$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fde6e9ad-e432-317e-9a7d-ca7b097e82de.roa File: fde6e9ad-e432-317e-9a7d-ca7b097e82de.roa (raw, json) Hash identifier: QxYzqTcMHYUAypGIxacPIKuttpDAssbEq5nJzS1JHts= Subject key identifier: A7:F3:98:FC:00:40:CD:17:61:28:FD:AE:9D:99:56:B1:E6:1A:69:68 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848D64127E624BC3E98E3DB1580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fde6e9ad-e432-317e-9a7d-ca7b097e82de.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 204957 IP address blocks: 172.120.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:27:e6:24:bc:3e:98:e3:db:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=91e2d200-648a-4b6c-9210-3b4c489be87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:e5:db:39:75:94:1d:70:80:93:02:01:35: 1a:e1:e8:51:9c:5a:50:73:9a:2c:ca:3a:b5:45:6d: 6e:a8:72:62:44:33:95:8f:02:d3:66:a4:39:d2:ed: 13:d4:67:18:1b:6b:06:96:34:2d:28:57:7d:b9:de: 5e:ba:ff:81:57:55:b2:98:73:b0:3b:c1:ff:74:09: f1:09:c4:40:f1:42:bc:02:e5:51:9c:2d:ac:9d:67: 7b:fd:3f:7e:ec:3e:95:f5:45:ce:86:f0:da:24:0d: 0f:e4:12:12:47:f4:2e:6b:29:67:05:a5:56:ef:96: 8f:90:79:9c:0d:27:b1:77:c3:ae:7d:e2:c0:de:91: a3:87:ef:bd:16:6e:fc:10:8b:95:20:92:00:04:af: d6:6b:e4:89:0b:1a:41:65:33:13:7a:59:5f:12:fe: 5f:91:fd:65:01:14:06:5e:29:5a:52:e9:f9:9d:3c: bd:bc:d8:e5:ea:01:13:1f:1f:cd:22:8b:36:ac:33: 86:62:b0:06:50:8c:78:70:21:23:32:4a:84:62:36: 36:8e:17:0a:e9:b6:de:3e:c3:76:e7:94:b6:23:35: 32:77:43:5a:64:a8:16:f9:ea:f0:5e:e5:0a:50:c8: 19:30:df:9f:19:df:7e:61:90:eb:8f:39:a3:1e:25: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F3:98:FC:00:40:CD:17:61:28:FD:AE:9D:99:56:B1:E6:1A:69:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fde6e9ad-e432-317e-9a7d-ca7b097e82de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:12:73:8f:4d:9c:7e:72:fa:a3:89:29:df:40:f9:b8:ce:ee: 2f:52:b1:f2:30:15:59:7b:ac:33:4b:36:8a:8f:49:f7:8f:94: cc:72:c2:25:50:43:d9:7c:62:e8:a6:8f:d4:f7:cc:b2:06:c9: 50:f1:bf:84:8a:17:26:df:63:3c:ea:70:16:15:af:db:75:ac: 52:e5:8d:46:a9:3a:85:20:0b:6a:b2:ba:6f:f7:0d:e6:a8:f8: 19:f0:63:05:eb:e4:da:fe:21:94:0c:d9:88:3e:94:7e:15:c0: 3c:45:bb:30:45:f7:71:c2:9a:54:57:39:ea:fe:73:0b:fc:0e: 0a:b3:58:a9:8b:52:d1:b2:fd:e0:d9:09:a9:d4:0f:f7:ae:f1: 54:6b:6e:68:4c:8f:67:45:70:23:67:d4:7d:6b:3f:8e:95:2f: 8e:36:d0:bc:54:36:1c:b1:e4:41:5b:4c:8e:4a:ed:fc:ab:48: 72:69:b9:75:aa:a4:3c:97:e5:9b:2d:84:75:49:ff:1e:95:03: 13:0c:03:47:31:fa:9f:2f:5f:3a:d5:fc:a6:14:4f:73:ce:e1: 08:1f:ca:fd:67:b6:93:f6:d3:6e:82:02:61:e0:d2:51:59:af: 44:08:eb:98:0e:2f:56:5f:38:10:3e:ec:1a:f7:fc:8a:34:34: 50:ed:58:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSfmJLw+mOPbFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTFlMmQyMDAtNjQ4YS00YjZjLTkyMTAtM2I0YzQ4OWJlODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDzl2zl1lB1wgJMCATUa4ehRnFpQc5osyjq1 RW1uqHJiRDOVjwLTZqQ50u0T1GcYG2sGljQtKFd9ud5euv+BV1WymHOwO8H/dAnx CcRA8UK8AuVRnC2snWd7/T9+7D6V9UXOhvDaJA0P5BISR/QuaylnBaVW75aPkHmc DSexd8OufeLA3pGjh++9Fm78EIuVIJIABK/Wa+SJCxpBZTMTellfEv5fkf1lARQG XilaUun5nTy9vNjl6gETHx/NIos2rDOGYrAGUIx4cCEjMkqEYjY2jhcK6bbePsN2 55S2IzUyd0NaZKgW+erwXuUKUMgZMN+fGd9+YZDrjzmjHiXYiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfzmPwAQM0XYSj9rp2ZVrHmGmloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmRlNmU5YWQtZTQzMi0z MTdlLTlhN2QtY2E3YjA5N2U4MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHijMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgSc49NnH5y+qOJKd9A+bjO7i9SsfIwFVl7rDNLNoqPSfePlMxywiVQ Q9l8Yuimj9T3zLIGyVDxv4SKFybfYzzqcBYVr9t1rFLljUapOoUgC2qyum/3Deao +BnwYwXr5Nr+IZQM2Yg+lH4VwDxFuzBF93HCmlRXOer+cwv8DgqzWKmLUtGy/eDZ CanUD/eu8VRrbmhMj2dFcCNn1H1rP46VL4420LxUNhyx5EFbTI5K7fyrSHJpuXWq pDyX5ZsthHVJ/x6VAxMMA0cx+p8vXzrV/KYUT3PO4Qgfyv1ntpP2026CAmHg0lFZ r0QI65gOL1ZfOBA+7Br3/Io0NFDtWNE= -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:18 2025 by rpki-client