$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa File: d91bf0e9-627a-31e7-9857-da9afc43a642.roa (raw, json) Hash identifier: E4N0dGQOkirp/JJiSfWzKl7nJ7iRQXBjTCCS7IN3evQ= Subject key identifier: D9:AB:53:57:02:60:6D:61:DF:55:7D:E6:13:BC:12:9C:89:A3:4E:8C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A33CB98546AD14915D880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:33:cb:98:54:6a:d1:49:15:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=2bf13e70-0376-49bb-8fde-ad14bc0473e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:80:a8:22:21:88:18:63:de:4f:d6:6f:98: 66:0f:0b:8b:ea:a8:6f:d7:a6:45:c0:dd:c9:f9:24: 09:e3:d0:95:ca:34:56:d8:a7:18:de:7a:56:0a:ba: c4:82:a2:21:87:00:db:b8:6e:6f:4a:58:3a:1f:8b: 45:3b:e9:1c:92:a0:b4:09:94:45:30:68:45:5a:9e: e3:6c:6d:5a:bb:d4:d4:2d:11:ee:73:9b:e8:4a:6d: 26:43:5e:43:18:4b:01:b2:42:43:d5:46:fb:21:3e: 35:9c:6d:e7:c9:c0:27:3a:27:4b:63:ff:65:d8:dc: aa:d0:18:9a:90:45:43:6a:0a:2d:6b:f8:d2:57:70: a3:35:ac:ce:14:76:17:90:44:b1:b6:b6:26:83:8e: 80:b9:a3:e7:5b:0f:14:75:69:1a:fa:6e:59:58:7e: f1:ef:05:62:06:d5:87:01:16:7d:0f:3b:c4:d7:13: 32:75:df:8e:79:84:2f:e2:1f:f9:a4:96:98:70:97: 65:a9:2f:f2:07:50:8e:b2:b0:ae:c2:e0:4a:2e:ee: 4e:01:cb:06:d2:ce:dd:22:53:94:3f:ad:82:8a:b1: e9:38:f0:c5:be:f9:8f:2b:4b:7d:b1:d9:48:65:8a: f4:50:ac:d6:bb:b8:1a:f5:bf:3b:8e:c3:9c:3c:49: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AB:53:57:02:60:6D:61:DF:55:7D:E6:13:BC:12:9C:89:A3:4E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:65:88:e9:b0:fb:f4:2a:91:53:0b:43:f3:14:ea:2e:87:67: 00:04:bd:3c:63:1c:08:01:3c:22:7a:01:c8:8a:07:f6:e6:a7: 81:60:f0:74:1a:0d:8b:9f:ed:6e:a1:91:91:c4:16:be:c7:ba: ce:db:15:35:16:c8:3d:74:36:96:bb:10:1d:a0:56:03:2f:09: ef:7e:f4:09:83:1f:b4:4a:a8:6e:9e:6e:3f:6c:0c:e5:af:d5: 88:c4:bd:48:e0:67:dd:96:20:06:14:82:8e:80:6c:d7:a8:07: d6:15:1b:91:f0:4c:83:43:0a:b7:f2:6a:a7:a4:7f:14:71:aa: a8:71:50:f9:0a:db:81:e8:c7:7a:95:dd:15:8f:3e:35:fd:60: 2a:ca:5c:aa:8b:01:91:a8:17:8f:65:da:e0:31:f5:78:4e:25: d6:72:7f:93:27:34:01:17:c9:08:77:76:40:d8:05:a1:3b:6e: 35:ef:20:b5:3e:96:99:75:9d:d0:3a:f3:98:3c:71:69:20:94: 5a:ad:d8:cf:6e:66:e3:e8:c8:c9:a8:93:4a:a8:c9:41:1d:90: c6:bf:91:a3:03:a6:71:96:48:79:46:6e:17:f5:c3:ee:37:89: 0f:70:95:cd:cf:39:20:1f:23:e1:bb:c6:f0:96:c9:4a:3c:63: 90:1f:ea:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejPLmFRq0UkV2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MmJmMTNlNzAtMDM3Ni00OWJiLThmZGUtYWQxNGJjMDQ3M2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1OAqCIhiBhj3k/Wb5hmDwuL6qhv16ZFwN3J +SQJ49CVyjRW2KcY3npWCrrEgqIhhwDbuG5vSlg6H4tFO+kckqC0CZRFMGhFWp7j bG1au9TULRHuc5voSm0mQ15DGEsBskJD1Ub7IT41nG3nycAnOidLY/9l2Nyq0Bia kEVDagota/jSV3CjNazOFHYXkESxtrYmg46AuaPnWw8UdWka+m5ZWH7x7wViBtWH ARZ9DzvE1xMydd+OeYQv4h/5pJaYcJdlqS/yB1COsrCuwuBKLu5OAcsG0s7dIlOU P62CirHpOPDFvvmPK0t9sdlIZYr0UKzWu7ga9b87jsOcPEmdYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmrU1cCYG1h31V95hO8EpyJo06MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDkxYmYwZTktNjI3YS0z MWU3LTk4NTctZGE5YWZjNDNhNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHi9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNliOmw+/QqkVMLQ/MU6i6HZwAEvTxjHAgBPCJ6AciKB/bmp4Fg8HQa DYuf7W6hkZHEFr7Hus7bFTUWyD10Npa7EB2gVgMvCe9+9AmDH7RKqG6ebj9sDOWv 1YjEvUjgZ92WIAYUgo6AbNeoB9YVG5HwTINDCrfyaqekfxRxqqhxUPkK24Hox3qV 3RWPPjX9YCrKXKqLAZGoF49l2uAx9XhOJdZyf5MnNAEXyQh3dkDYBaE7bjXvILU+ lpl1ndA685g8cWkglFqt2M9uZuPoyMmok0qoyUEdkMa/kaMDpnGWSHlGbhf1w+43 iQ9wlc3POSAfI+G7xvCWyUo8Y5Af6mQ= -----END CERTIFICATE-----Generated at Sun May 11 10:06:32 2025 by rpki-client