$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a59af0a7-0dd6-3219-87f0-1f71a1f22e14.roa File: a59af0a7-0dd6-3219-87f0-1f71a1f22e14.roa (raw, json) Hash identifier: KPg74R8t/u2XdSkY1zNePYrzhghEgSkYbjiy5XGiSCc= Subject key identifier: B2:31:44:27:E3:86:2F:5D:1A:3E:12:94:45:36:CB:ED:DB:DA:00:40 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A278736318557FBC34A00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a59af0a7-0dd6-3219-87f0-1f71a1f22e14.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:27:87:36:31:85:57:fb:c3:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=40b6b67e-6646-4f8a-960b-cf7cfec6e0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:bf:e3:b8:85:e4:07:ac:eb:2c:6d:5c:94: 6b:e4:3b:d9:87:ea:39:3a:33:77:bb:a4:12:a4:42: 82:09:ce:80:5f:dc:94:a1:b0:40:ac:2d:c1:27:61: d4:32:d4:b1:9a:9b:b7:c7:5d:62:47:59:73:1e:42: 27:fe:16:f2:99:aa:8a:1b:b0:fa:74:30:66:a2:68: b0:74:c9:8f:7d:bf:6f:c2:5a:79:72:73:f0:84:73: 88:e8:87:ab:7d:8c:47:9d:b8:fd:95:b3:38:d6:d0: 7e:00:40:dd:b5:2a:12:77:a6:9e:ff:67:23:ff:63: fe:9e:6c:f6:15:3e:18:4d:cf:ff:dd:37:be:f8:84: 54:68:89:11:29:4b:db:cd:24:1c:f5:93:93:97:4e: 05:d7:6f:da:ea:de:58:ab:00:43:a5:15:1a:bd:53: b0:0b:21:6a:86:ef:ee:d3:c2:a6:9e:ff:86:d1:ea: 35:51:44:5e:be:20:f7:d1:9f:e4:56:96:95:9a:b8: ec:52:86:e6:47:d0:ad:df:59:78:ed:04:5f:45:f6: a7:62:ff:8e:79:65:75:ab:7d:52:06:df:e7:04:14: b5:d3:4d:ac:02:85:b8:7c:d7:0a:ac:78:08:71:bc: 75:fa:f7:59:13:ae:e5:24:d0:2b:23:df:fd:61:27: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:31:44:27:E3:86:2F:5D:1A:3E:12:94:45:36:CB:ED:DB:DA:00:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a59af0a7-0dd6-3219-87f0-1f71a1f22e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3b:ca:7f:29:d0:82:02:40:52:b3:98:fe:a8:ca:ac:68:f4: 54:e6:7c:38:77:76:02:5e:2e:37:9a:6a:09:f7:1d:ec:26:8b: 47:6a:db:4b:8c:cb:d1:03:f4:33:82:a5:47:cb:4e:99:c5:f0: ae:16:a1:0b:30:83:5d:79:14:c3:f4:96:f3:6c:22:2c:ee:fd: 41:eb:e6:20:e6:54:71:72:39:e3:10:ff:20:b6:1d:62:6e:86: d5:9a:ad:1f:c7:b8:1f:48:b9:ea:7a:d9:a2:0e:30:fa:36:96: 8e:0c:e5:89:98:48:84:2e:4a:a2:47:11:e1:e0:73:49:4d:8f: 20:10:7a:8c:7f:1d:ed:e2:fd:fc:bc:60:74:1e:1f:36:bb:bd: 8a:9a:4e:64:0a:7f:e7:41:a8:82:42:45:2b:fb:e7:13:c3:e9: cb:84:52:22:3f:2d:44:3a:43:7c:cd:c0:8f:3f:0c:ea:a2:4f: 08:17:c9:43:52:86:d5:57:53:eb:49:de:db:ba:0f:40:ab:9d: 82:28:a1:16:15:42:54:50:70:76:94:d2:17:29:dc:ad:04:fd: 5b:87:ea:bf:34:46:7b:3a:e8:07:02:02:a6:83:c9:f3:59:89: 4f:d4:5e:4a:11:60:9d:c9:39:80:f9:dd:0a:e3:7e:e4:f1:0f: 2c:ae:74:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eieHNjGFV/vDSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NDBiNmI2N2UtNjY0Ni00ZjhhLTk2MGItY2Y3Y2ZlYzZlMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7+/47iF5Aes6yxtXJRr5DvZh+o5OjN3u6QS pEKCCc6AX9yUobBArC3BJ2HUMtSxmpu3x11iR1lzHkIn/hbymaqKG7D6dDBmomiw dMmPfb9vwlp5cnPwhHOI6IerfYxHnbj9lbM41tB+AEDdtSoSd6ae/2cj/2P+nmz2 FT4YTc//3Te++IRUaIkRKUvbzSQc9ZOTl04F12/a6t5YqwBDpRUavVOwCyFqhu/u 08Kmnv+G0eo1UUReviD30Z/kVpaVmrjsUobmR9Ct31l47QRfRfanYv+OeWV1q31S Bt/nBBS1002sAoW4fNcKrHgIcbx1+vdZE67lJNArI9/9YScAcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIxRCfjhi9dGj4SlEU2y+3b2gBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTU5YWYwYTctMGRkNi0z MjE5LTg3ZjAtMWY3MWExZjIyZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI87yn8p0IICQFKzmP6oyqxo9FTmfDh3dgJeLjeaagn3Hewmi0dq20uM y9ED9DOCpUfLTpnF8K4WoQswg115FMP0lvNsIizu/UHr5iDmVHFyOeMQ/yC2HWJu htWarR/HuB9Iuep62aIOMPo2lo4M5YmYSIQuSqJHEeHgc0lNjyAQeox/He3i/fy8 YHQeHza7vYqaTmQKf+dBqIJCRSv75xPD6cuEUiI/LUQ6Q3zNwI8/DOqiTwgXyUNS htVXU+tJ3tu6D0CrnYIooRYVQlRQcHaU0hcp3K0E/VuH6r80Rns66AcCAqaDyfNZ iU/UXkoRYJ3JOYD53QrjfuTxDyyudGE= -----END CERTIFICATE-----Generated at Sun May 11 09:03:43 2025 by rpki-client