$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f13f9ad-325e-307d-91be-a8a77045c239.roa File: 3f13f9ad-325e-307d-91be-a8a77045c239.roa (raw, json) Hash identifier: P6pVPdbD81TtqDy48Lnv/wtnPtcuLJBLMXP2GntR8s0= Subject key identifier: 27:51:38:D1:20:12:A0:4D:6D:C3:41:46:3D:E0:FE:54:08:0D:6E:FE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849EBA7CE3604401BE0E5238200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f13f9ad-325e-307d-91be-a8a77045c239.roa Signing time: Tue 20 May 2025 22:46:54 +0000 ROA not before: Tue 20 May 2025 22:46:54 +0000 ROA not after: Mon 18 Aug 2025 22:46:54 +0000 asID: 25956 IP address blocks: 172.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:a7:ce:36:04:40:1b:e0:e5:23:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 20 22:46:54 2025 GMT Not After : Aug 18 22:46:54 2025 GMT Subject: CN=1b7ab0ec-97d6-45b7-80a5-79e713f23f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:6f:31:2d:b8:06:e0:8a:75:10:12:2a:12: 35:56:5e:67:b7:ba:0c:fe:43:93:1c:ff:68:6d:49: 00:93:65:00:a5:a6:15:7e:db:58:1c:fd:e0:2f:17: 6c:9f:7d:0a:9e:7c:4b:b9:de:01:96:81:3a:b2:ac: 91:9c:23:17:84:10:46:0e:0c:34:90:62:74:81:da: b8:72:7f:eb:33:12:50:60:c5:de:6d:19:d0:5d:ae: 69:b4:90:03:6e:ba:a3:be:21:f0:d4:60:60:8f:85: 70:cb:a3:42:1c:48:71:77:fe:2d:9f:50:4b:7f:1c: 65:4d:10:fa:cf:3f:f1:d4:a1:f8:13:42:3a:76:b6: 50:53:55:de:2c:c2:39:b4:2d:c0:c2:0f:8d:ca:08: ad:35:87:a0:8d:d6:b9:e3:c8:3f:a2:e4:90:ea:a6: 1d:56:d2:9d:49:38:21:d3:5a:3a:e5:a7:ae:d2:ca: ed:65:c0:65:37:d1:ed:71:61:7f:47:37:32:7a:f9: 5f:aa:f1:8c:43:3e:22:ac:b3:7d:53:6e:4d:59:48: 8c:05:bb:b6:fc:3c:5a:c7:a0:72:29:79:d3:71:84: d5:c7:c0:41:e0:55:ea:63:92:c0:0f:3b:1d:35:ae: 80:00:13:0c:a0:77:89:f1:99:e4:dd:00:90:5e:da: 5d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:38:D1:20:12:A0:4D:6D:C3:41:46:3D:E0:FE:54:08:0D:6E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f13f9ad-325e-307d-91be-a8a77045c239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:29:8f:15:be:6b:8c:cc:5a:2b:5f:de:2e:4d:56:1a:39:ff: 90:df:02:74:cd:03:17:07:75:36:0e:b1:62:24:22:ba:db:ed: 68:04:73:0e:3f:f4:db:5e:82:18:65:97:52:04:8a:92:7c:4d: 95:49:c3:fc:77:cc:55:b0:c8:ae:e8:4c:c7:5c:ab:49:ca:66: 58:dc:5f:06:99:ff:f3:d6:15:af:41:3d:74:7c:7f:7d:2a:5d: be:95:75:46:49:52:7c:a8:f4:d5:14:5f:0c:4a:dc:05:af:79: 33:f0:ba:d2:b2:57:a8:60:34:3f:e7:96:3b:6f:c2:9a:22:6b: 8b:25:6b:22:0f:89:84:61:84:82:99:2f:30:57:87:94:27:51: e8:bd:4c:6b:36:09:b2:1a:b5:2d:d3:70:55:9a:79:3b:c7:55: 6b:28:d7:da:65:ae:a8:b5:2c:ec:86:31:6b:ca:85:78:01:39: e3:e2:a2:11:f3:a9:e3:65:c1:ad:b3:0a:62:fe:8d:dc:56:fe: 4e:89:ed:21:d7:b7:fb:5a:32:39:12:69:12:6e:40:32:77:8b: 8b:f4:77:45:0d:91:58:fe:11:08:85:b2:ea:3b:7c:56:c2:e0: ed:f8:f7:46:f0:74:8a:52:d1:50:bc:16:ad:c3:68:63:b3:88: 00:44:98:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnrp842BEAb4OUjggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyMDIyNDY1NFoXDTI1MDgxODIyNDY1NFowLzEtMCsGA1UEAxMk MWI3YWIwZWMtOTdkNi00NWI3LTgwYTUtNzllNzEzZjIzZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfVvMS24BuCKdRASKhI1Vl5nt7oM/kOTHP9o bUkAk2UApaYVfttYHP3gLxdsn30KnnxLud4BloE6sqyRnCMXhBBGDgw0kGJ0gdq4 cn/rMxJQYMXebRnQXa5ptJADbrqjviHw1GBgj4Vwy6NCHEhxd/4tn1BLfxxlTRD6 zz/x1KH4E0I6drZQU1XeLMI5tC3Awg+NygitNYegjda548g/ouSQ6qYdVtKdSTgh 01o65aeu0srtZcBlN9HtcWF/RzcyevlfqvGMQz4irLN9U25NWUiMBbu2/Dxax6By KXnTcYTVx8BB4FXqY5LADzsdNa6AABMMoHeJ8Znk3QCQXtpdawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdRONEgEqBNbcNBRj3g/lQIDW7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2YxM2Y5YWQtMzI1ZS0z MDdkLTkxYmUtYThhNzcwNDVjMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIpjxW+a4zMWitf3i5NVho5/5DfAnTNAxcHdTYOsWIkIrrb7WgEcw4/ 9Nteghhll1IEipJ8TZVJw/x3zFWwyK7oTMdcq0nKZljcXwaZ//PWFa9BPXR8f30q Xb6VdUZJUnyo9NUUXwxK3AWveTPwutKyV6hgND/nljtvwpoia4slayIPiYRhhIKZ LzBXh5QnUei9TGs2CbIatS3TcFWaeTvHVWso19plrqi1LOyGMWvKhXgBOePiohHz qeNlwa2zCmL+jdxW/k6J7SHXt/taMjkSaRJuQDJ3i4v0d0UNkVj+EQiFsuo7fFbC 4O3490bwdIpS0VC8Fq3DaGOziABEmLM= -----END CERTIFICATE-----Generated at Mon Jun 30 19:47:19 2025 by rpki-client