$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa File: 1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa (raw, json) Hash identifier: Ok2LNSBV+2EzHeW3MG/lF/xQ8UAnKPkzvN8izWN8kdI= Subject key identifier: 3F:CF:85:93:84:07:0E:5E:A4:CB:AC:27:61:38:34:19:22:E3:79:5C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A27C0170E211629C72A50 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:27:c0:17:0e:21:16:29:c7:2a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=a2a1d651-5dd7-4f7f-95c8-147459a5e27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:e7:bf:37:88:ae:97:ec:1c:c3:63:51:8b: ca:b8:28:5b:aa:fa:b9:55:b7:a6:ca:48:5a:72:f7: 4b:2b:37:80:63:39:be:c7:ac:3a:b4:6c:c1:61:ca: 29:77:8e:de:23:19:11:71:1b:97:6f:e3:2c:7d:5b: 2e:6b:37:77:62:75:f0:ca:b1:f5:5e:68:5b:36:5f: c9:11:8b:17:47:da:80:cb:ae:b4:a9:d4:69:d1:86: b9:80:6f:05:65:23:8f:15:96:ed:c3:d4:dc:dc:cb: c0:9d:6e:70:3c:db:96:66:bd:58:9e:ad:b1:1a:82: 9d:38:46:5f:81:16:31:de:81:bb:e0:f5:46:71:4b: 11:17:84:e5:f3:2d:46:55:a7:06:f7:7b:64:3b:9b: e4:ba:a9:3c:26:0f:52:48:f1:57:3d:39:9f:62:22: 14:dd:1d:43:b8:e5:35:44:4f:21:5f:b7:14:9f:b9: e9:d5:4d:6d:da:60:38:57:3f:8c:37:84:83:47:ba: 24:e0:aa:75:3e:7e:f6:2e:6b:45:c1:7a:6d:f2:a9: e6:57:ee:68:18:87:47:98:3d:89:33:d1:d7:ee:84: ea:92:e4:85:c6:d7:2c:6a:24:e4:1a:32:16:79:1c: 99:52:0e:09:d9:fc:ad:e0:69:c0:a1:5b:5e:ca:80: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:85:93:84:07:0E:5E:A4:CB:AC:27:61:38:34:19:22:E3:79:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a460074-5cb8-32db-8ec8-fabce4d2f06b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:de:7f:58:de:c1:2e:62:38:fe:38:99:f4:7d:17:74:b3:04: 85:f0:d0:d7:2c:f0:74:90:c9:8e:bb:fa:33:8d:74:b2:69:20: fc:25:db:eb:67:dc:7c:c5:ef:65:38:a3:cc:68:7c:07:bd:f4: 42:c1:5a:dd:21:8f:3a:65:20:ec:84:4f:3a:6e:56:95:31:e2: 92:f3:b8:16:b8:5c:ec:f3:0e:a3:ef:12:d9:8d:87:4e:4e:07: ff:f8:f9:55:aa:cd:a0:bd:6d:25:8a:df:26:89:96:d7:3c:15: 9c:ac:24:86:ab:04:9b:ef:18:f1:76:f8:4f:f6:b1:dd:ac:50: 39:c2:07:36:13:2c:53:e2:01:c0:2b:63:9e:7b:e3:4f:c2:a8: 0f:7d:6f:7e:66:5a:2d:cd:23:e0:ac:fa:35:d2:cc:2d:63:23: e7:7b:2f:f4:be:e8:67:bd:8f:1f:4c:f4:5d:04:e1:06:66:fa: cc:f8:aa:31:1b:86:56:e1:53:0d:b5:4b:95:a6:85:cb:f0:f3: 36:20:b1:6e:82:6c:5c:93:c9:54:69:67:50:5a:0d:73:f6:71: d7:ee:79:f9:78:31:e5:7e:c3:36:78:2d:3c:b6:d9:d5:4d:7f: 62:71:bc:21:a8:d4:39:e1:5d:d2:ad:01:44:d7:14:f1:dd:e1: 5a:4d:02:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eifAFw4hFinHKlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YTJhMWQ2NTEtNWRkNy00ZjdmLTk1YzgtMTQ3NDU5YTVlMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQLnvzeIrpfsHMNjUYvKuChbqvq5Vbemykha cvdLKzeAYzm+x6w6tGzBYcopd47eIxkRcRuXb+MsfVsuazd3YnXwyrH1XmhbNl/J EYsXR9qAy660qdRp0Ya5gG8FZSOPFZbtw9Tc3MvAnW5wPNuWZr1Ynq2xGoKdOEZf gRYx3oG74PVGcUsRF4Tl8y1GVacG93tkO5vkuqk8Jg9SSPFXPTmfYiIU3R1DuOU1 RE8hX7cUn7np1U1t2mA4Vz+MN4SDR7ok4Kp1Pn72LmtFwXpt8qnmV+5oGIdHmD2J M9HX7oTqkuSFxtcsaiTkGjIWeRyZUg4J2fyt4GnAoVteyoCstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/PhZOEBw5epMusJ2E4NBki43lcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWE0NjAwNzQtNWNiOC0z MmRiLThlYzgtZmFiY2U0ZDJmMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnef1jewS5iOP44mfR9F3SzBIXw0Ncs8HSQyY67+jONdLJpIPwl2+tn 3HzF72U4o8xofAe99ELBWt0hjzplIOyETzpuVpUx4pLzuBa4XOzzDqPvEtmNh05O B//4+VWqzaC9bSWK3yaJltc8FZysJIarBJvvGPF2+E/2sd2sUDnCBzYTLFPiAcAr Y55740/CqA99b35mWi3NI+Cs+jXSzC1jI+d7L/S+6Ge9jx9M9F0E4QZm+sz4qjEb hlbhUw21S5Wmhcvw8zYgsW6CbFyTyVRpZ1BaDXP2cdfuefl4MeV+wzZ4LTy22dVN f2JxvCGo1DnhXdKtAUTXFPHd4VpNAmQ= -----END CERTIFICATE-----Generated at Wed May 7 19:39:00 2025 by rpki-client