$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa File: 9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa (raw, json) Hash identifier: cWJVqTVQJyf+cTsAS+qPTiwX6r7H6gXOZ3nkdLWDmYg= Subject key identifier: 80:1C:67:45:B6:70:44:1D:FA:6A:A2:61:4E:2B:CC:39:71:41:C2:0F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849CBCFADF8A11B0A25F62DDB00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 172.120.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:ad:f8:a1:1b:0a:25:f6:2d:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=753a2e7e-5b2e-496e-9034-f26a7cd7e31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5c:31:42:1f:d3:06:c1:74:c7:b8:9f:c3:bf: fd:fe:55:31:fd:26:79:81:64:9d:2c:e0:ec:d1:d8: 34:73:3b:93:e5:9e:f1:5b:01:36:6f:6d:97:d7:29: 66:06:11:a9:6c:2c:37:49:ea:bb:e7:84:26:0c:b2: c4:6d:03:38:1a:ac:24:23:3f:de:a5:96:8e:bc:68: a5:29:13:b1:ec:b7:d2:bb:a5:32:f8:a2:45:5b:86: 1b:81:69:2b:fe:cd:86:ff:b3:4f:0e:e0:43:da:8f: 76:2b:3f:c4:d0:21:f0:fb:d9:b9:1e:b2:60:f6:8d: 3b:e6:16:d0:8e:3d:42:d6:29:25:aa:32:7b:a7:b5: 5a:8f:88:31:6e:04:1b:f6:7a:88:46:1e:ef:1c:6b: 98:ee:a7:cd:9c:0d:62:bf:74:00:46:18:2f:ad:8f: d9:5a:a6:8a:62:97:fd:d6:6e:8f:71:57:8c:b6:91: 39:16:95:4d:61:a3:31:a5:fb:35:8e:5e:a2:a5:63: 86:dd:df:a3:fa:da:99:2f:49:d7:a2:89:b3:07:59: 4b:7c:c0:84:fe:42:65:d7:59:3b:ed:26:b2:97:27: b0:f6:d7:2a:4d:8c:e7:07:78:ef:eb:24:66:d1:6d: 76:71:9b:65:28:10:bf:22:ef:5c:ec:68:c8:fc:cf: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:67:45:B6:70:44:1D:FA:6A:A2:61:4E:2B:CC:39:71:41:C2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6d:ee:ab:96:40:29:a1:9e:fe:0c:76:3d:d5:8e:8b:89:7f: 2a:b0:5e:71:a6:c4:85:a0:0f:9b:60:b5:9e:40:80:06:e6:ad: 0c:2a:57:e8:33:84:98:65:2e:87:09:e5:d8:80:41:8e:28:b4: 48:59:10:9a:7b:e1:f4:51:c1:81:91:2d:89:af:08:47:02:a7: 4f:3d:6a:9a:f7:c3:0c:c6:68:8d:f3:0f:7c:a1:7c:d3:07:17: 73:04:3d:0d:94:85:ff:23:53:58:89:00:43:c0:a0:ac:65:b5: ce:bf:9d:bc:ba:41:fc:e5:5f:c2:69:b6:9c:04:c3:71:ef:4c: f2:fe:dd:00:6c:ef:0b:bc:2d:45:85:b5:e7:be:ca:ef:65:00: 51:a4:fb:4e:42:04:fa:9e:02:ad:16:c4:61:f9:0c:fe:be:38: c2:50:c2:b0:49:0e:d1:fc:4e:b5:1e:8e:0f:aa:f9:15:99:01: 92:5e:cf:93:91:d4:01:68:70:2a:d9:54:d3:7c:85:1a:cb:34: fa:49:11:4c:0b:cc:49:7e:4c:c4:cb:8a:c4:84:57:cd:1a:12: 28:38:47:37:5a:cf:68:aa:c9:90:18:5e:b0:ef:5a:d5:5c:43: 9e:3c:7d:aa:ef:44:6e:3f:f5:74:ee:2f:70:fd:48:59:90:da: 36:07:23:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz634oRsKJfYt2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NzUzYTJlN2UtNWIyZS00OTZlLTkwMzQtZjI2YTdjZDdlMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVwxQh/TBsF0x7ifw7/9/lUx/SZ5gWSdLODs 0dg0czuT5Z7xWwE2b22X1ylmBhGpbCw3Seq754QmDLLEbQM4GqwkIz/epZaOvGil KROx7LfSu6Uy+KJFW4YbgWkr/s2G/7NPDuBD2o92Kz/E0CHw+9m5HrJg9o075hbQ jj1C1iklqjJ7p7Vaj4gxbgQb9nqIRh7vHGuY7qfNnA1iv3QARhgvrY/ZWqaKYpf9 1m6PcVeMtpE5FpVNYaMxpfs1jl6ipWOG3d+j+tqZL0nXoomzB1lLfMCE/kJl11k7 7Saylyew9tcqTYznB3jv6yRm0W12cZtlKBC/Iu9c7GjI/M9b5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAcZ0W2cEQd+mqiYU4rzDlxQcIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWI0YTljYTEtZTI5NC0z NTdmLTgyNTYtMGRhYmIxYTVhZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9t7quWQCmhnv4Mdj3VjouJfyqwXnGmxIWgD5tgtZ5AgAbmrQwqV+gz hJhlLocJ5diAQY4otEhZEJp74fRRwYGRLYmvCEcCp089apr3wwzGaI3zD3yhfNMH F3MEPQ2Uhf8jU1iJAEPAoKxltc6/nby6QfzlX8JptpwEw3HvTPL+3QBs7wu8LUWF tee+yu9lAFGk+05CBPqeAq0WxGH5DP6+OMJQwrBJDtH8TrUejg+q+RWZAZJez5OR 1AFocCrZVNN8hRrLNPpJEUwLzEl+TMTLisSEV80aEig4Rzdaz2iqyZAYXrDvWtVc Q548farvRG4/9XTuL3D9SFmQ2jYHI9o= -----END CERTIFICATE-----Generated at Sun May 11 14:55:16 2025 by rpki-client