$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa File: fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa (raw, json) Hash identifier: QUYRMFmskvN7TSpzQxkg+Oca/Nd8LNiB/w8Ci0bi56k= Subject key identifier: 14:D8:99:39:0D:62:2A:1F:33:4D:64:AA:93:98:B0:6E:7D:04:A3:B1 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848BFEB94A84D83F1B45E4C5880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 3257 IP address blocks: 172.121.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:94:a8:4d:83:f1:b4:5e:4c:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=f4a3502c-100d-4de1-b6a1-a68a076c90e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:02:6d:12:de:31:08:3b:c3:f4:cb:a5:3c:3d: f4:f0:02:13:04:af:f8:2f:8e:e9:00:63:fd:31:7c: a0:10:e2:16:62:9e:4c:07:bf:9b:44:34:27:42:20: d2:6b:83:db:d2:17:41:f8:c4:5b:63:21:c1:f5:7c: 9d:6c:c3:1e:cd:dc:d2:e5:30:28:bb:d9:f3:52:7c: a3:63:fa:5b:51:63:b9:be:9d:80:97:37:69:46:f8: 7e:cc:0b:26:91:4e:2a:a7:cc:c9:75:bf:34:1d:71: 49:03:c3:57:1f:98:9d:e2:34:4a:82:48:8b:e6:d7: c4:3e:91:66:4a:3f:27:5c:27:a4:00:49:66:b7:2a: 0e:8f:7c:dd:7c:3e:5b:63:c3:90:bd:6a:e1:7c:dc: cd:1c:65:15:90:4b:a0:ea:a2:e0:54:2a:d7:ec:7b: 79:ad:a7:3f:12:49:27:75:0d:e9:13:de:80:ec:39: 4b:86:70:7b:e2:25:68:c3:54:bf:9d:40:f6:65:2c: aa:58:90:3f:6b:18:d0:56:57:8b:99:79:6d:52:8a: 68:da:8f:68:23:0a:ae:db:18:1e:6e:cb:f0:73:02: d8:fd:4e:1d:23:1b:ec:8f:da:a9:e9:ae:a7:9c:b0: 4e:98:9d:1c:7f:21:3a:22:ca:e3:6d:59:35:f6:fa: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D8:99:39:0D:62:2A:1F:33:4D:64:AA:93:98:B0:6E:7D:04:A3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:16:af:ce:24:5e:50:36:b4:f6:fa:7b:e1:bd:0a:c0:c7:b5: 17:e8:2c:c5:83:8b:46:04:dc:5d:89:01:e9:a7:f5:a2:19:82: 54:88:37:0f:4b:bb:39:97:45:0e:1c:6a:47:10:5c:a7:d1:97: c9:62:51:3d:db:47:96:8d:49:f9:eb:49:96:82:fa:a5:24:50: 63:fc:07:21:0b:70:5c:73:81:07:00:19:04:02:1b:29:22:3f: 2a:eb:77:5b:27:e5:7e:a8:33:e6:f3:a0:9d:9a:9c:05:98:6e: 4f:c8:6f:a1:5b:e4:eb:5b:fc:df:54:b2:f9:a8:7e:f8:be:1d: 85:63:06:a8:85:5d:0a:41:0d:4e:f0:80:16:f9:8e:e2:ca:f5: 77:36:c7:83:be:c8:3d:bc:fa:80:42:5d:83:85:81:ba:ad:0a: bc:02:c8:8b:20:bb:13:4b:1d:5b:ad:99:16:7a:9e:f5:6a:5f: 2c:a7:3b:b9:6d:98:65:15:0c:1c:bc:ae:73:17:81:67:5d:a7: 5a:96:d3:5a:3d:c8:b7:a5:71:eb:0e:d3:75:42:02:49:68:af: 2d:6a:05:44:1e:a6:1d:fd:26:84:7a:bf:2c:35:fe:cd:89:dc: 28:3f:28:f1:b1:cb:20:74:aa:7d:43:8d:d4:33:ee:b6:fb:01: 64:41:6d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65SoTYPxtF5MWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZjRhMzUwMmMtMTAwZC00ZGUxLWI2YTEtYTY4YTA3NmM5MGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggJtEt4xCDvD9MulPD308AITBK/4L47pAGP9 MXygEOIWYp5MB7+bRDQnQiDSa4Pb0hdB+MRbYyHB9XydbMMezdzS5TAou9nzUnyj Y/pbUWO5vp2AlzdpRvh+zAsmkU4qp8zJdb80HXFJA8NXH5id4jRKgkiL5tfEPpFm Sj8nXCekAElmtyoOj3zdfD5bY8OQvWrhfNzNHGUVkEug6qLgVCrX7Ht5rac/Ekkn dQ3pE96A7DlLhnB74iVow1S/nUD2ZSyqWJA/axjQVleLmXltUopo2o9oIwqu2xge bsvwcwLY/U4dIxvsj9qp6a6nnLBOmJ0cfyE6IsrjbVk19vpMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTYmTkNYiofM01kqpOYsG59BKOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmRiNzRmMDktNzFmYy0z ZGEzLTlhODUtOWMyMDhhMmRlZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsWr84kXlA2tPb6e+G9CsDHtRfoLMWDi0YE3F2JAemn9aIZglSINw9L uzmXRQ4cakcQXKfRl8liUT3bR5aNSfnrSZaC+qUkUGP8ByELcFxzgQcAGQQCGyki Pyrrd1sn5X6oM+bzoJ2anAWYbk/Ib6Fb5Otb/N9Usvmofvi+HYVjBqiFXQpBDU7w gBb5juLK9Xc2x4O+yD28+oBCXYOFgbqtCrwCyIsguxNLHVutmRZ6nvVqXyynO7lt mGUVDBy8rnMXgWddp1qW01o9yLelcesO03VCAklory1qBUQeph39JoR6vyw1/s2J 3Cg/KPGxyyB0qn1DjdQz7rb7AWRBbfA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:43 2025 by rpki-client