$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/46de1138-d081-345b-8d20-dc12d8d66728.roa File: 46de1138-d081-345b-8d20-dc12d8d66728.roa (raw, json) Hash identifier: 7KRhSzVzKeE0DLIqvW69YEgTAIKnEDSB1YQX4QE4mQc= Subject key identifier: BD:F1:EE:C7:C4:0E:25:7D:2D:07:48:4D:77:DC:A0:A9:AF:75:DF:05 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849ABB4ADF2B95FF6CD55B1EC40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/46de1138-d081-345b-8d20-dc12d8d66728.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 207633 IP address blocks: 172.120.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ad:f2:b9:5f:f6:cd:55:b1:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=d71a4292-fd1e-404a-9272-c18cad6dec7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:9c:58:b0:63:36:24:c4:6d:0e:af:58:b3: c4:3a:9e:aa:a9:52:24:fb:0b:20:07:44:be:98:a8: 68:f2:34:49:80:6c:75:b4:66:c7:5d:17:41:ec:90: 95:5b:e5:02:e0:26:85:69:17:8d:7f:0b:d5:66:c6: 15:cc:33:dd:79:76:79:c4:d0:7c:70:ff:f1:55:04: ec:b4:55:91:28:b4:cc:83:04:b2:60:1a:03:a9:9e: 94:c2:4a:64:a9:81:66:8f:61:17:de:3d:ac:f8:86: 46:81:b9:54:f7:0e:b8:b2:7a:ca:9d:90:13:01:04: 0b:fd:e1:d1:9d:62:c5:71:fb:31:62:09:71:53:cd: 0f:8d:96:69:09:63:b7:21:a7:5a:9c:44:8d:81:04: ed:65:58:3c:64:61:14:0f:af:1b:85:79:43:ae:81: be:f2:aa:f9:d0:a1:9f:91:2d:8d:b3:67:c9:f1:3a: dc:6b:44:c3:5b:0a:45:38:97:79:01:38:cc:f1:eb: 80:53:a0:dd:bc:25:9b:7f:ad:eb:de:d9:89:2c:63: 5d:12:cf:b1:10:de:e8:96:de:98:e4:3e:f8:d2:14: d1:6b:b6:cf:27:0f:9d:20:4e:9b:7f:99:46:4a:0a: c4:d4:fb:97:f8:a5:49:d2:16:73:ff:12:23:6c:84: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F1:EE:C7:C4:0E:25:7D:2D:07:48:4D:77:DC:A0:A9:AF:75:DF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/46de1138-d081-345b-8d20-dc12d8d66728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:02:78:00:ba:b0:61:73:20:01:47:99:ba:ea:dc:91:64:b2: 44:5f:9c:89:8c:8b:f6:23:92:28:3a:2b:92:b4:db:67:2a:49: 50:65:3e:3e:14:6e:1f:54:61:d5:7a:b0:a7:50:be:c3:5c:a6: dc:bf:e0:ac:74:9c:7c:45:5e:4e:e9:2f:f7:60:10:1a:4b:56: 1a:0a:72:4f:6d:ea:64:37:d3:e4:27:1e:f1:fe:2d:2a:2f:8d: 13:21:6f:47:ab:e2:bd:b2:a2:a6:fd:38:c9:40:c6:6d:e3:5a: cc:2c:5b:4a:88:05:cd:92:b5:f0:c5:e1:cf:ec:96:2e:80:6d: d2:bc:b0:06:13:39:52:e4:9e:b2:e6:1a:55:c5:01:49:fe:33: 78:32:d3:2e:a4:8c:41:18:12:d7:e9:40:5b:06:8f:00:b6:cb: 01:b6:bf:c3:50:00:38:13:d4:b5:5a:a1:ef:9f:45:93:30:cb: f5:47:23:37:e6:20:29:39:97:2a:08:e7:08:41:d4:86:af:8e: 15:10:5f:1b:71:c1:93:3b:3b:28:6f:64:1d:d9:a7:63:43:8d: e2:f1:05:3f:0f:65:fc:51:c5:57:76:cc:c3:aa:e4:30:99:ff: 33:11:00:38:e0:a4:ed:89:4b:1a:69:3d:0e:5e:e5:0f:d9:25: 1a:53:32:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtK3yuV/2zVWx7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZDcxYTQyOTItZmQxZS00MDRhLTkyNzItYzE4Y2FkNmRlYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogicWLBjNiTEbQ6vWLPEOp6qqVIk+wsgB0S+ mKho8jRJgGx1tGbHXRdB7JCVW+UC4CaFaReNfwvVZsYVzDPdeXZ5xNB8cP/xVQTs tFWRKLTMgwSyYBoDqZ6UwkpkqYFmj2EX3j2s+IZGgblU9w64snrKnZATAQQL/eHR nWLFcfsxYglxU80PjZZpCWO3IadanESNgQTtZVg8ZGEUD68bhXlDroG+8qr50KGf kS2Ns2fJ8Trca0TDWwpFOJd5ATjM8euAU6DdvCWbf63r3tmJLGNdEs+xEN7olt6Y 5D740hTRa7bPJw+dIE6bf5lGSgrE1PuX+KVJ0hZz/xIjbIQKNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3x7sfEDiV9LQdITXfcoKmvdd8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDZkZTExMzgtZDA4MS0z NDViLThkMjAtZGMxMmQ4ZDY2NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHECeAC6sGFzIAFHmbrq3JFkskRfnImMi/Yjkig6K5K022cqSVBlPj4U bh9UYdV6sKdQvsNcpty/4Kx0nHxFXk7pL/dgEBpLVhoKck9t6mQ30+QnHvH+LSov jRMhb0er4r2yoqb9OMlAxm3jWswsW0qIBc2StfDF4c/sli6AbdK8sAYTOVLknrLm GlXFAUn+M3gy0y6kjEEYEtfpQFsGjwC2ywG2v8NQADgT1LVaoe+fRZMwy/VHIzfm ICk5lyoI5whB1IavjhUQXxtxwZM7OyhvZB3Zp2NDjeLxBT8PZfxRxVd2zMOq5DCZ /zMRADjgpO2JSxppPQ5e5Q/ZJRpTMlY= -----END CERTIFICATE-----Generated at Sun May 11 04:34:39 2025 by rpki-client