$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa File: 0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa (raw, json) Hash identifier: HiKMpxUr6TQoMFtA7HHd5iHLVVsn1B5UgZh4QMjlpuE= Subject key identifier: 00:53:D6:BF:E0:B0:4F:B2:44:50:A3:25:08:8E:E1:07:9F:95:3D:8D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858498A3455710662D6E25D783880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 18779 IP address blocks: 172.120.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:55:71:06:62:d6:e2:5d:78:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=c9eba3ca-316e-4512-ba17-f1e744955314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:52:91:f2:b1:6c:1c:7d:ea:26:b9:59:04: 46:2e:95:80:dc:9d:6c:8e:7b:fd:c1:82:a0:27:84: 9e:8b:a5:cb:6d:4e:4e:57:65:2b:54:44:df:f3:81: 2c:b1:fc:2c:ef:af:47:e2:e2:0a:75:e2:4e:38:50: 26:8f:65:f8:34:c7:a0:fc:b9:67:37:bb:5e:ce:b2: 5b:eb:d9:c9:53:58:b5:39:f7:a6:46:f0:e3:2c:bc: ac:13:5d:bb:e8:0f:1a:21:b3:37:6c:91:5c:0e:af: 5c:cc:6b:21:2b:46:51:84:e6:25:de:4e:d5:71:9b: c5:f7:e2:9e:5e:43:89:15:56:f7:70:f6:4f:71:f6: fa:e4:92:1e:89:0e:60:0a:95:63:18:84:e9:21:d7: bf:48:52:c1:9d:20:70:1f:03:fa:73:07:cb:c0:34: 4a:56:82:f5:f0:f6:7e:9a:53:81:37:f1:c9:98:3a: 92:5c:44:75:09:03:b8:c7:ad:b2:66:96:ae:80:08: 08:06:f4:a7:63:a5:58:0e:47:63:6e:f5:b3:0e:63: 41:62:9a:a1:62:44:67:d3:a0:9a:0d:bf:ea:cb:86: 38:87:df:4d:3a:3a:ae:9a:3d:5c:85:1c:f4:0b:07: a1:99:70:21:d3:79:ca:8f:10:73:c7:5f:82:30:bd: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:D6:BF:E0:B0:4F:B2:44:50:A3:25:08:8E:E1:07:9F:95:3D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:23:43:80:87:22:26:57:02:4c:d9:60:0e:5f:03:bd:90:c9: f2:94:ed:30:f1:24:3f:3a:16:34:3f:77:fe:f2:3a:16:71:aa: 91:1b:f6:61:92:ae:f7:1e:7c:29:67:2f:b6:7b:52:52:d7:37: f5:13:b1:32:cd:80:b1:7a:ce:1b:93:51:a2:72:65:5b:99:01: f1:63:75:da:9c:40:dc:c1:94:84:f1:7e:9e:6b:b1:93:43:24: 8b:be:3b:a2:2a:70:e8:5b:da:22:74:e8:51:21:5a:36:2b:f8: 04:69:e3:3a:f7:b7:67:5f:96:37:92:b0:fc:50:fe:ef:98:f1: aa:68:e3:e0:c5:0c:f3:3e:ed:15:6d:dc:26:18:49:5f:ab:54: 5b:14:25:8e:e0:0e:d5:77:bd:e0:15:da:1c:f1:da:2b:1b:dc: 34:d5:58:98:5d:76:03:50:df:3e:b9:24:f2:44:a1:61:03:aa: 7c:30:f1:d6:25:1e:1d:ee:38:c5:f9:39:9c:e1:05:97:20:3c: f2:40:7c:8b:36:e1:c0:77:13:f8:36:64:fe:90:66:a3:50:a7: 6a:42:eb:c3:69:96:a7:a8:69:a7:1c:07:f6:df:ef:cb:6a:f9: 17:95:e2:0c:4d:ea:17:1f:05:06:ba:98:81:43:53:c9:06:ce: 21:0e:a2:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNFVxBmLW4l14OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzllYmEzY2EtMzE2ZS00NTEyLWJhMTctZjFlNzQ0OTU1MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXdSkfKxbBx96ia5WQRGLpWA3J1sjnv9wYKg J4Sei6XLbU5OV2UrVETf84Essfws769H4uIKdeJOOFAmj2X4NMeg/LlnN7tezrJb 69nJU1i1OfemRvDjLLysE1276A8aIbM3bJFcDq9czGshK0ZRhOYl3k7VcZvF9+Ke XkOJFVb3cPZPcfb65JIeiQ5gCpVjGITpIde/SFLBnSBwHwP6cwfLwDRKVoL18PZ+ mlOBN/HJmDqSXER1CQO4x62yZpaugAgIBvSnY6VYDkdjbvWzDmNBYpqhYkRn06Ca Db/qy4Y4h99NOjqumj1chRz0CwehmXAh03nKjxBzx1+CML2lRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABT1r/gsE+yRFCjJQiO4QeflT2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGQxYTg3YTAtZjU1Zi0z NjkxLWI2YzktMThmOTViZWZmYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAjQ4CHIiZXAkzZYA5fA72QyfKU7TDxJD86FjQ/d/7yOhZxqpEb9mGS rvcefClnL7Z7UlLXN/UTsTLNgLF6zhuTUaJyZVuZAfFjddqcQNzBlITxfp5rsZND JIu+O6IqcOhb2iJ06FEhWjYr+ARp4zr3t2dfljeSsPxQ/u+Y8apo4+DFDPM+7RVt 3CYYSV+rVFsUJY7gDtV3veAV2hzx2isb3DTVWJhddgNQ3z65JPJEoWEDqnww8dYl Hh3uOMX5OZzhBZcgPPJAfIs24cB3E/g2ZP6QZqNQp2pC68NplqeoaaccB/bf78tq +ReV4gxN6hcfBQa6mIFDU8kGziEOokM= -----END CERTIFICATE-----Generated at Fri May 9 23:48:53 2025 by rpki-client