$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f4ef142-b027-32db-bc70-4b94aea3ab1d.roa File: 8f4ef142-b027-32db-bc70-4b94aea3ab1d.roa (raw, json) Hash identifier: A9sFLyc3QPRiN4l1R9W9M3FFoTkbJILb0A2bFku2SX8= Subject key identifier: 68:3C:C3:01:12:31:47:9B:2A:71:8B:07:95:3D:CB:E7:05:32:B1:F6 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B0D3CA359E68289DFF91AB00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f4ef142-b027-32db-bc70-4b94aea3ab1d.roa Signing time: Tue 29 Apr 2025 21:02:49 +0000 ROA not before: Tue 29 Apr 2025 21:02:49 +0000 ROA not after: Mon 28 Jul 2025 21:02:49 +0000 asID: 14618 IP address blocks: 172.252.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:d3:ca:35:9e:68:28:9d:ff:91:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 29 21:02:49 2025 GMT Not After : Jul 28 21:02:49 2025 GMT Subject: CN=bd43d4f2-a9df-4827-917c-0f4993e51469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ef:95:61:d7:12:7e:d5:54:6a:7d:10:cc:6e: ec:4d:96:c4:83:ac:ba:78:95:25:68:d7:7e:6d:70: 52:03:f6:12:88:40:9c:cf:8a:fc:15:8f:76:73:34: aa:74:6c:fb:da:39:1e:de:54:ca:0e:aa:46:d2:a8: 0e:f8:bd:e0:74:47:83:99:7a:96:49:3f:82:1a:f7: e2:ee:2f:c3:31:b4:7f:e4:96:83:c8:95:5c:25:27: ba:18:0f:c6:7b:41:8e:1f:70:eb:82:ea:d3:4d:f4: 3a:8c:3e:dc:b7:a3:90:28:fc:13:57:d9:e7:f5:2b: 77:4c:f3:47:c5:c4:62:e0:fe:2c:cc:30:32:31:36: e2:b2:fa:ce:85:83:70:f9:d3:99:4a:12:9a:72:78: 74:83:c8:35:cf:3f:a5:5e:89:56:2f:49:6a:70:98: 99:61:73:3c:06:25:83:34:d2:fb:5c:9d:0a:9e:93: 5b:49:f7:9d:3e:a9:da:04:66:82:45:e1:5c:eb:65: be:66:25:7c:e4:8a:9b:5b:50:c4:b1:53:79:07:32: df:26:fc:20:78:21:52:53:55:cc:27:ba:b1:15:ad: 39:a5:85:e9:c1:8e:3b:b8:76:d1:de:f4:60:7a:06: ef:e4:93:4f:56:ed:0b:99:54:1f:0d:bd:17:d1:db: 66:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3C:C3:01:12:31:47:9B:2A:71:8B:07:95:3D:CB:E7:05:32:B1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f4ef142-b027-32db-bc70-4b94aea3ab1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c8:83:e8:fa:3f:b7:53:33:6b:e4:a2:bb:84:13:15:52:77: 42:c3:98:79:b0:f7:b5:ca:bf:ac:56:de:ce:22:cc:46:e9:1e: c7:fa:29:88:0d:a5:6b:5a:16:b3:27:1e:09:b8:bf:dc:0f:70: ec:79:96:fd:d9:f6:fb:18:fa:84:cd:f8:dc:4e:4d:8a:a0:b4: 4d:a9:ec:2f:63:1b:40:6a:eb:e9:e2:69:b9:da:cf:6b:30:df: 5e:d2:2d:60:39:05:0c:7c:27:37:b1:fb:ee:89:1b:e7:5d:90: 26:21:99:ba:9c:b1:22:c3:1f:c0:44:76:15:da:99:53:cf:38: 9a:a9:f8:31:2d:d9:46:0b:dc:e2:67:4d:35:69:71:d8:51:61: c0:e1:6a:03:35:73:8a:6d:22:bf:b2:78:93:1f:03:65:9a:a9: fb:35:35:65:8e:28:4e:4a:38:24:c3:43:08:f1:42:97:00:4b: 1c:80:26:ee:f3:e3:aa:24:e3:11:60:0c:9c:f6:e3:ad:51:7a: c8:3e:60:af:03:c0:0d:9d:40:64:1e:b4:6f:aa:4c:c7:04:8e: bb:eb:52:6c:aa:3e:d8:fc:f4:09:e6:b5:a7:2b:09:a8:c5:30: ab:f2:24:2a:5a:bc:f8:9d:75:0c:af:80:bd:82:ab:86:5c:a6: 26:65:39:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmw08o1nmgonf+RqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyOTIxMDI0OVoXDTI1MDcyODIxMDI0OVowLzEtMCsGA1UEAxMk YmQ0M2Q0ZjItYTlkZi00ODI3LTkxN2MtMGY0OTkzZTUxNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO+VYdcSftVUan0QzG7sTZbEg6y6eJUlaNd+ bXBSA/YSiECcz4r8FY92czSqdGz72jke3lTKDqpG0qgO+L3gdEeDmXqWST+CGvfi 7i/DMbR/5JaDyJVcJSe6GA/Ge0GOH3DrgurTTfQ6jD7ct6OQKPwTV9nn9St3TPNH xcRi4P4szDAyMTbisvrOhYNw+dOZShKacnh0g8g1zz+lXolWL0lqcJiZYXM8BiWD NNL7XJ0KnpNbSfedPqnaBGaCReFc62W+ZiV85IqbW1DEsVN5BzLfJvwgeCFSU1XM J7qxFa05pYXpwY47uHbR3vRgegbv5JNPVu0LmVQfDb0X0dtmSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg8wwESMUebKnGLB5U9y+cFMrH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGY0ZWYxNDItYjAyNy0z MmRiLWJjNzAtNGI5NGFlYTNhYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjIg+j6P7dTM2vkoruEExVSd0LDmHmw97XKv6xW3s4izEbpHsf6KYgN pWtaFrMnHgm4v9wPcOx5lv3Z9vsY+oTN+NxOTYqgtE2p7C9jG0Bq6+niabnaz2sw 317SLWA5BQx8Jzex++6JG+ddkCYhmbqcsSLDH8BEdhXamVPPOJqp+DEt2UYL3OJn TTVpcdhRYcDhagM1c4ptIr+yeJMfA2Waqfs1NWWOKE5KOCTDQwjxQpcASxyAJu7z 46ok4xFgDJz2461Resg+YK8DwA2dQGQetG+qTMcEjrvrUmyqPtj89AnmtacrCajF MKvyJCpavPiddQyvgL2Cq4ZcpiZlOTE= -----END CERTIFICATE-----Generated at Fri May 9 18:43:12 2025 by rpki-client