$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d120220-ae42-353e-b8f0-f871f810984d.roa File: 1d120220-ae42-353e-b8f0-f871f810984d.roa (raw, json) Hash identifier: udnmAd9cVKs40B/J4M05PybW9aDHiXPwwtUUd185vAs= Subject key identifier: A4:0B:49:F2:E0:1C:81:C0:BF:E5:64:54:5F:8D:2D:E0:67:BC:4A:71 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A283D5B942AEF45441400 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d120220-ae42-353e-b8f0-f871f810984d.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:28:3d:5b:94:2a:ef:45:44:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=f51b1c7f-cf1e-4cd7-88a5-fe5588723f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:66:5b:c5:8a:22:77:f6:b0:4c:a0:c4:08: 85:07:9f:9c:79:94:a6:9f:0e:25:8a:67:20:bf:c5: 8b:4d:48:51:d2:73:81:8e:b5:99:be:1d:97:5a:51: 53:47:c0:13:a2:3c:0a:bb:12:cf:c0:dd:64:cd:c1: cd:3f:ff:f3:a0:8d:ec:73:c7:84:04:45:e3:d7:8e: ad:8a:79:dc:63:76:33:76:5b:ad:49:d7:d2:42:7d: 3b:96:be:98:52:41:06:9c:b2:20:38:e2:b0:34:35: 5c:d1:22:06:c6:48:dc:0f:4c:28:f6:fb:0d:56:6b: 79:57:9b:56:92:bf:5e:14:84:46:4e:a5:2e:7f:38: a5:d7:46:60:84:62:f2:4f:a8:83:06:8e:74:c0:7e: 5e:7e:37:a9:f9:ab:89:c5:f3:23:b2:82:c8:23:41: 08:aa:2a:e3:cc:9a:b6:11:e1:cc:c2:e5:a7:64:8c: b5:44:e4:f4:1a:ca:3a:e7:bc:82:81:9c:3f:01:4c: 11:a2:c9:07:3e:e8:10:3b:9d:2a:3a:f7:ff:22:77: c2:b1:42:17:3c:5d:47:f6:99:d4:02:41:94:9c:bf: d8:a4:48:a0:09:cc:82:71:fe:ee:ad:86:83:de:58: 1f:ee:73:b9:a1:9a:89:8a:79:5b:3b:67:a2:79:17: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0B:49:F2:E0:1C:81:C0:BF:E5:64:54:5F:8D:2D:E0:67:BC:4A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d120220-ae42-353e-b8f0-f871f810984d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d2:46:5b:4a:8c:b0:01:4a:5d:e0:14:48:24:9d:09:f9:e4: 3a:9c:32:2a:37:ce:03:79:6f:30:43:6c:a3:fd:58:68:d7:73: 24:f2:11:83:8a:db:09:24:23:31:0e:cc:cf:75:3d:b7:e0:f3: c2:62:f5:99:35:10:11:1f:6c:cd:1f:53:b3:a8:b0:30:90:2c: 80:cf:3e:fa:6f:58:07:e7:ac:5a:10:3d:0b:0e:57:f6:6f:6d: 54:24:ac:83:a4:fc:4a:c7:ce:c4:3e:2c:16:7c:f9:77:94:0b: cd:b1:a5:75:d0:b2:bb:1d:9b:a4:96:5a:3a:20:a3:43:35:36: ee:ad:a5:a5:cd:83:21:d3:9e:8a:12:07:6e:5b:c7:80:f1:57: 1e:5c:21:d9:f2:3d:86:6f:bb:39:60:03:c1:35:67:c8:9e:81: 8a:39:33:d8:61:35:94:8d:1d:1e:f3:dc:0e:96:c4:34:34:b3: b4:11:09:a9:2e:09:e1:fb:7a:ed:12:5d:6a:7c:8b:66:66:6e: 1f:6e:1b:f2:75:8a:4a:65:15:70:a7:40:7a:c3:11:bd:38:b3: 04:32:14:9c:a1:40:d4:4d:d1:fc:14:30:42:e8:fd:8a:73:1b: 67:b1:cf:e7:45:82:1c:70:37:78:ae:b8:09:93:78:2b:c3:89: c3:94:45:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eig9W5Qq70VEFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZjUxYjFjN2YtY2YxZS00Y2Q3LTg4YTUtZmU1NTg4NzIzZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqilmW8WKInf2sEygxAiFB5+ceZSmnw4limcg v8WLTUhR0nOBjrWZvh2XWlFTR8ATojwKuxLPwN1kzcHNP//zoI3sc8eEBEXj146t inncY3YzdlutSdfSQn07lr6YUkEGnLIgOOKwNDVc0SIGxkjcD0wo9vsNVmt5V5tW kr9eFIRGTqUufzil10ZghGLyT6iDBo50wH5efjep+auJxfMjsoLII0EIqirjzJq2 EeHMwuWnZIy1ROT0Gso657yCgZw/AUwRoskHPugQO50qOvf/InfCsUIXPF1H9pnU AkGUnL/YpEigCcyCcf7urYaD3lgf7nO5oZqJinlbO2eieRdfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQLSfLgHIHAv+VkVF+NLeBnvEpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWQxMjAyMjAtYWU0Mi0z NTNlLWI4ZjAtZjg3MWY4MTA5ODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvSRltKjLABSl3gFEgknQn55DqcMio3zgN5bzBDbKP9WGjXcyTyEYOK 2wkkIzEOzM91Pbfg88Ji9Zk1EBEfbM0fU7OosDCQLIDPPvpvWAfnrFoQPQsOV/Zv bVQkrIOk/ErHzsQ+LBZ8+XeUC82xpXXQsrsdm6SWWjogo0M1Nu6tpaXNgyHTnooS B25bx4DxVx5cIdnyPYZvuzlgA8E1Z8iegYo5M9hhNZSNHR7z3A6WxDQ0s7QRCaku CeH7eu0SXWp8i2Zmbh9uG/J1ikplFXCnQHrDEb04swQyFJyhQNRN0fwUMELo/Ypz G2exz+dFghxwN3iuuAmTeCvDicOURfU= -----END CERTIFICATE-----Generated at Sun May 11 18:55:48 2025 by rpki-client