$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db986444-c515-368d-b837-cb087e19d8ea.roa File: db986444-c515-368d-b837-cb087e19d8ea.roa (raw, json) Hash identifier: 9OQB3MhcqHOtwBSibiIxt1D2EYmt88HmIdBuRJFRyc4= Subject key identifier: DB:42:67:C4:8E:AA:94:FD:95:FD:A8:F2:EE:ED:2C:05:E6:DD:84:61 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A294C64D42795E7BADC00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db986444-c515-368d-b837-cb087e19d8ea.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.121.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:29:4c:64:d4:27:95:e7:ba:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=69dc942d-a9bd-4117-b8ee-4d5e04eea293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:43:5e:f6:64:ac:c2:2b:c0:c9:21:eb:16: 24:e3:1b:25:4d:1a:04:2c:2c:9a:63:0d:d6:d1:eb: c8:14:c6:fc:ee:5d:58:a0:b1:bf:5b:80:34:9e:33: 1d:90:10:26:9f:ba:fc:78:0c:7c:ab:2d:ea:23:fd: 61:ab:d3:49:1d:ce:18:d6:0e:e8:96:7d:7f:30:cc: 85:17:94:93:28:f6:20:d0:b2:cf:e5:c9:e5:90:2b: 68:f2:96:42:a9:a4:a6:5c:30:93:a9:77:e3:f4:e3: 08:47:de:12:f8:e9:cd:43:0a:50:38:57:22:97:59: 7c:3c:92:0b:66:87:54:f3:fb:f0:29:19:bf:f6:a2: 3e:21:2c:cd:0c:71:10:de:5d:b9:00:d3:b6:84:c1: 10:cc:04:c8:bd:e5:99:e4:27:ac:76:dd:88:3a:25: 84:4b:31:be:54:c7:e1:9f:92:a1:c2:6e:46:c7:0a: d8:37:f4:b3:a5:78:25:99:f7:78:d2:96:8b:f0:a0: d7:c7:96:18:00:97:60:2e:7f:47:04:7d:b3:5d:fd: 23:3c:2c:1d:a0:20:d5:1b:2e:bb:03:b3:98:4e:38: 70:30:ea:dc:c5:73:60:90:95:08:0c:8c:af:34:b6: 7a:77:a1:5c:b4:68:c1:ff:ff:7a:29:dd:dd:f7:72: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:42:67:C4:8E:AA:94:FD:95:FD:A8:F2:EE:ED:2C:05:E6:DD:84:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db986444-c515-368d-b837-cb087e19d8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:45:45:83:86:d7:7d:53:ec:ad:89:f0:09:6d:3b:c1:50:ef: 8d:e1:db:14:37:9d:aa:1b:c6:82:ff:10:50:ae:2f:40:84:6a: f6:8f:1c:db:d0:b4:81:66:e4:51:1a:f8:71:2e:15:8f:d3:e1: 08:93:28:12:0b:b6:47:e4:0f:f7:54:df:0b:2d:92:45:70:6b: 93:b9:53:21:ac:67:2c:0b:0e:e3:89:cc:45:4a:58:88:14:6c: e1:0a:80:ed:dd:c7:cd:ec:a8:0d:d3:a2:4c:ac:41:86:c4:5a: be:ad:2c:67:74:c3:5b:a8:5c:1a:5b:99:7b:a6:00:72:6b:39: 11:77:85:ba:34:10:53:e6:43:31:6c:15:a4:bd:69:6c:9b:e2: 99:05:b5:3c:3c:8a:d8:c2:81:b4:df:8a:23:32:f8:dc:8f:df: be:d8:7d:f2:80:06:84:3a:19:6f:5e:b7:79:01:aa:5a:91:33: 24:6a:6a:c9:d2:35:5b:7b:6a:cd:3d:ab:93:67:4b:7e:79:9c: 3f:35:27:bc:be:3e:4e:4f:56:fd:75:83:a3:68:81:1c:5e:49: 0a:46:57:b4:02:c6:d0:0e:f3:ed:a3:01:a2:1f:02:68:5c:fd: 31:6c:07:93:7d:78:22:95:99:8b:43:87:9d:99:8e:a4:ce:4a: dd:5c:a2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eilMZNQnlee63AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NjlkYzk0MmQtYTliZC00MTE3LWI4ZWUtNGQ1ZTA0ZWVhMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0VDXvZkrMIrwMkh6xYk4xslTRoELCyaYw3W 0evIFMb87l1YoLG/W4A0njMdkBAmn7r8eAx8qy3qI/1hq9NJHc4Y1g7oln1/MMyF F5STKPYg0LLP5cnlkCto8pZCqaSmXDCTqXfj9OMIR94S+OnNQwpQOFcil1l8PJIL ZodU8/vwKRm/9qI+ISzNDHEQ3l25ANO2hMEQzATIveWZ5Cesdt2IOiWESzG+VMfh n5Khwm5GxwrYN/SzpXglmfd40paL8KDXx5YYAJdgLn9HBH2zXf0jPCwdoCDVGy67 A7OYTjhwMOrcxXNgkJUIDIyvNLZ6d6FctGjB//96Kd3d93KIFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtCZ8SOqpT9lf2o8u7tLAXm3YRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGI5ODY0NDQtYzUxNS0z NjhkLWI4MzctY2IwODdlMTlkOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpFRYOG131T7K2J8AltO8FQ743h2xQ3naobxoL/EFCuL0CEavaPHNvQ tIFm5FEa+HEuFY/T4QiTKBILtkfkD/dU3wstkkVwa5O5UyGsZywLDuOJzEVKWIgU bOEKgO3dx83sqA3TokysQYbEWr6tLGd0w1uoXBpbmXumAHJrORF3hbo0EFPmQzFs FaS9aWyb4pkFtTw8itjCgbTfiiMy+NyP377YffKABoQ6GW9et3kBqlqRMyRqasnS NVt7as09q5NnS355nD81J7y+Pk5PVv11g6NogRxeSQpGV7QCxtAO8+2jAaIfAmhc /TFsB5N9eCKVmYtDh52ZjqTOSt1covk= -----END CERTIFICATE-----Generated at Sun May 11 22:11:17 2025 by rpki-client