$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa File: b325f6f1-0016-3250-a9e2-462a29e132f3.roa (raw, json) Hash identifier: d1hxVnQY5ozzKGJqVgM3txpbyBdXWqZPvHqN9uJnrdQ= Subject key identifier: 82:4C:AC:6E:08:DA:A5:57:56:81:49:28:6C:25:C3:1C:9A:C1:A1:6F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164FB4639F479EBD3580380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 172.252.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fb:46:39:f4:79:eb:d3:58:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=de8d16af-7f9c-4b70-8225-9b39a262f4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:ad:67:ff:3d:4e:9e:e0:fb:af:52:d3:78: bb:55:46:f2:a7:3f:4e:31:42:bb:77:01:6b:af:e0: 51:4b:b2:94:96:d6:fe:f7:14:5a:70:66:7e:bd:f9: 4b:3b:8b:15:b6:f6:a5:9d:de:37:20:b2:86:5d:58: a7:de:58:70:39:6b:2b:e5:39:01:11:d4:f0:ba:83: 4c:69:6d:4c:96:5c:51:45:cb:13:e2:e2:fb:ec:fc: 93:99:23:8a:b5:1c:15:57:c0:c0:b9:f8:f4:45:c2: af:51:82:71:1f:1a:e5:b0:81:2f:d3:b6:a2:e5:ca: c9:45:d5:40:de:05:ad:54:2b:0b:e9:d7:44:61:7c: 1b:09:7b:72:b8:82:df:9b:25:5f:e6:57:25:83:4a: 8a:f6:9a:0c:bb:b2:7e:91:b6:10:11:a9:8a:f8:40: bc:bb:06:be:07:21:4c:21:6d:01:3d:25:4e:c1:a4: 6d:d5:fd:bc:21:e6:b5:d6:c5:46:44:5a:29:e8:41: f1:84:4f:56:c0:33:1f:da:5b:8a:f2:79:fe:71:d4: 21:23:01:8c:6d:a3:d7:48:4a:3f:b6:86:6c:15:bc: ec:e9:a1:17:19:3d:1a:02:f6:b3:d6:84:cb:e8:cd: 0e:18:3f:62:94:1d:46:51:b9:ed:73:92:aa:6c:0e: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4C:AC:6E:08:DA:A5:57:56:81:49:28:6C:25:C3:1C:9A:C1:A1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b5:5a:f6:40:d7:52:ee:c5:ae:f7:af:a1:0d:ed:bd:9d:af: c7:fe:66:b8:4f:ea:14:51:10:95:88:a5:2f:a8:ff:1f:35:70: 22:22:5d:44:5e:d4:d9:9c:f4:7a:d9:ea:66:e8:b5:80:76:b6: e6:8b:15:18:7e:79:4a:91:5f:ca:1b:c4:e3:a3:85:b7:f3:99: 4d:a7:ab:d9:b3:22:e0:e0:a2:6d:85:03:ed:00:14:a5:39:ac: a9:58:ba:12:40:18:2e:2f:80:6b:83:7a:9c:ba:82:35:41:f8: a2:dd:40:02:f5:27:95:9c:b1:25:b6:3a:0c:d6:4d:a1:19:3f: a4:15:54:d9:1e:fc:74:92:dc:e1:3b:ce:d9:4b:df:d3:fd:49: 63:00:ab:1c:31:e0:eb:51:29:20:bb:16:1d:4d:59:df:8b:c9: fe:24:ee:2d:97:f9:c0:f0:0a:3b:f1:1a:00:e9:0b:8e:54:63: c7:50:fd:67:23:85:2a:8a:a5:cc:ea:c6:9f:5e:66:bb:6d:0f: 4a:98:df:56:bb:56:fa:3e:f8:47:15:f2:77:a4:8c:af:03:90: 89:e9:13:30:6c:50:9d:6a:6e:46:9c:56:65:06:ee:3e:94:87: 15:49:02:d0:0d:1f:aa:cf:92:1b:9f:69:ec:54:f1:31:5d:45: f1:f8:38:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPtGOfR569NYA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZGU4ZDE2YWYtN2Y5Yy00YjcwLTgyMjUtOWIzOWEyNjJmNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeutZ/89Tp7g+69S03i7VUbypz9OMUK7dwFr r+BRS7KUltb+9xRacGZ+vflLO4sVtvalnd43ILKGXVin3lhwOWsr5TkBEdTwuoNM aW1MllxRRcsT4uL77PyTmSOKtRwVV8DAufj0RcKvUYJxHxrlsIEv07ai5crJRdVA 3gWtVCsL6ddEYXwbCXtyuILfmyVf5lclg0qK9poMu7J+kbYQEamK+EC8uwa+ByFM IW0BPSVOwaRt1f28Iea11sVGRFop6EHxhE9WwDMf2luK8nn+cdQhIwGMbaPXSEo/ toZsFbzs6aEXGT0aAvaz1oTL6M0OGD9ilB1GUbntc5KqbA7WKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJMrG4I2qVXVoFJKGwlwxyawaFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjMyNWY2ZjEtMDAxNi0z MjUwLWE5ZTItNDYyYTI5ZTEzMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK1WvZA11Luxa73r6EN7b2dr8f+ZrhP6hRREJWIpS+o/x81cCIiXURe 1Nmc9HrZ6mbotYB2tuaLFRh+eUqRX8obxOOjhbfzmU2nq9mzIuDgom2FA+0AFKU5 rKlYuhJAGC4vgGuDepy6gjVB+KLdQAL1J5WcsSW2OgzWTaEZP6QVVNke/HSS3OE7 ztlL39P9SWMAqxwx4OtRKSC7Fh1NWd+Lyf4k7i2X+cDwCjvxGgDpC45UY8dQ/Wcj hSqKpczqxp9eZrttD0qY31a7Vvo++EcV8nekjK8DkInpEzBsUJ1qbkacVmUG7j6U hxVJAtANH6rPkhufaexU8TFdRfH4OFg= -----END CERTIFICATE-----Generated at Mon May 12 01:38:02 2025 by rpki-client