$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa File: a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa (raw, json) Hash identifier: 0CoQ3KbtP7BvMVrxlTXPnP2EYfhucZdC4zEQijrvQok= Subject key identifier: 3F:0E:DB:8E:41:25:0A:8E:47:52:79:8E:35:EC:E2:48:7C:27:FB:6B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849DF5A4F860A409E57AFC5DE60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 400536 IP address blocks: 172.120.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:4f:86:0a:40:9e:57:af:c5:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=29a05929-988b-480c-8858-908e124b5237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:07:02:d9:fd:91:e3:34:64:8a:82:0c:0d: fc:b8:da:c7:80:e7:3a:e3:6a:90:77:3e:8f:b9:1f: 24:e2:c8:3c:56:e5:28:a6:86:0d:4b:39:e3:49:84: 55:c3:c5:1a:15:29:cf:1c:bb:70:f4:1d:06:50:c7: 1d:ae:a7:6f:92:65:89:27:c8:13:c2:39:76:15:7b: b2:53:3d:c5:3a:61:51:e5:a5:94:a1:75:ce:3f:65: 29:c3:5d:cd:df:c3:8c:df:04:85:79:d1:af:6e:42: fd:3e:d0:08:6f:1b:8c:a4:be:2a:af:bd:7b:aa:b4: ac:a4:5e:9f:68:ab:ae:6b:22:1c:09:bf:21:cf:91: 7f:0c:db:6c:49:3e:ce:a9:c7:fc:2d:51:27:5d:7c: d6:d7:96:7e:54:ec:95:a8:f4:fa:dc:02:80:d6:75: 2b:43:a5:61:f0:31:d8:c1:07:cf:d2:a9:9b:80:67: 51:97:91:fc:b9:7f:97:00:f6:14:c0:18:de:c6:81: 1f:b0:1c:ea:7d:32:79:eb:32:c9:92:6f:00:8e:19: 9b:17:53:59:b9:0d:06:62:ea:46:99:9b:6a:48:47: 30:07:2d:68:c6:50:90:52:bf:41:cc:56:b8:ba:8e: c8:88:15:89:b1:46:0e:36:44:5d:c6:e8:96:f6:f3: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0E:DB:8E:41:25:0A:8E:47:52:79:8E:35:EC:E2:48:7C:27:FB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5e111b6-bf88-3a1a-8135-e4b6160e64e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c3:4e:09:61:9f:9e:8c:d2:ce:0b:23:b3:c6:d7:54:ab:b5: ed:6f:52:9d:62:e4:ae:67:5d:0c:a3:48:50:7a:fd:30:bb:e1: 79:75:46:21:a0:ae:94:3a:38:e8:fc:f6:4a:24:dd:7c:c6:8b: a0:5d:1f:f2:9a:7a:f5:5f:22:88:b2:29:bd:1a:5c:8e:78:b1: fc:b8:b9:38:fb:d8:56:73:b1:11:61:a6:a1:e8:0e:82:99:57: 91:ca:d2:28:1d:df:ef:df:35:86:24:3d:52:86:6b:60:7b:ed: 2d:a0:83:27:3a:a5:ec:a8:7d:e2:f7:df:14:75:2e:59:b1:75: 0d:59:1a:e7:b2:6b:8c:8b:e9:64:e3:52:3e:ed:2b:7c:5b:3e: 96:5d:d1:8a:89:25:b6:5e:d3:65:13:92:f7:bf:78:df:8e:53: 48:e0:ec:37:25:8e:8e:42:cd:4e:4a:29:a8:02:20:2b:b1:39: ea:48:4d:95:d6:55:c4:ff:9e:7d:d7:c9:2f:bb:42:7f:24:64: ac:66:1a:da:5c:21:01:5e:29:30:5e:bb:b4:60:b4:1a:48:de: e0:29:71:5e:26:cb:8f:3a:8e:43:8e:7d:67:76:39:95:bd:f9: 67:03:c1:35:25:91:1e:06:d1:f0:4a:e8:c3:18:2f:71:8a:67: de:6d:e2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWk+GCkCeV6/F3mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjlhMDU5MjktOTg4Yi00ODBjLTg4NTgtOTA4ZTEyNGI1MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWoHAtn9keM0ZIqCDA38uNrHgOc642qQdz6P uR8k4sg8VuUopoYNSznjSYRVw8UaFSnPHLtw9B0GUMcdrqdvkmWJJ8gTwjl2FXuy Uz3FOmFR5aWUoXXOP2Upw13N38OM3wSFedGvbkL9PtAIbxuMpL4qr717qrSspF6f aKuuayIcCb8hz5F/DNtsST7Oqcf8LVEnXXzW15Z+VOyVqPT63AKA1nUrQ6Vh8DHY wQfP0qmbgGdRl5H8uX+XAPYUwBjexoEfsBzqfTJ56zLJkm8AjhmbF1NZuQ0GYupG mZtqSEcwBy1oxlCQUr9BzFa4uo7IiBWJsUYONkRdxuiW9vPJSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8O245BJQqOR1J5jjXs4kh8J/trMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTVlMTExYjYtYmY4OC0z YTFhLTgxMzUtZTRiNjE2MGU2NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHDTglhn56M0s4LI7PG11Srte1vUp1i5K5nXQyjSFB6/TC74Xl1RiGg rpQ6OOj89kok3XzGi6BdH/KaevVfIoiyKb0aXI54sfy4uTj72FZzsRFhpqHoDoKZ V5HK0igd3+/fNYYkPVKGa2B77S2ggyc6peyofeL33xR1LlmxdQ1ZGueya4yL6WTj Uj7tK3xbPpZd0YqJJbZe02UTkve/eN+OU0jg7Dcljo5CzU5KKagCICuxOepITZXW VcT/nn3XyS+7Qn8kZKxmGtpcIQFeKTBeu7RgtBpI3uApcV4my486jkOOfWd2OZW9 +WcDwTUlkR4G0fBK6MMYL3GKZ95t4iA= -----END CERTIFICATE-----Generated at Mon Jun 30 19:55:06 2025 by rpki-client