuvjkd+U/wlYTlcbM3efbPRfOMnpxk3jQtomTnIptYnYj 0E7dOudpSmrhlH5AqFG2dNZVGg00f6OX5Pf+8SQOyWo76BpU7Ge7PoXWjdmtZElj +lI8BceX9B49k3/Cx52lqkfPc1GdEfqcF0rRBAAR8kXsueGq/rwKFNz2S+iVTlbq 3RuPCp8tqZtTbYTPt1lmqtIi9ysV7HSzF0mvrBQIrRVw8pOQzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzwjJzYaJeGXF7m4eIOFqBOk0MzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjVlYjQxMTMtZjYwNS0z NDkzLWEwMGQtZGVlYjFhMzg2ZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD20neoaeLcJVqQqsiel8YAI5eKjbPhOr/fsQrzSc/gkos0gZ775KZvL yL1jjegfi5pdQdizUHWsmaVG2GamRs9rFscToRoW46Zw3/DAj3M9Xcw0JZx5FnqN q5MjJ1Yc2qXTmy+XQETGwdyVf0uhsEitds4o+dP0CPNn8nVedGdmZvKtUBb6T6Oo BljRiYur3kfcipP1W598x3R9C/ooR4jmFFLBSmD2S7Ky7GK/OdGh7gQjmbj/m9df CthlxlQOWZkutAv4RNLM9ddY/9cIFZYkJUrKdJwL5t4BGiOwEHahIEiFJnMgySVH GySA/GmZSI+z2V/jJTKNA+V3KNvJhcY= -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:14 2025 by rpki-client