$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa File: ac769227-e328-3ef7-a7d7-099e129a190c.roa (raw, json) Hash identifier: yvOAlHga6BjPh2fxIhoyk5gQ016KcIrRYUaPx66OPso= Subject key identifier: 4E:0B:CF:24:94:59:9E:99:55:DF:A3:E8:12:16:69:6B:2B:2E:F1:CE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A2AB5FC2E78E1AA52DB80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 212238 IP address blocks: 172.121.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:2a:b5:fc:2e:78:e1:aa:52:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=4d60a48e-68bd-4d73-9045-9d390ad184dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:53:86:96:55:f2:24:c9:d9:0a:cf:f9:08: 91:e5:73:55:c9:c9:37:64:0c:96:75:e5:fd:8c:33: 29:8c:9b:fa:3a:62:32:6b:fa:a8:89:83:cd:fd:68: 40:9b:91:6d:ce:e3:cc:4c:32:70:ea:c6:d5:14:bf: cd:f7:65:b2:95:d3:ff:66:46:cc:de:9a:e9:4f:c8: c9:d5:61:30:2a:c4:f3:03:3d:ec:b5:37:93:bf:62: dd:7d:dd:52:db:63:b5:e5:f4:84:8d:4f:49:11:25: a9:ad:a9:e8:dd:61:dd:12:62:8e:5c:b3:98:dd:6c: 87:b9:7b:65:d8:fd:e8:16:76:19:51:3a:09:8a:57: 11:d7:9a:89:d5:c4:37:0d:22:57:7a:39:48:e2:71: 49:8d:1b:e6:12:fd:22:39:6a:16:b3:b2:77:d1:fe: db:53:f0:58:e4:ad:3c:45:03:7a:7a:18:ea:67:7c: 98:f4:f2:c3:d2:ee:ce:e2:32:7f:41:32:8a:a3:9f: 58:8d:f2:55:ac:d4:49:78:b2:28:ad:e4:8f:10:a4: 03:6f:6f:2d:f4:ee:87:b0:dc:21:40:e6:b4:fb:16: da:9a:fa:b2:77:a6:76:8b:62:cc:7e:63:fe:f9:f9: ee:c4:c3:d5:ef:dc:33:10:78:d2:38:f9:8b:fc:d5: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0B:CF:24:94:59:9E:99:55:DF:A3:E8:12:16:69:6B:2B:2E:F1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6d:01:e1:a4:75:21:b1:8e:9c:cb:e8:8a:ea:9c:bb:af:d0: fa:7d:46:3b:fc:d7:d6:e0:ef:50:10:3b:6a:0e:c3:9d:41:89: 19:52:92:e6:af:d5:a0:f4:c9:f8:44:09:15:c1:3b:02:32:54: 73:df:83:80:b0:26:68:ae:f0:95:cd:b5:08:36:2b:ec:28:e1: 89:b6:5f:fe:11:96:63:f5:9d:e3:f6:af:a3:d7:66:ab:77:dc: 22:66:b3:d9:6d:3e:2e:fa:eb:b8:b8:ca:b9:08:8c:76:9b:cc: 49:0c:e8:27:2c:70:0f:e5:03:dc:71:cc:af:2e:2f:d5:d8:c1: 46:11:ad:dc:cb:cc:50:a6:40:f8:10:6c:1b:87:6c:c9:9f:d3: 3b:61:46:1e:08:05:a2:f1:7b:5a:9d:c3:70:c4:37:f9:f5:21: cb:aa:df:4b:38:8b:57:b6:8d:16:94:31:4c:9e:f5:99:de:b5: 6a:20:68:31:ff:a1:40:b1:ff:9b:7d:fe:22:ea:d8:3f:70:8b: 62:2f:d6:29:40:4b:ff:2a:b4:2f:2f:8e:c8:14:6b:2f:24:01: 79:a9:49:30:fc:43:9e:c2:91:d0:82:07:6c:dd:e6:50:2d:a1: d5:65:e0:b4:56:56:96:17:c3:ab:68:a2:e3:da:0d:65:ac:61: 14:6d:c4:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eiq1/C544apS24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NGQ2MGE0OGUtNjhiZC00ZDczLTkwNDUtOWQzOTBhZDE4NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuihThpZV8iTJ2QrP+QiR5XNVyck3ZAyWdeX9 jDMpjJv6OmIya/qoiYPN/WhAm5FtzuPMTDJw6sbVFL/N92WyldP/ZkbM3prpT8jJ 1WEwKsTzAz3stTeTv2Ldfd1S22O15fSEjU9JESWprano3WHdEmKOXLOY3WyHuXtl 2P3oFnYZUToJilcR15qJ1cQ3DSJXejlI4nFJjRvmEv0iOWoWs7J30f7bU/BY5K08 RQN6ehjqZ3yY9PLD0u7O4jJ/QTKKo59YjfJVrNRJeLIoreSPEKQDb28t9O6HsNwh QOa0+xbamvqyd6Z2i2LMfmP++fnuxMPV79wzEHjSOPmL/NWn0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4LzySUWZ6ZVd+j6BIWaWsrLvHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWM3NjkyMjctZTMyOC0z ZWY3LWE3ZDctMDk5ZTEyOWExOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZtAeGkdSGxjpzL6IrqnLuv0Pp9Rjv819bg71AQO2oOw51BiRlSkuav 1aD0yfhECRXBOwIyVHPfg4CwJmiu8JXNtQg2K+wo4Ym2X/4RlmP1neP2r6PXZqt3 3CJms9ltPi7667i4yrkIjHabzEkM6CcscA/lA9xxzK8uL9XYwUYRrdzLzFCmQPgQ bBuHbMmf0zthRh4IBaLxe1qdw3DEN/n1Icuq30s4i1e2jRaUMUye9ZnetWogaDH/ oUCx/5t9/iLq2D9wi2Iv1ilAS/8qtC8vjsgUay8kAXmpSTD8Q57CkdCCB2zd5lAt odVl4LRWVpYXw6toouPaDWWsYRRtxPY= -----END CERTIFICATE-----Generated at Sat May 10 13:56:07 2025 by rpki-client