$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd1c8434-4efb-37c5-bec6-08d95d648659.roa File: dd1c8434-4efb-37c5-bec6-08d95d648659.roa (raw, json) Hash identifier: YRIJUwMbTEAvLR4l2gdZ2WcYrz5uN8bQL80S0mSZYZU= Subject key identifier: 8F:57:12:E3:EC:93:5F:CE:A3:DD:8A:71:8D:44:1B:8D:EA:8A:B9:11 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A27FC491396C4AA401A00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd1c8434-4efb-37c5-bec6-08d95d648659.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:27:fc:49:13:96:c4:aa:40:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=3ce4b505-db6e-419a-b7b5-82dc84dcb2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:00:61:43:8a:28:0c:c9:52:08:1c:52:2c: 17:ce:7d:eb:d8:0f:4b:88:5f:80:5f:d5:0c:6d:5f: 9f:14:c1:78:e0:59:1c:a9:a5:a5:86:1a:46:37:8d: ff:1d:dd:94:95:c2:b6:e0:0d:c4:a2:ad:39:ef:79: df:39:b2:77:bb:2a:81:ac:91:b5:44:48:4b:9e:45: be:0e:11:f4:96:7b:5c:21:48:7a:88:9f:da:88:37: 63:f1:73:1a:46:1e:37:b4:59:0c:e0:ec:33:32:7f: f1:78:3c:4c:73:0c:d1:6d:9f:0e:0d:53:48:04:9f: 89:92:45:4c:8b:bf:8d:6f:d5:ab:4d:1c:d5:d0:e6: 83:8b:b0:53:12:0e:d5:33:c7:38:03:4f:0e:24:03: 8e:8d:43:e4:3e:5d:6a:02:12:9d:4f:38:04:98:fa: ce:af:32:3c:cd:40:f5:be:75:a8:08:65:c1:f0:b2: f6:4a:44:7a:ff:99:d2:a1:29:7f:cd:5c:ea:65:19: 79:34:8a:8a:28:e4:7c:6f:ed:2c:68:de:4c:69:c2: 9a:34:2e:b8:38:52:f4:9f:0a:dd:c8:11:23:a9:bb: 25:64:19:68:c1:4b:bf:b6:fa:2b:a5:32:19:5b:2c: 14:20:17:d8:60:45:49:1a:74:d0:0f:e9:27:6f:d4: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:57:12:E3:EC:93:5F:CE:A3:DD:8A:71:8D:44:1B:8D:EA:8A:B9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd1c8434-4efb-37c5-bec6-08d95d648659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:fb:51:c7:4d:74:ab:e0:be:87:a7:7d:bd:9c:e1:aa:de:f5: 31:47:92:46:0e:82:c8:f8:90:80:96:c9:9e:2c:b2:df:5d:75: ad:1c:c0:86:de:d6:5e:13:22:82:c2:db:0b:8a:91:6a:fe:bf: a3:82:82:e0:c3:05:46:df:ca:2c:e1:d0:01:00:95:8e:51:9c: 31:a1:60:53:3e:4b:28:8e:56:6a:4a:7a:cb:f7:8a:b5:cf:4a: f6:6f:d6:0f:ed:cd:52:38:f2:26:1a:50:0c:5c:49:73:f5:f4: 54:b6:66:e6:79:78:71:b9:0b:9a:45:28:48:06:44:24:a4:d4: 0c:11:fb:03:d1:96:ce:71:10:b4:ed:a6:b5:3f:f4:f4:bf:91: 12:e8:89:ab:2a:12:48:71:ca:7d:06:a8:ed:f6:33:3f:33:8a: 6b:97:52:44:f3:6e:25:28:84:de:67:20:61:2e:a4:70:41:85: c4:cb:fa:3e:00:7f:d1:ea:ee:d6:e9:22:23:51:92:69:de:2f: bc:68:c1:52:ff:26:57:b1:01:45:95:10:75:49:12:61:7d:5c: c2:d5:81:ef:26:75:58:00:03:bf:81:83:9c:c8:99:76:c3:62: e6:01:5c:f0:1e:21:96:21:30:d3:8e:55:0c:2c:28:4c:c8:a4: a5:93:bc:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eif8SROWxKpAGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk M2NlNGI1MDUtZGI2ZS00MTlhLWI3YjUtODJkYzg0ZGNiMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp0AYUOKKAzJUggcUiwXzn3r2A9LiF+AX9UM bV+fFMF44FkcqaWlhhpGN43/Hd2UlcK24A3Eoq0573nfObJ3uyqBrJG1REhLnkW+ DhH0lntcIUh6iJ/aiDdj8XMaRh43tFkM4OwzMn/xeDxMcwzRbZ8ODVNIBJ+JkkVM i7+Nb9WrTRzV0OaDi7BTEg7VM8c4A08OJAOOjUPkPl1qAhKdTzgEmPrOrzI8zUD1 vnWoCGXB8LL2SkR6/5nSoSl/zVzqZRl5NIqKKOR8b+0saN5MacKaNC64OFL0nwrd yBEjqbslZBlowUu/tvorpTIZWywUIBfYYEVJGnTQD+knb9S95wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9XEuPsk1/Oo92KcY1EG43qirkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGQxYzg0MzQtNGVmYi0z N2M1LWJlYzYtMDhkOTVkNjQ4NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn7UcdNdKvgvoenfb2c4are9TFHkkYOgsj4kICWyZ4sst9dda0cwIbe 1l4TIoLC2wuKkWr+v6OCguDDBUbfyizh0AEAlY5RnDGhYFM+SyiOVmpKesv3irXP SvZv1g/tzVI48iYaUAxcSXP19FS2ZuZ5eHG5C5pFKEgGRCSk1AwR+wPRls5xELTt prU/9PS/kRLoiasqEkhxyn0GqO32Mz8zimuXUkTzbiUohN5nIGEupHBBhcTL+j4A f9Hq7tbpIiNRkmneL7xowVL/JlexAUWVEHVJEmF9XMLVge8mdVgAA7+Bg5zImXbD YuYBXPAeIZYhMNOOVQwsKEzIpKWTvM4= -----END CERTIFICATE-----Generated at Sat May 10 16:48:24 2025 by rpki-client