$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d96150c-a626-3995-9e6c-6c63f8600018.roa File: 1d96150c-a626-3995-9e6c-6c63f8600018.roa (raw, json) Hash identifier: btjpGaczA/MVVqkjwlkDQ4P+HFF62SPDB/g/X2t4XAU= Subject key identifier: 28:F7:87:1A:2D:9C:D5:CC:08:C1:DF:48:A3:8D:60:C1:8A:CB:93:59 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A364F0AB16A65D1F5BA80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d96150c-a626-3995-9e6c-6c63f8600018.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 212238 IP address blocks: 172.121.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:36:4f:0a:b1:6a:65:d1:f5:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=40a005b7-b451-4fcb-b9aa-5de50104eb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:a0:4f:e3:64:2c:91:98:10:b1:3f:2d:a6: be:d7:ac:b5:db:f0:3b:2c:8b:05:15:81:b9:45:37: a0:50:1b:d8:26:9e:8c:d5:78:d8:69:1c:7e:a4:69: 73:3a:2d:3c:96:1e:71:23:ea:a4:60:ea:31:5c:c6: 81:82:13:ee:c9:8b:74:ef:37:78:83:b2:11:85:5a: 56:6c:56:bd:fb:e8:90:44:26:2e:b8:32:2f:c8:ee: 79:f5:e9:17:9a:46:fc:8c:a0:1e:ff:fd:17:29:33: bd:b4:03:23:46:7c:2e:88:ee:f0:dc:f4:e0:49:58: b2:8e:4b:1d:a4:17:4a:65:56:ae:80:0a:43:b3:87: 6e:3e:23:06:c9:0d:51:43:62:8b:b5:a4:6d:43:b9: a0:68:cf:06:dd:29:9f:3a:7d:f4:ee:db:4a:75:8e: 47:ab:b6:4d:cc:14:08:c4:72:c0:81:c2:a1:38:db: 9e:f5:b6:7b:df:81:f1:f0:29:51:7a:43:29:cd:8f: 27:90:14:ca:e3:2a:1e:66:78:5c:ee:31:84:43:f5: e5:2f:7e:04:0a:d2:75:80:c6:c4:09:97:e0:a0:ed: cd:71:e5:7e:16:57:7a:9f:fe:70:59:bd:4b:21:af: 00:af:36:0a:13:5b:62:5c:77:0a:d9:d7:c4:7d:e5: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F7:87:1A:2D:9C:D5:CC:08:C1:DF:48:A3:8D:60:C1:8A:CB:93:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d96150c-a626-3995-9e6c-6c63f8600018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:24:44:e9:f9:82:27:47:db:97:bb:42:2b:de:2a:67:2b:80: 8b:4c:5a:12:f4:fb:80:14:60:e9:0e:70:2a:b8:ff:a5:c6:25: c6:93:79:e1:d6:5b:7a:bf:a0:0f:4d:e0:cb:24:7a:21:35:3c: 92:7b:60:e1:1e:28:90:ed:d3:90:fb:33:ec:f2:d8:48:c5:9c: 0c:eb:5a:dd:9a:96:4f:de:34:db:c5:ee:b4:9e:3f:0d:88:70: 04:c5:02:a0:c3:1c:6b:b5:ef:96:c7:d1:05:13:d9:c6:8c:d4: 74:b0:d6:57:81:75:39:21:ee:d0:47:3b:58:6c:22:b3:16:18: 8d:05:01:62:d5:06:a3:4b:30:03:94:a0:84:e0:30:d9:d9:78: e9:16:bf:49:f7:d0:81:ef:63:17:30:af:8f:81:ba:b0:49:f1: ec:42:48:df:0a:24:bb:1a:fc:4c:1a:5b:5c:8f:cf:99:f2:32: c4:a6:e3:a1:47:aa:8f:2d:a3:fb:aa:9c:b2:a7:08:2e:9c:de: 89:22:a2:b3:f8:d5:99:83:c4:b5:07:9a:31:07:11:62:f9:3c: 55:20:27:b9:e2:02:b0:99:e7:a7:e6:db:b2:ea:2c:45:04:a1: d0:c8:0d:db:ae:c4:88:de:74:02:85:d5:aa:ae:1e:be:fe:84: c1:31:07:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejZPCrFqZdH1uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NDBhMDA1YjctYjQ1MS00ZmNiLWI5YWEtNWRlNTAxMDRlYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2KgT+NkLJGYELE/Laa+16y12/A7LIsFFYG5 RTegUBvYJp6M1XjYaRx+pGlzOi08lh5xI+qkYOoxXMaBghPuyYt07zd4g7IRhVpW bFa9++iQRCYuuDIvyO559ekXmkb8jKAe//0XKTO9tAMjRnwuiO7w3PTgSViyjksd pBdKZVaugApDs4duPiMGyQ1RQ2KLtaRtQ7mgaM8G3SmfOn307ttKdY5Hq7ZNzBQI xHLAgcKhONue9bZ734Hx8ClRekMpzY8nkBTK4yoeZnhc7jGEQ/XlL34ECtJ1gMbE CZfgoO3NceV+Fld6n/5wWb1LIa8ArzYKE1tiXHcK2dfEfeXSnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj3hxotnNXMCMHfSKONYMGKy5NZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWQ5NjE1MGMtYTYyNi0z OTk1LTllNmMtNmM2M2Y4NjAwMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHskROn5gidH25e7QiveKmcrgItMWhL0+4AUYOkOcCq4/6XGJcaTeeHW W3q/oA9N4MskeiE1PJJ7YOEeKJDt05D7M+zy2EjFnAzrWt2alk/eNNvF7rSePw2I cATFAqDDHGu175bH0QUT2caM1HSw1leBdTkh7tBHO1hsIrMWGI0FAWLVBqNLMAOU oITgMNnZeOkWv0n30IHvYxcwr4+BurBJ8exCSN8KJLsa/EwaW1yPz5nyMsSm46FH qo8to/uqnLKnCC6c3okiorP41ZmDxLUHmjEHEWL5PFUgJ7niArCZ56fm27LqLEUE odDIDduuxIjedAKF1aquHr7+hMExB2g= -----END CERTIFICATE-----Generated at Sat May 10 10:22:57 2025 by rpki-client