$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10008147-5b7d-388a-a1e6-699a4050b99d.roa File: 10008147-5b7d-388a-a1e6-699a4050b99d.roa (raw, json) Hash identifier: vGkkwMboErW+tl1szOzTjhieRCvafqo+E4Q1yWAUTD8= Subject key identifier: 38:44:A3:38:0C:5C:77:33:A3:37:65:5E:43:F7:E5:1E:1E:CC:5C:FF Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164FC8EBB422DD060AD6F00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10008147-5b7d-388a-a1e6-699a4050b99d.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 172.252.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fc:8e:bb:42:2d:d0:60:ad:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=11f6050f-98d0-4257-acf8-bc9309cc4226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:d7:69:96:4d:1b:0f:9c:28:f5:26:5f:e1: 88:58:5b:50:21:a5:c3:64:d0:61:4d:f6:f6:bc:1a: 08:a7:b9:73:d4:bd:92:16:e4:6d:cd:cb:38:22:23: 91:73:b4:2b:f3:96:5f:e9:56:1d:50:9c:ee:a2:e4: 23:5a:aa:ae:e1:57:1e:e1:ad:e9:1f:ea:d7:f6:6d: 79:9c:44:a4:67:1a:24:18:70:0b:02:c3:c5:9e:5b: ab:ae:c1:33:64:b3:5d:03:f9:05:c9:aa:99:2b:ef: a1:2a:73:f9:f2:5d:0f:b6:61:8b:0e:bf:e6:60:e0: a3:ef:4d:89:15:f4:a2:af:af:b6:07:5e:5d:4f:73: 96:75:b2:ad:cb:f3:4a:d0:c1:02:b0:53:bf:d5:27: c7:18:ef:9f:b1:f2:04:0c:26:9c:35:32:ec:ba:62: 27:8b:71:07:36:fd:94:f4:67:a9:3e:24:ce:dc:a9: f4:f0:3b:dd:4d:48:84:f2:5f:77:a8:e6:fa:ed:e0: c0:99:7d:15:99:a2:71:13:50:0a:3d:50:63:60:69: 6c:b4:f2:be:f8:21:1f:9d:01:ad:ed:41:f8:68:64: 7c:0c:80:fe:27:bc:7a:cf:ae:17:dd:86:01:46:9a: 3f:d8:44:49:b4:a3:1c:51:af:dd:61:f4:7a:49:27: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:A3:38:0C:5C:77:33:A3:37:65:5E:43:F7:E5:1E:1E:CC:5C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10008147-5b7d-388a-a1e6-699a4050b99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:2e:95:fc:21:04:6d:6e:20:4c:98:67:54:a6:d8:fc:fa:33: 83:12:98:6c:26:3c:40:49:e7:cd:f9:40:00:d9:76:93:b2:86: 5c:5e:5b:d2:86:53:3f:d6:8f:46:96:96:53:5a:33:01:55:4a: 11:c6:70:dd:df:f9:97:b9:d3:9f:37:b5:58:4e:5e:af:cd:74: 5a:be:f3:16:3b:74:de:59:d5:26:1e:d9:66:65:bf:46:67:0e: e5:9b:ef:d7:5d:47:f3:f6:a4:cb:c9:fb:01:c6:ce:90:13:08: 4f:0c:c0:69:a8:d9:f7:66:e4:1b:29:71:e7:a2:2d:cd:02:da: ea:3b:73:3a:7f:90:bc:a5:ed:27:7b:4a:ee:f9:bc:10:ba:7d: 54:2a:8d:c3:c4:f0:96:4a:f2:58:23:59:e9:fb:61:04:60:2d: 0a:b3:01:a2:14:2c:64:28:80:f4:e7:8d:3b:8a:28:35:a2:48: 47:00:ee:2e:9b:d8:24:df:15:76:be:d4:5f:7b:92:4d:e6:5c: 8b:3e:44:26:4c:92:2d:5e:f6:c3:00:1c:f9:46:28:83:c4:1f: 12:cb:73:8c:79:09:a6:17:73:94:0c:e0:74:04:a9:0f:1d:98: f7:77:7b:7f:2c:ef:3e:2c:2b:68:24:6e:fe:e2:a7:3e:be:da: 3b:fe:23:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPyOu0It0GCtbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MTFmNjA1MGYtOThkMC00MjU3LWFjZjgtYmM5MzA5Y2M0MjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMrXaZZNGw+cKPUmX+GIWFtQIaXDZNBhTfb2 vBoIp7lz1L2SFuRtzcs4IiORc7Qr85Zf6VYdUJzuouQjWqqu4Vce4a3pH+rX9m15 nESkZxokGHALAsPFnlurrsEzZLNdA/kFyaqZK++hKnP58l0PtmGLDr/mYOCj702J FfSir6+2B15dT3OWdbKty/NK0MECsFO/1SfHGO+fsfIEDCacNTLsumIni3EHNv2U 9GepPiTO3Kn08DvdTUiE8l93qOb67eDAmX0VmaJxE1AKPVBjYGlstPK++CEfnQGt 7UH4aGR8DID+J7x6z64X3YYBRpo/2ERJtKMcUa/dYfR6SSfZ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhEozgMXHczozdlXkP35R4ezFz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTAwMDgxNDctNWI3ZC0z ODhhLWExZTYtNjk5YTQwNTBiOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUulfwhBG1uIEyYZ1Sm2Pz6M4MSmGwmPEBJ5835QADZdpOyhlxeW9KG Uz/Wj0aWllNaMwFVShHGcN3f+Ze50583tVhOXq/NdFq+8xY7dN5Z1SYe2WZlv0Zn DuWb79ddR/P2pMvJ+wHGzpATCE8MwGmo2fdm5BspceeiLc0C2uo7czp/kLyl7Sd7 Su75vBC6fVQqjcPE8JZK8lgjWen7YQRgLQqzAaIULGQogPTnjTuKKDWiSEcA7i6b 2CTfFXa+1F97kk3mXIs+RCZMki1e9sMAHPlGKIPEHxLLc4x5CaYXc5QM4HQEqQ8d mPd3e38s7z4sK2gkbv7ipz6+2jv+I6A= -----END CERTIFICATE-----Generated at Sun May 11 15:56:57 2025 by rpki-client