$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f94bf11-d94c-3336-8ef6-909566174d1b.roa File: 5f94bf11-d94c-3336-8ef6-909566174d1b.roa (raw, json) Hash identifier: YRPPQ9acagT49co0ch5UMqVMNuka+CBQbARApO3AoEk= Subject key identifier: C5:52:4A:A4:4A:02:28:D6:98:E9:02:54:4B:DA:A6:29:A1:77:55:16 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849AD1A1D0522970D1012A35C40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f94bf11-d94c-3336-8ef6-909566174d1b.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 10557 IP address blocks: 172.120.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1d:05:22:97:0d:10:12:a3:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=460018a2-0ac4-42c8-8d69-e473e3718548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e0:74:32:a7:80:84:b2:58:5e:0e:20:0a:0f: e8:ac:7e:f7:a4:59:a5:fd:e7:36:6d:41:94:f2:68: 5a:ec:f0:0b:b7:3a:15:ec:aa:c3:e5:e2:c0:f0:13: 47:fd:67:57:71:d0:11:5d:60:9c:31:e5:47:cf:45: a0:7d:6b:7f:43:d1:58:46:44:d7:ec:fd:03:15:97: 3a:c6:ea:02:81:8d:18:1f:8f:da:ad:b5:c5:97:4b: 9b:5d:93:09:26:4d:99:8d:fc:99:51:19:4c:c1:0c: 9c:f4:d0:73:db:ed:ad:16:ee:0e:0b:ae:dc:9d:bb: a6:80:8a:c6:4a:ed:16:94:79:de:50:7c:39:6c:ba: b6:ff:81:3e:fc:fd:cd:3f:9a:34:e4:71:26:18:23: 44:07:67:fc:24:a8:f1:af:f6:80:80:ec:ff:8b:f0: 2c:3c:6f:51:c5:58:06:e7:3d:b0:eb:b0:a8:d7:1e: d6:bd:0b:9e:df:79:2f:0c:40:8e:05:01:90:d5:7a: 0c:f0:50:22:f4:d8:4a:86:bc:90:1c:87:75:dd:8a: 42:b1:d3:4f:39:60:fe:d4:04:10:86:2f:ce:c2:51: 60:78:ff:02:c4:f5:d5:a9:c4:1a:c7:62:ab:36:98: e9:16:8c:ee:d5:20:9a:70:71:7b:a6:ef:9f:ee:aa: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:52:4A:A4:4A:02:28:D6:98:E9:02:54:4B:DA:A6:29:A1:77:55:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f94bf11-d94c-3336-8ef6-909566174d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:52:c7:fd:1d:8c:d2:34:d8:90:19:c3:21:54:ba:27:3f:13: 72:38:2c:d2:60:e7:e8:89:c1:a5:ce:c7:cd:5f:84:0f:b7:69: d9:0d:e8:9a:0b:67:3a:84:41:cf:47:fa:0e:6d:37:f3:9b:3f: 3d:e5:e3:7c:2f:a9:30:64:29:f0:47:1b:fe:cf:2e:cd:e3:71: 5c:c7:96:d3:6d:7e:b4:d6:ef:af:4c:86:d0:53:c8:14:22:2e: 9e:0a:92:d7:d6:90:1b:21:f9:8d:d1:53:55:4d:0e:bb:6a:a7: 28:fb:d5:6e:70:33:d5:0d:0e:23:d2:f2:ce:d4:1a:11:22:57: 3b:5a:ea:5e:25:73:e2:16:fa:8e:c6:33:ee:c6:bc:1e:51:51: 92:44:54:e3:b7:37:2f:1b:5a:27:b5:54:d3:a8:f9:15:61:fd: 58:af:1e:a7:9a:9b:9c:ca:f2:34:79:ac:4f:db:4d:4c:45:7c: d3:aa:32:68:87:5b:24:14:a4:0c:28:74:79:3e:8d:03:71:c9: ea:06:eb:6a:aa:bf:23:6e:83:2d:15:52:8b:95:3c:ed:6a:1d: bf:a9:c6:b0:fe:da:51:6e:5f:d1:70:b5:2c:d1:8d:74:59:5e: 9c:6a:4d:17:a5:7b:13:6e:38:dd:4a:e4:f5:7e:cf:62:2c:64: cd:f6:66:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGh0FIpcNEBKjXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NDYwMDE4YTItMGFjNC00MmM4LThkNjktZTQ3M2UzNzE4NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheB0MqeAhLJYXg4gCg/orH73pFml/ec2bUGU 8mha7PALtzoV7KrD5eLA8BNH/WdXcdARXWCcMeVHz0WgfWt/Q9FYRkTX7P0DFZc6 xuoCgY0YH4/arbXFl0ubXZMJJk2ZjfyZURlMwQyc9NBz2+2tFu4OC67cnbumgIrG Su0WlHneUHw5bLq2/4E+/P3NP5o05HEmGCNEB2f8JKjxr/aAgOz/i/AsPG9RxVgG 5z2w67Co1x7WvQue33kvDECOBQGQ1XoM8FAi9NhKhryQHId13YpCsdNPOWD+1AQQ hi/OwlFgeP8CxPXVqcQax2KrNpjpFozu1SCacHF7pu+f7qo4NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVSSqRKAijWmOkCVEvapimhd1UWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWY5NGJmMTEtZDk0Yy0z MzM2LThlZjYtOTA5NTY2MTc0ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRSx/0djNI02JAZwyFUuic/E3I4LNJg5+iJwaXOx81fhA+3adkN6JoL ZzqEQc9H+g5tN/ObPz3l43wvqTBkKfBHG/7PLs3jcVzHltNtfrTW769MhtBTyBQi Lp4KktfWkBsh+Y3RU1VNDrtqpyj71W5wM9UNDiPS8s7UGhEiVzta6l4lc+IW+o7G M+7GvB5RUZJEVOO3Ny8bWie1VNOo+RVh/VivHqeam5zK8jR5rE/bTUxFfNOqMmiH WyQUpAwodHk+jQNxyeoG62qqvyNugy0VUouVPO1qHb+pxrD+2lFuX9FwtSzRjXRZ XpxqTRelexNuON1K5PV+z2IsZM32ZnE= -----END CERTIFICATE-----Generated at Sun May 11 13:32:57 2025 by rpki-client