$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f793647-a65a-35a0-95e1-8e845326fdaa.roa File: 0f793647-a65a-35a0-95e1-8e845326fdaa.roa (raw, json) Hash identifier: sZYfYYDI5V6GU03SqWvAk1qcViYUfMAFdeeUhsbkv9U= Subject key identifier: FC:CB:47:CE:4D:3A:6E:D2:F9:FC:B1:ED:85:44:B5:77:2E:38:86:F5 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A276C1BC03CB97B165D80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f793647-a65a-35a0-95e1-8e845326fdaa.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:27:6c:1b:c0:3c:b9:7b:16:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=ae9163b3-82ee-42c9-ad19-2a561097ce2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:84:2c:c4:18:00:31:62:fc:bb:b6:d5:3d:23: 8e:f2:37:60:3f:f6:23:29:48:e4:77:18:59:5f:7b: 6a:f7:85:2e:04:00:a5:d5:cc:63:37:83:1d:07:36: c5:17:74:76:f2:b1:ab:b1:eb:44:b0:8b:1e:1e:e2: 62:60:15:df:95:20:6f:97:e5:72:5f:f8:bd:ff:1a: 6f:c0:35:81:f2:5f:e1:53:94:d5:e7:67:cb:10:e5: 4c:08:cb:c3:8c:26:44:25:fd:7f:c0:5c:17:8d:1d: 2a:8e:14:a0:dd:5a:d5:3c:56:f4:05:29:af:88:4b: 35:b5:54:97:53:71:e8:c5:d2:83:d7:6e:3e:6e:f6: ea:3e:bb:b5:7d:87:38:c8:fb:73:b4:dd:cb:52:ff: 64:a2:c6:88:79:b4:d0:d2:16:d8:ee:db:a7:d3:e2: f2:6a:ba:cb:21:75:43:5f:88:8f:95:0a:12:13:40: c3:d3:6d:29:5c:3c:a3:11:7a:ca:d0:47:5d:e1:6c: a3:d5:4b:44:ef:bf:b1:2c:7f:cd:86:9c:0c:9c:24: 9a:36:ab:00:32:54:2d:a0:77:50:f1:b4:e8:7a:d2: 13:78:69:d2:52:0a:6f:af:06:66:0d:7d:ea:1e:28: 85:83:a5:03:c1:61:22:df:0b:d7:46:c5:e5:25:c0: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CB:47:CE:4D:3A:6E:D2:F9:FC:B1:ED:85:44:B5:77:2E:38:86:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f793647-a65a-35a0-95e1-8e845326fdaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:11:1c:c1:bc:1b:cc:ea:88:f6:87:0d:d6:e4:ab:cb:b6:5f: 86:f9:c6:42:98:9c:e6:7c:6c:b0:cd:1e:54:94:ee:84:80:72: 09:7a:34:82:3c:de:a1:c7:2e:87:53:54:d6:eb:33:46:d1:67: 3b:04:ad:21:8e:eb:50:67:39:f6:85:2e:a5:0d:88:5d:2e:02: 4e:14:61:34:6d:7b:27:53:5b:2a:dc:7e:2b:f9:6b:e2:b0:7d: e6:4c:a3:eb:6b:38:7c:eb:90:2f:ef:7c:c2:50:35:f4:4b:e0: 44:d7:77:38:cd:9b:69:4e:13:08:d3:e6:04:a8:93:ef:2f:27: d0:1f:a8:26:21:d5:30:ba:8f:1b:fb:a8:ae:b6:3e:a7:56:c7: 42:85:79:48:82:96:c8:98:6f:22:17:1d:74:9e:d0:1f:56:84: a4:4b:9f:14:f0:d4:12:4e:18:51:cf:67:fb:3a:de:b6:72:0c: b3:79:87:fa:76:d0:59:19:c6:0f:5b:f4:c6:35:ce:bd:68:87: ca:8a:e9:da:fe:e8:19:41:b4:25:4c:a8:08:6d:57:02:25:b1: ae:ab:0e:2f:2f:ab:cf:ac:64:fb:5c:82:db:cf:0b:c7:78:61: 7c:93:4d:97:ba:0d:14:04:78:54:6e:c1:73:93:64:2e:f8:f0: e9:38:df:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eidsG8A8uXsWXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YWU5MTYzYjMtODJlZS00MmM5LWFkMTktMmE1NjEwOTdjZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4QsxBgAMWL8u7bVPSOO8jdgP/YjKUjkdxhZ X3tq94UuBACl1cxjN4MdBzbFF3R28rGrsetEsIseHuJiYBXflSBvl+VyX/i9/xpv wDWB8l/hU5TV52fLEOVMCMvDjCZEJf1/wFwXjR0qjhSg3VrVPFb0BSmviEs1tVSX U3HoxdKD124+bvbqPru1fYc4yPtztN3LUv9kosaIebTQ0hbY7tun0+LyarrLIXVD X4iPlQoSE0DD020pXDyjEXrK0Edd4Wyj1UtE77+xLH/NhpwMnCSaNqsAMlQtoHdQ 8bToetITeGnSUgpvrwZmDX3qHiiFg6UDwWEi3wvXRsXlJcAwXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzLR85NOm7S+fyx7YVEtXcuOIb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGY3OTM2NDctYTY1YS0z NWEwLTk1ZTEtOGU4NDUzMjZmZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQRHMG8G8zqiPaHDdbkq8u2X4b5xkKYnOZ8bLDNHlSU7oSAcgl6NII8 3qHHLodTVNbrM0bRZzsErSGO61BnOfaFLqUNiF0uAk4UYTRteydTWyrcfiv5a+Kw feZMo+trOHzrkC/vfMJQNfRL4ETXdzjNm2lOEwjT5gSok+8vJ9AfqCYh1TC6jxv7 qK62PqdWx0KFeUiClsiYbyIXHXSe0B9WhKRLnxTw1BJOGFHPZ/s63rZyDLN5h/p2 0FkZxg9b9MY1zr1oh8qK6dr+6BlBtCVMqAhtVwIlsa6rDi8vq8+sZPtcgtvPC8d4 YXyTTZe6DRQEeFRuwXOTZC748Ok43+k= -----END CERTIFICATE-----Generated at Sun May 11 10:20:27 2025 by rpki-client