$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd103826-0ad1-3153-956b-9812301644f2.roa File: bd103826-0ad1-3153-956b-9812301644f2.roa (raw, json) Hash identifier: ckGMH4/9o2sSLIqw4aYChPOjYYAe64Fi+vr/TIw2Ty0= Subject key identifier: 0C:4C:B8:A7:5B:F4:76:F8:53:4D:1F:77:3B:30:19:5A:37:88:C3:1B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849AD1A1778DB8781ABDD32E000 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd103826-0ad1-3153-956b-9812301644f2.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 15083 IP address blocks: 172.120.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:17:78:db:87:81:ab:dd:32:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=122b24e9-cabf-4bb7-a6a6-d670710734f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d7:67:43:37:29:45:ea:1e:5d:f7:07:9d:3e: 99:8e:85:a7:8e:2a:9f:9c:ad:82:51:ed:dc:4d:91: 78:88:a0:19:85:5f:54:74:66:64:a7:a6:8b:71:f3: 82:75:63:65:3a:06:a1:58:ec:1d:05:d1:37:1d:ce: 88:58:4e:1b:d0:e2:81:12:7e:a7:9c:25:d7:a6:81: cc:cc:17:3e:6f:20:45:07:1d:4e:1f:10:f7:1c:14: 05:e5:1f:70:25:ac:b7:fa:e1:e6:43:9f:7f:e1:a8: ca:93:15:4f:c9:0e:8c:ec:0b:92:06:36:a1:fd:f1: 73:5a:88:76:65:96:8f:8f:95:9a:4a:2f:90:23:f8: c0:6d:00:34:20:e5:eb:0e:f6:74:14:fc:3a:16:1d: 36:3f:14:40:93:60:49:61:3e:1d:d5:af:17:a8:ec: 2b:6f:44:e1:e0:1f:d8:b1:8e:21:c7:b9:03:98:89: e7:c6:08:d1:56:cd:73:31:42:33:b3:e8:ce:03:f9: e0:1c:56:dd:2d:51:1c:ba:fe:78:af:9e:3c:d8:c6: ca:d4:e8:9f:b7:33:fd:15:4d:1f:99:ff:55:6d:36: 31:50:ef:98:cd:e9:b2:7c:8c:78:9f:12:2a:fe:e6: d3:6e:69:a7:a2:8d:8b:5a:94:0b:bc:2e:cb:36:b2: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4C:B8:A7:5B:F4:76:F8:53:4D:1F:77:3B:30:19:5A:37:88:C3:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd103826-0ad1-3153-956b-9812301644f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b1:8d:39:63:fe:dd:53:7a:82:4a:06:54:7f:6e:29:45:d0: 89:3f:52:58:71:b8:e8:4e:fd:22:77:4a:60:39:37:8a:f2:0a: 7d:4b:9a:75:99:dd:25:de:54:b4:17:22:d0:8b:4c:fc:13:6e: 12:4e:53:0b:31:cc:a7:2c:c1:db:bd:40:74:aa:2f:de:62:d1: b6:40:84:f4:36:91:fd:82:bc:7f:e4:ad:02:54:2a:65:b6:d9: 61:f6:fb:44:2d:8a:f3:bd:79:9f:ef:d7:7c:7f:ec:5a:c1:5b: 23:2c:28:e0:f5:aa:79:60:f6:8a:3c:5e:5d:a7:ea:f6:33:73: 7b:c9:a6:03:ca:1b:7c:4a:30:e9:c0:47:b3:b5:aa:0c:7e:97: f2:72:b8:96:4f:33:e2:7e:86:b6:49:fa:ff:90:ac:3e:de:ef: a5:40:33:ed:3d:eb:5b:a4:d0:d9:cc:3b:c1:5d:87:0a:80:5a: 50:40:17:83:e6:55:b3:a6:1e:17:b7:5e:78:a2:1a:b4:f0:91: d4:ef:7b:3e:da:e0:97:5f:a1:5e:31:16:80:9d:b9:e7:6c:00: 6c:6c:46:d7:be:9d:c6:ee:a9:41:ee:1a:d8:2e:53:ab:d6:2e: 38:b8:76:3e:67:82:9f:0e:bd:cd:cf:a7:ea:19:38:83:9b:5c: da:4a:ad:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhd424eBq90y4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTIyYjI0ZTktY2FiZi00YmI3LWE2YTYtZDY3MDcxMDczNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59dnQzcpReoeXfcHnT6ZjoWnjiqfnK2CUe3c TZF4iKAZhV9UdGZkp6aLcfOCdWNlOgahWOwdBdE3Hc6IWE4b0OKBEn6nnCXXpoHM zBc+byBFBx1OHxD3HBQF5R9wJay3+uHmQ59/4ajKkxVPyQ6M7AuSBjah/fFzWoh2 ZZaPj5WaSi+QI/jAbQA0IOXrDvZ0FPw6Fh02PxRAk2BJYT4d1a8XqOwrb0Th4B/Y sY4hx7kDmInnxgjRVs1zMUIzs+jOA/ngHFbdLVEcuv54r5482MbK1OiftzP9FU0f mf9VbTYxUO+YzemyfIx4nxIq/ubTbmmnoo2LWpQLvC7LNrK4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxMuKdb9Hb4U00fdzswGVo3iMMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmQxMDM4MjYtMGFkMS0z MTUzLTk1NmItOTgxMjMwMTY0NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKxjTlj/t1TeoJKBlR/bilF0Ik/UlhxuOhO/SJ3SmA5N4ryCn1LmnWZ 3SXeVLQXItCLTPwTbhJOUwsxzKcswdu9QHSqL95i0bZAhPQ2kf2CvH/krQJUKmW2 2WH2+0QtivO9eZ/v13x/7FrBWyMsKOD1qnlg9oo8Xl2n6vYzc3vJpgPKG3xKMOnA R7O1qgx+l/JyuJZPM+J+hrZJ+v+QrD7e76VAM+0961uk0NnMO8FdhwqAWlBAF4Pm VbOmHhe3XniiGrTwkdTvez7a4JdfoV4xFoCduedsAGxsRte+ncbuqUHuGtguU6vW Lji4dj5ngp8Ovc3Pp+oZOIObXNpKrUA= -----END CERTIFICATE-----Generated at Mon May 12 19:06:08 2025 by rpki-client