$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa File: acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa (raw, json) Hash identifier: AR2/IWHjmD9CIWRUQ3zlEPUBFD9F+RaMDHmlly6ipCQ= Subject key identifier: 40:80:50:63:40:32:0F:50:15:35:C8:F8:DA:71:2F:52:B0:3C:F9:D4 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858492CB0B687E2D953AF7A462940 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 400759 IP address blocks: 142.252.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:b6:87:e2:d9:53:af:7a:46:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=dda26b9f-5a85-4168-9da7-924d4df51b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:c5:3d:c5:23:e1:98:40:5f:59:ef:dd:18: 34:d9:78:7f:3d:43:06:78:5b:59:4b:a8:d4:f6:99: e8:ef:0f:3e:da:7c:65:5e:cd:e5:9e:75:f1:a6:4f: 22:15:26:0a:83:d4:c6:d8:81:d0:5e:0e:3f:7b:49: f4:0d:ca:24:a1:3a:db:b2:34:ff:06:30:21:d7:bb: 0e:95:d7:c9:00:c4:4c:2f:bc:aa:e6:48:69:01:cd: 8d:40:04:4b:1a:ab:35:88:d8:96:cc:3e:eb:ca:ea: 8f:ce:22:c8:06:c2:dc:9f:75:31:35:2c:56:c0:8c: 09:a5:8d:b2:af:8d:dc:6b:04:29:0b:b1:81:a2:c0: 20:dc:26:76:ec:94:d9:d0:14:e8:00:22:c3:cf:78: f0:8d:34:f8:e0:f3:66:b3:a1:ba:c5:8a:0f:7e:88: bc:37:fd:22:ed:98:c0:fa:86:d3:8c:a8:98:d8:e9: a5:d0:d8:f5:0d:94:fb:eb:db:f1:11:80:a1:13:66: 9a:82:9c:1b:b7:62:61:5c:d5:65:5d:76:98:cc:c9: 64:68:5a:8e:97:13:8a:0e:cc:21:d1:b5:a6:fe:7a: 6f:f7:7a:a1:3d:95:8d:68:fd:59:d7:e9:62:59:1e: 8c:a0:77:05:83:38:e3:a2:5c:0e:2b:fd:55:d9:1d: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:80:50:63:40:32:0F:50:15:35:C8:F8:DA:71:2F:52:B0:3C:F9:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2b:84:bb:62:98:15:e2:7b:4c:cd:d3:16:9d:12:87:71:77: 24:94:5f:ba:c3:86:74:22:87:da:08:ed:09:cf:32:d6:a4:0c: d5:e5:95:01:bb:9e:1d:7b:ee:1a:4a:0d:93:65:b8:77:da:25: 66:a7:b3:91:83:a0:6f:49:19:98:a1:f0:1b:78:f6:65:60:d4: d2:f8:05:89:97:9f:bd:fd:1b:6b:93:93:b0:9e:09:95:fb:85: 18:a8:8b:7a:9d:58:8d:0a:36:e2:92:56:a9:54:42:37:bf:24: 4a:6f:e2:11:c4:24:c2:42:db:95:3a:e3:f8:33:7c:27:72:e9: f4:fc:be:fc:fc:cc:80:8c:f0:97:c1:a8:7b:ef:86:3d:a5:96: dd:d3:99:a4:aa:98:6b:c3:ba:95:16:ed:ca:91:23:69:16:d6: 90:c6:77:9c:17:69:a5:26:a1:ba:00:fb:9b:25:64:c9:43:76: 81:0f:5e:a6:6d:84:1e:06:e0:81:c6:ee:df:74:93:c0:67:2d: 1b:4d:b7:1b:2a:6c:fe:4c:3e:9c:d1:3d:cf:47:29:82:8b:02: cd:3a:30:ae:70:2e:04:dd:5a:61:8c:2d:16:39:90:bc:85:d2: ee:37:b3:21:48:8d:af:5a:9b:97:04:02:85:95:c3:28:99:1c: f3:94:9a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssLaH4tlTr3pGKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGRhMjZiOWYtNWE4NS00MTY4LTlkYTctOTI0ZDRkZjUxYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8HFPcUj4ZhAX1nv3Rg02Xh/PUMGeFtZS6jU 9pno7w8+2nxlXs3lnnXxpk8iFSYKg9TG2IHQXg4/e0n0DcokoTrbsjT/BjAh17sO ldfJAMRML7yq5khpAc2NQARLGqs1iNiWzD7ryuqPziLIBsLcn3UxNSxWwIwJpY2y r43cawQpC7GBosAg3CZ27JTZ0BToACLDz3jwjTT44PNms6G6xYoPfoi8N/0i7ZjA +obTjKiY2Oml0Nj1DZT769vxEYChE2aagpwbt2JhXNVlXXaYzMlkaFqOlxOKDswh 0bWm/npv93qhPZWNaP1Z1+liWR6MoHcFgzjjolwOK/1V2R0TWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECAUGNAMg9QFTXI+NpxL1KwPPnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWNkMzc2N2UtNmZhMC0z MWQ4LWExYTItZDgwNjhmNGUxMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIrhLtimBXie0zN0xadEodxdySUX7rDhnQih9oI7QnPMtakDNXllQG7 nh177hpKDZNluHfaJWans5GDoG9JGZih8Bt49mVg1NL4BYmXn739G2uTk7CeCZX7 hRioi3qdWI0KNuKSVqlUQje/JEpv4hHEJMJC25U64/gzfCdy6fT8vvz8zICM8JfB qHvvhj2llt3TmaSqmGvDupUW7cqRI2kW1pDGd5wXaaUmoboA+5slZMlDdoEPXqZt hB4G4IHG7t90k8BnLRtNtxsqbP5MPpzRPc9HKYKLAs06MK5wLgTdWmGMLRY5kLyF 0u43syFIja9am5cEAoWVwyiZHPOUmkk= -----END CERTIFICATE-----Generated at Mon May 5 05:35:10 2025 by rpki-client