$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa File: fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa (raw, json) Hash identifier: mOEHvgPHcYrcDe+XRaTbaAfSUpD1vsG9sf30o6hYYrs= Subject key identifier: 4D:38:8E:06:F6:F5:EB:F8:54:74:1D:37:13:1C:B9:CC:57:2E:FC:F1 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848AA0742012F39E70E29871B00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa Signing time: Sat 25 Jan 2025 17:48:56 +0000 ROA not before: Sat 25 Jan 2025 17:48:56 +0000 ROA not after: Fri 25 Apr 2025 16:48:56 +0000 asID: 18779 IP address blocks: 172.121.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:07:42:01:2f:39:e7:0e:29:87:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 25 17:48:56 2025 GMT Not After : Apr 25 16:48:56 2025 GMT Subject: CN=de6c82bb-43ca-4240-bf84-6c34d5ad1449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:6f:ff:1f:39:a9:70:c2:c6:a5:fd:54:98: b5:eb:f4:90:e2:07:47:0d:32:1a:94:3a:eb:7b:6a: e2:7b:d6:70:43:9e:7b:7e:24:90:9c:4e:b5:d7:d7: 36:d1:c6:23:6e:84:78:fd:04:7d:cc:a7:d1:f3:b3: 9f:e7:32:da:b4:4f:07:df:e6:ec:c1:51:82:bd:8e: 91:e6:c0:bc:6c:c3:4a:58:8e:ee:50:a2:c4:1c:fd: 5c:6b:82:a4:80:f5:06:f7:45:73:a9:f8:9e:c1:4d: 93:21:5b:7e:ea:99:5a:5d:c7:97:75:6b:dc:74:34: cf:8f:fe:3a:c3:4c:20:80:54:b4:46:6a:90:15:6f: 83:94:b0:ba:d9:a7:2e:c2:64:34:12:f8:6e:3b:b4: 02:ba:bb:48:f7:c2:90:be:5e:30:0b:4a:9b:01:75: 00:a8:7d:23:1c:44:ad:98:a5:30:f0:e2:ec:3d:f8: fa:7e:0f:f1:ef:19:43:9c:be:55:22:56:b8:16:e8: 9e:79:da:33:16:bb:f8:06:4e:32:5f:7f:69:b0:b7: 7b:0d:7b:dd:19:8d:b0:6c:e6:24:07:d8:46:78:7e: d9:fa:62:24:ba:3d:14:7c:73:72:b2:f3:8e:a3:03: 31:e9:0e:22:d6:5f:74:21:b9:cb:8c:1a:5d:fe:a0: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:8E:06:F6:F5:EB:F8:54:74:1D:37:13:1C:B9:CC:57:2E:FC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c6:37:37:8f:43:eb:42:b2:17:98:44:91:c6:be:83:74:7c: 39:a8:51:f3:11:54:c4:92:a0:47:3b:4f:53:b8:2e:33:47:a1: 26:3f:0a:db:13:4e:77:f4:47:93:1f:8f:1a:04:bd:5f:e1:db: 31:ff:1f:cc:24:14:a6:38:00:3b:ea:ea:c5:e8:fa:40:29:33: 8f:95:ca:cc:fb:3c:8a:79:6d:a0:5b:31:b8:16:02:d9:ff:39: 62:fe:e5:70:b4:40:ec:b9:fd:ac:b3:7f:59:b6:67:2c:be:7b: 69:f7:7d:2c:05:b8:1d:60:8a:90:f5:5e:0c:6b:26:b7:78:1f: e3:86:77:8c:27:98:67:a8:63:5d:98:92:8c:ae:40:a2:2e:02: eb:97:87:26:c2:fa:d5:d5:08:8c:4c:e1:09:ae:0e:02:80:9f: ce:bb:76:9b:28:7b:8d:81:8d:3c:a1:6b:10:60:e3:67:11:aa: 28:fb:0e:98:c5:37:28:ff:6f:e7:49:4e:85:7c:f0:36:bb:7c: 9c:86:35:d0:bf:29:ed:54:58:e5:b6:c7:c3:e9:59:3b:74:29: 6a:1c:03:c5:c9:cb:d8:e3:7e:34:fb:17:78:b6:50:87:e3:6a: 86:3c:57:c3:ed:b8:99:40:43:31:8d:0b:d6:e1:2a:e1:ac:3d: b0:4f:9d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiqB0IBLznnDimHGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyNTE3NDg1NloXDTI1MDQyNTE2NDg1NlowLzEtMCsGA1UEAxMk ZGU2YzgyYmItNDNjYS00MjQwLWJmODQtNmMzNGQ1YWQxNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooJv/x85qXDCxqX9VJi16/SQ4gdHDTIalDrr e2rie9ZwQ557fiSQnE6119c20cYjboR4/QR9zKfR87Of5zLatE8H3+bswVGCvY6R 5sC8bMNKWI7uUKLEHP1ca4KkgPUG90VzqfiewU2TIVt+6plaXceXdWvcdDTPj/46 w0wggFS0RmqQFW+DlLC62acuwmQ0EvhuO7QCurtI98KQvl4wC0qbAXUAqH0jHESt mKUw8OLsPfj6fg/x7xlDnL5VIla4FuieedozFrv4Bk4yX39psLd7DXvdGY2wbOYk B9hGeH7Z+mIkuj0UfHNysvOOowMx6Q4i1l90IbnLjBpd/qDt6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE04jgb29ev4VHQdNxMcucxXLvzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmFkMWJmNGEtMzA2Mi0z NTBhLTgzMGQtY2ExYmIwZTljOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXGNzePQ+tCsheYRJHGvoN0fDmoUfMRVMSSoEc7T1O4LjNHoSY/CtsT Tnf0R5MfjxoEvV/h2zH/H8wkFKY4ADvq6sXo+kApM4+Vysz7PIp5baBbMbgWAtn/ OWL+5XC0QOy5/ayzf1m2Zyy+e2n3fSwFuB1gipD1XgxrJrd4H+OGd4wnmGeoY12Y koyuQKIuAuuXhybC+tXVCIxM4QmuDgKAn867dpsoe42BjTyhaxBg42cRqij7DpjF Nyj/b+dJToV88Da7fJyGNdC/Ke1UWOW2x8PpWTt0KWocA8XJy9jjfjT7F3i2UIfj aoY8V8PtuJlAQzGNC9bhKuGsPbBPnV8= -----END CERTIFICATE-----Generated at Fri Apr 11 23:06:00 2025 by rpki-client