$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3742c12a-9701-3b24-a39e-42ec7e337ec5.roa File: 3742c12a-9701-3b24-a39e-42ec7e337ec5.roa (raw, json) Hash identifier: Mlu5hiJNp+0Fj1OnvrsMJBc4p8Crxnzr0ww+qSGk+KE= Subject key identifier: 2E:06:43:D2:3E:78:30:E9:B3:B0:75:F3:BF:13:CB:27:DB:CE:3C:F3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A2910329949C2E86E7860 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3742c12a-9701-3b24-a39e-42ec7e337ec5.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:29:10:32:99:49:c2:e8:6e:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=27f98da2-44e5-4dc5-89d8-100cae226115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:b0:c2:9d:79:72:ba:34:33:b1:a1:9b:18: df:24:99:6b:3d:c4:64:1e:ea:85:70:4b:30:e9:f8: ef:da:92:34:1c:a5:8c:57:2e:60:0d:32:b3:63:2a: b8:32:65:13:7f:19:e0:e3:b4:19:26:b5:7a:e4:8c: e8:ce:f4:60:4d:d0:44:4f:9b:28:35:bc:33:9f:19: 1d:7b:e1:5a:dd:30:14:46:53:f2:7b:ca:9f:d0:d5: 7f:ce:df:af:58:87:41:0c:05:23:79:70:da:dd:16: 51:e7:a5:b1:4c:e9:46:7e:1b:5e:b7:44:a1:85:5e: 28:57:a8:a7:fd:dd:43:ea:b4:7b:17:a7:7c:29:5a: 14:5c:e8:95:95:7e:65:cf:1c:82:44:ed:b7:44:ac: b4:d2:37:3b:f1:88:72:5a:d4:b8:90:a8:ca:e2:00: 1c:53:88:bf:24:df:52:d5:5f:72:38:3f:00:b8:14: b6:71:bf:42:2e:d5:a0:29:bd:91:a8:b0:ef:f1:2c: 5d:53:27:ba:95:b0:20:0a:34:e9:10:75:87:24:a2: 08:22:39:31:78:2c:d5:90:90:7c:64:2f:85:32:68: 08:ab:e1:94:b7:39:2f:2b:1b:7f:1e:50:51:5c:d6: d2:b9:e8:76:32:58:f7:b0:86:78:f9:ac:41:0e:15: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:06:43:D2:3E:78:30:E9:B3:B0:75:F3:BF:13:CB:27:DB:CE:3C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3742c12a-9701-3b24-a39e-42ec7e337ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:55:99:bf:ff:35:0d:2a:e3:5e:5e:e5:96:a7:44:98:6f:48: 46:34:51:42:fe:7b:8f:b8:50:ff:43:de:f5:3b:99:74:a4:6c: 81:bc:c3:bf:38:69:83:ff:0e:c0:f9:73:64:1e:6a:47:26:00: 3b:0b:60:25:70:de:84:d0:38:d6:76:46:a8:14:8e:b2:33:83: 9c:73:63:74:45:d8:40:9c:57:ee:02:e6:62:35:c2:e0:83:05: 78:e0:d5:f7:4b:0e:11:fb:8a:4d:b1:44:f9:11:64:33:a8:ef: 9f:f5:9b:19:95:b8:9e:49:ac:91:fd:fa:fd:6e:b7:d4:3d:34: 9d:42:ab:77:98:29:8d:0f:b7:42:8d:14:7c:04:50:b9:5a:c5: 35:ef:f8:56:01:1a:0a:d6:db:8e:b2:e2:df:8d:3b:cb:cc:23: d9:4a:07:11:12:73:a4:15:67:96:ba:e1:97:31:17:a9:db:91: 61:71:c5:46:90:42:07:fd:8e:c6:fd:0b:32:ce:6d:97:ea:9f: cc:72:4c:c2:e8:61:d4:16:74:79:07:23:f6:6d:9f:ca:09:79: 3d:57:40:a5:07:e9:c6:2a:03:b3:0b:e0:4f:75:cb:e1:68:e9: 0f:5d:1a:91:76:74:e9:5c:8a:66:51:32:9a:dd:cd:f3:d9:aa: 97:96:ba:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eikQMplJwuhueGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MjdmOThkYTItNDRlNS00ZGM1LTg5ZDgtMTAwY2FlMjI2MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVWwwp15cro0M7GhmxjfJJlrPcRkHuqFcEsw 6fjv2pI0HKWMVy5gDTKzYyq4MmUTfxng47QZJrV65IzozvRgTdBET5soNbwznxkd e+Fa3TAURlPye8qf0NV/zt+vWIdBDAUjeXDa3RZR56WxTOlGfhtet0ShhV4oV6in /d1D6rR7F6d8KVoUXOiVlX5lzxyCRO23RKy00jc78YhyWtS4kKjK4gAcU4i/JN9S 1V9yOD8AuBS2cb9CLtWgKb2RqLDv8SxdUye6lbAgCjTpEHWHJKIIIjkxeCzVkJB8 ZC+FMmgIq+GUtzkvKxt/HlBRXNbSueh2Mlj3sIZ4+axBDhXfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4GQ9I+eDDps7B1878TyyfbzjzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzc0MmMxMmEtOTcwMS0z YjI0LWEzOWUtNDJlYzdlMzM3ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBVmb//NQ0q415e5ZanRJhvSEY0UUL+e4+4UP9D3vU7mXSkbIG8w784 aYP/DsD5c2QeakcmADsLYCVw3oTQONZ2RqgUjrIzg5xzY3RF2ECcV+4C5mI1wuCD BXjg1fdLDhH7ik2xRPkRZDOo75/1mxmVuJ5JrJH9+v1ut9Q9NJ1Cq3eYKY0Pt0KN FHwEULlaxTXv+FYBGgrW246y4t+NO8vMI9lKBxESc6QVZ5a64ZcxF6nbkWFxxUaQ Qgf9jsb9CzLObZfqn8xyTMLoYdQWdHkHI/Ztn8oJeT1XQKUH6cYqA7ML4E91y+Fo 6Q9dGpF2dOlcimZRMprdzfPZqpeWug4= -----END CERTIFICATE-----Generated at Sat May 10 07:34:18 2025 by rpki-client