$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be27416e-97af-3611-b1eb-8bc129774004.roa File: be27416e-97af-3611-b1eb-8bc129774004.roa (raw, json) Hash identifier: ctxdjvZAP98sJWdF4hMa+MUUO+GgrV+dteWFXUqjKm4= Subject key identifier: C9:9D:C6:3A:D3:8D:0B:7C:40:8E:DF:AB:AD:EF:45:A2:55:19:87:0D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849BF3F58FA17FC36D8CB2F7080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be27416e-97af-3611-b1eb-8bc129774004.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7018 IP address blocks: 172.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:58:fa:17:fc:36:d8:cb:2f:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=55ff6edf-7017-4993-a4d4-3b3b9832ff8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ff:4b:52:0e:bb:1f:78:1f:9f:a9:ca:fb:cc: 26:fa:89:77:6a:d1:ac:06:6b:70:8f:ce:1b:ba:32: eb:d3:2a:9f:bc:73:e3:fb:3d:cc:cb:df:c2:68:81: 1e:59:7e:f0:c3:09:b7:e6:01:a7:90:89:ba:4c:96: 72:49:bd:4e:00:81:c9:5d:a0:94:67:91:6d:af:d0: 19:0d:e0:b1:48:23:6b:3e:63:4c:35:e5:59:a0:93: cd:fa:94:4d:ce:a6:88:11:6c:b1:74:02:95:e6:cd: 4b:5c:51:e5:4a:4c:39:bc:de:ef:b0:3f:62:07:e4: 21:b6:fe:b0:25:66:e7:35:e2:07:f8:5a:7a:6e:3e: 1a:5b:5e:11:92:07:ab:10:b1:d7:d8:fa:80:01:b6: 29:db:cf:44:05:92:d9:fe:7c:9e:5b:e4:01:0f:73: 42:50:ef:71:cb:a0:6c:48:18:e5:71:5d:43:11:95: 53:e4:34:43:62:4d:ce:46:b5:26:1f:be:60:7f:b2: 08:4b:0d:1d:13:7b:1b:80:81:71:cd:0a:08:9d:70: a4:f9:6b:dd:34:b1:a6:8a:7b:98:bb:c3:1e:d7:10: 97:d7:4a:7d:93:b3:7a:81:be:80:b3:21:46:df:b6: df:c0:21:db:97:e2:22:8c:3e:fe:ff:78:60:c2:d2: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9D:C6:3A:D3:8D:0B:7C:40:8E:DF:AB:AD:EF:45:A2:55:19:87:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be27416e-97af-3611-b1eb-8bc129774004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b8:6c:69:5a:87:d9:10:fa:7c:22:a0:13:c0:ce:6f:45:c8: 59:50:bd:8d:6b:e1:c0:c8:c3:a6:0b:b7:d7:e5:fe:34:dc:f6: 0d:4f:06:6a:f1:6e:ba:c1:84:f8:56:a0:4a:e7:e7:bd:cd:60: 5d:db:6b:4b:79:5a:4c:69:f8:9d:b0:39:8e:e4:4c:95:33:95: 44:60:c7:09:4a:49:20:dd:60:c1:e3:7d:b5:d1:62:c3:f6:8c: eb:2c:33:08:ff:77:b8:1a:af:50:ed:51:31:b9:50:6f:6d:2a: 97:ec:5d:cd:68:5f:0d:12:db:b1:af:97:fa:a6:1e:fb:b0:15: e4:af:5d:56:39:6c:76:ca:7f:d4:8f:1a:fc:01:56:a2:d3:76: 0a:a0:02:46:55:ae:88:98:c6:75:cb:99:a4:53:cb:25:2d:d2: 3f:eb:ba:b2:d8:a0:96:ae:0e:92:96:7d:0e:91:6e:3a:70:00: f4:26:f0:e4:be:a0:30:f3:dc:79:6a:3e:a9:ff:0f:8c:ed:9f: f7:df:af:99:85:23:04:31:00:57:b9:d9:d3:5a:77:0d:47:67: ec:a4:d0:0a:c1:ff:a1:de:66:68:d0:3c:15:10:c4:e9:79:be: 19:d1:f6:0f:9f:0e:3a:ca:75:fa:ad:8f:79:37:bb:4e:8d:02: 17:52:23:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1j6F/w22MsvcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NTVmZjZlZGYtNzAxNy00OTkzLWE0ZDQtM2IzYjk4MzJmZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv9LUg67H3gfn6nK+8wm+ol3atGsBmtwj84b ujLr0yqfvHPj+z3My9/CaIEeWX7wwwm35gGnkIm6TJZySb1OAIHJXaCUZ5Ftr9AZ DeCxSCNrPmNMNeVZoJPN+pRNzqaIEWyxdAKV5s1LXFHlSkw5vN7vsD9iB+Qhtv6w JWbnNeIH+Fp6bj4aW14RkgerELHX2PqAAbYp289EBZLZ/nyeW+QBD3NCUO9xy6Bs SBjlcV1DEZVT5DRDYk3ORrUmH75gf7IISw0dE3sbgIFxzQoInXCk+WvdNLGminuY u8Me1xCX10p9k7N6gb6AsyFG37bfwCHbl+IijD7+/3hgwtIJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmdxjrTjQt8QI7fq63vRaJVGYcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmUyNzQxNmUtOTdhZi0z NjExLWIxZWItOGJjMTI5Nzc0MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO4bGlah9kQ+nwioBPAzm9FyFlQvY1r4cDIw6YLt9fl/jTc9g1PBmrx brrBhPhWoErn573NYF3ba0t5Wkxp+J2wOY7kTJUzlURgxwlKSSDdYMHjfbXRYsP2 jOssMwj/d7gar1DtUTG5UG9tKpfsXc1oXw0S27Gvl/qmHvuwFeSvXVY5bHbKf9SP GvwBVqLTdgqgAkZVroiYxnXLmaRTyyUt0j/rurLYoJauDpKWfQ6RbjpwAPQm8OS+ oDDz3HlqPqn/D4ztn/ffr5mFIwQxAFe52dNadw1HZ+yk0ArB/6HeZmjQPBUQxOl5 vhnR9g+fDjrKdfqtj3k3u06NAhdSI9g= -----END CERTIFICATE-----Generated at Mon May 12 21:36:08 2025 by rpki-client