$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/baf70881-8537-30ff-ae8e-1a2176221120.roa File: baf70881-8537-30ff-ae8e-1a2176221120.roa (raw, json) Hash identifier: wW3NyUUeSjkjk81AinfhkG7KBcxqTBcjg62nk+br9y0= Subject key identifier: 20:5B:65:51:AF:06:81:95:5E:1A:3C:7C:D5:7B:36:22:03:BC:1B:3C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849C26439A9BDBA5343EF5133C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/baf70881-8537-30ff-ae8e-1a2176221120.roa Signing time: Tue 06 May 2025 04:02:35 +0000 ROA not before: Tue 06 May 2025 04:02:35 +0000 ROA not after: Mon 04 Aug 2025 04:02:35 +0000 asID: 399073 IP address blocks: 172.121.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:64:39:a9:bd:ba:53:43:ef:51:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 6 04:02:35 2025 GMT Not After : Aug 4 04:02:35 2025 GMT Subject: CN=0ef91653-1e3b-46ce-906b-e2dd8aaf8f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:c0:d4:05:0d:18:d0:c2:05:a9:e0:54:ca: 8e:98:5d:84:ff:d9:cb:16:c2:31:87:8f:ff:7a:5b: 89:8f:8a:ee:02:9e:df:09:20:40:77:6b:38:47:13: b7:6d:8c:28:2c:ff:ca:7c:90:a7:f1:87:93:4b:9f: 59:e6:12:29:f0:46:02:48:ad:8b:a6:6a:52:63:51: d9:3e:f4:0e:3d:5d:75:d7:ef:4d:38:27:63:76:b7: ef:ab:71:77:b1:f5:08:75:bf:03:d4:90:c1:31:2f: de:fd:df:74:e3:2f:aa:32:8f:0f:42:b0:eb:1d:d9: 76:da:a9:5a:32:a0:8f:70:ac:e1:2d:14:bc:5c:07: 38:a8:d2:61:cd:b2:d3:c4:bc:90:b9:68:6b:b6:d5: b2:e9:a4:18:2b:67:7a:a8:69:f7:47:8c:df:e4:1f: f2:c7:14:9c:11:c4:ad:8e:1f:16:fa:73:b4:ef:e6: 8b:fa:e4:b1:b4:9c:86:1b:eb:4b:19:2e:fe:d5:d0: eb:d5:88:c4:c8:82:ac:cb:ac:8a:d0:18:8f:38:4c: 74:ce:30:a2:b2:71:13:58:64:71:c5:f1:43:12:23: 43:35:84:19:53:94:7e:04:1d:73:99:11:f5:bd:6e: 47:11:59:7e:31:e5:80:c6:e8:ee:06:d7:80:5e:6e: 5c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5B:65:51:AF:06:81:95:5E:1A:3C:7C:D5:7B:36:22:03:BC:1B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/baf70881-8537-30ff-ae8e-1a2176221120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:8e:7d:78:a8:bf:7f:f1:8e:b4:a2:cc:84:ab:2e:b7:c9:37: 59:41:53:59:ad:76:1c:07:5b:29:62:20:63:76:93:4a:5c:3d: 6c:bd:87:35:fe:f7:6c:79:a8:85:c7:c5:28:39:de:db:e1:00: 75:5c:9c:33:b8:4b:88:e3:d4:43:43:29:b5:ea:e4:bb:9f:70: e1:20:98:3f:b4:4c:7f:1e:0e:8b:24:f5:1f:6b:97:22:80:4b: 94:b6:6f:a7:8e:b5:d8:5a:78:a4:ed:f0:24:c7:a5:5e:6f:10: d0:0e:4b:ae:44:8f:ce:e3:c8:6e:ad:c6:51:6c:b8:f3:78:b4: 58:79:21:df:b0:a9:d4:06:25:03:24:0b:48:fe:db:ae:95:c2: 61:3a:0e:ed:52:68:dc:6d:5f:51:f7:c2:2f:ac:73:9b:8a:d2: cd:0a:9f:37:19:3b:c1:2f:a7:0e:f5:c6:50:a7:49:b6:17:33: 27:d1:5d:bb:6d:52:52:c3:02:08:b1:b2:70:11:02:b3:c7:f5: 8b:9f:cd:94:00:cb:d5:35:17:bd:f7:fb:0c:ff:db:d3:3e:26: 1c:67:e2:13:fd:07:9c:d9:23:d0:07:66:fc:58:0a:de:15:03: 2a:d5:a6:43:fd:53:dc:cb:b9:2f:4d:8d:32:3d:2b:3e:eb:8d: 8c:e6:22:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCZDmpvbpTQ+9RM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwNjA0MDIzNVoXDTI1MDgwNDA0MDIzNVowLzEtMCsGA1UEAxMk MGVmOTE2NTMtMWUzYi00NmNlLTkwNmItZTJkZDhhYWY4ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApILA1AUNGNDCBangVMqOmF2E/9nLFsIxh4// eluJj4ruAp7fCSBAd2s4RxO3bYwoLP/KfJCn8YeTS59Z5hIp8EYCSK2LpmpSY1HZ PvQOPV111+9NOCdjdrfvq3F3sfUIdb8D1JDBMS/e/d904y+qMo8PQrDrHdl22qla MqCPcKzhLRS8XAc4qNJhzbLTxLyQuWhrttWy6aQYK2d6qGn3R4zf5B/yxxScEcSt jh8W+nO07+aL+uSxtJyGG+tLGS7+1dDr1YjEyIKsy6yK0BiPOEx0zjCisnETWGRx xfFDEiNDNYQZU5R+BB1zmRH1vW5HEVl+MeWAxujuBteAXm5c/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBbZVGvBoGVXho8fNV7NiIDvBs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmFmNzA4ODEtODUzNy0z MGZmLWFlOGUtMWEyMTc2MjIxMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByOfXiov3/xjrSizISrLrfJN1lBU1mtdhwHWyliIGN2k0pcPWy9hzX+ 92x5qIXHxSg53tvhAHVcnDO4S4jj1ENDKbXq5LufcOEgmD+0TH8eDosk9R9rlyKA S5S2b6eOtdhaeKTt8CTHpV5vENAOS65Ej87jyG6txlFsuPN4tFh5Id+wqdQGJQMk C0j+266VwmE6Du1SaNxtX1H3wi+sc5uK0s0KnzcZO8Evpw71xlCnSbYXMyfRXbtt UlLDAgixsnARArPH9YufzZQAy9U1F733+wz/29M+Jhxn4hP9B5zZI9AHZvxYCt4V AyrVpkP9U9zLuS9NjTI9Kz7rjYzmInI= -----END CERTIFICATE-----Generated at Sun May 11 18:54:14 2025 by rpki-client