$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e86e2438-918a-362b-be3c-eaa2e98b99ae.roa File: e86e2438-918a-362b-be3c-eaa2e98b99ae.roa (raw, json) Hash identifier: 02+nDQ42aFDUO7K0N0z8YILVGXpJNOb+lA58PEgdkwA= Subject key identifier: 81:11:4B:AA:3C:E2:7D:B4:23:88:9A:ED:D6:EA:2B:45:E1:2A:38:9D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A2628F8C05C0DCC0C2390 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e86e2438-918a-362b-be3c-eaa2e98b99ae.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 138233 IP address blocks: 172.121.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:26:28:f8:c0:5c:0d:cc:0c:23:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=0b38f5db-57b3-4cb4-8acd-7fda73217b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:75:db:27:0f:1b:4c:ef:20:b1:d4:8e:78: e6:21:db:8c:8f:ed:72:cd:85:40:0a:ce:9c:3c:25: 32:3d:de:84:6f:e7:20:89:e2:63:b6:c5:60:12:57: d3:31:0c:ff:16:ae:28:26:24:39:2a:e9:6c:0f:27: 87:8a:b8:08:4e:ba:79:37:7f:de:55:7c:43:fb:66: 5c:96:57:c9:cc:e8:59:7d:b4:5a:f6:6b:3e:a6:98: 00:0b:1f:66:e9:7d:b4:c8:e1:2d:71:0b:4a:25:76: ad:af:46:21:d1:7e:28:c3:58:b5:eb:f8:2d:3c:a1: 92:49:23:0a:f0:1b:5c:3c:68:a5:31:52:7d:32:32: 9a:46:f1:b2:d9:dc:32:98:96:c9:8b:42:ce:f1:94: 32:24:93:82:72:ed:9a:52:86:1b:1a:31:f0:2d:e9: 52:2a:7b:25:a6:3e:16:3d:c0:31:de:81:4a:d9:aa: 6a:ab:b3:28:92:46:80:0f:04:23:84:63:f4:87:0a: fa:e1:f1:75:0e:4a:c2:14:a1:2f:d0:7c:22:27:06: ea:27:79:b1:ce:67:a8:3c:35:7c:83:0b:a5:a0:69: 82:d7:3f:7d:50:dd:e1:00:26:b0:50:ed:09:1d:73: fe:df:8d:c8:b8:f8:96:30:32:5f:2e:65:16:c2:1d: 5e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:11:4B:AA:3C:E2:7D:B4:23:88:9A:ED:D6:EA:2B:45:E1:2A:38:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e86e2438-918a-362b-be3c-eaa2e98b99ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a1:e0:da:be:e0:76:be:80:c9:d2:05:f9:20:b9:ef:de:42: 8f:1a:9d:bb:d2:45:45:7f:73:7c:e6:b1:ee:d7:10:c4:0a:7c: 50:eb:be:75:75:73:25:ac:c1:40:b5:93:b2:7b:79:8f:c8:4b: fa:70:07:90:00:4d:41:9a:01:49:d2:89:19:18:4d:c4:4c:6c: 21:8d:c1:f6:de:7e:3f:96:f8:58:df:4f:a3:9f:6e:7e:64:4a: 8d:ca:25:70:1d:b3:6d:e3:4a:f4:32:c2:42:89:19:87:7d:39: cf:78:20:c4:5a:9c:69:60:35:a4:17:ac:b6:07:9e:8b:ff:30: df:fd:bb:12:4c:3e:31:c6:be:89:16:a8:d3:cc:cb:6e:d5:2d: fc:d6:2e:c1:26:85:e9:31:6e:f9:1a:a8:68:41:ac:04:fa:d1: 42:04:f6:8d:41:6e:68:5f:cc:68:9d:ef:9d:69:fd:38:e5:1f: e2:c4:d8:de:81:bd:3d:93:bc:b0:a3:05:6f:bb:33:e1:5f:0b: d3:c4:a9:5a:f5:93:6d:7c:f0:9a:9c:f8:7a:aa:8f:38:5d:d0: 7c:4c:4d:4c:9a:3e:fa:5d:d4:e6:0e:ff:23:27:e2:47:b0:43: da:56:6b:4c:a8:1c:e1:72:d7:bb:b4:95:4d:04:83:5f:46:4a: ac:ad:11:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eiYo+MBcDcwMI5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MGIzOGY1ZGItNTdiMy00Y2I0LThhY2QtN2ZkYTczMjE3Yjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0h12ycPG0zvILHUjnjmIduMj+1yzYVACs6c PCUyPd6Eb+cgieJjtsVgElfTMQz/Fq4oJiQ5KulsDyeHirgITrp5N3/eVXxD+2Zc llfJzOhZfbRa9ms+ppgACx9m6X20yOEtcQtKJXatr0Yh0X4ow1i16/gtPKGSSSMK 8BtcPGilMVJ9MjKaRvGy2dwymJbJi0LO8ZQyJJOCcu2aUoYbGjHwLelSKnslpj4W PcAx3oFK2apqq7MokkaADwQjhGP0hwr64fF1DkrCFKEv0HwiJwbqJ3mxzmeoPDV8 gwuloGmC1z99UN3hACawUO0JHXP+343IuPiWMDJfLmUWwh1eDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIERS6o84n20I4ia7dbqK0XhKjidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTg2ZTI0MzgtOTE4YS0z NjJiLWJlM2MtZWFhMmU5OGI5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHn5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqh4Nq+4Ha+gMnSBfkgue/eQo8anbvSRUV/c3zmse7XEMQKfFDrvnV1 cyWswUC1k7J7eY/IS/pwB5AATUGaAUnSiRkYTcRMbCGNwfbefj+W+FjfT6Ofbn5k So3KJXAds23jSvQywkKJGYd9Oc94IMRanGlgNaQXrLYHnov/MN/9uxJMPjHGvokW qNPMy27VLfzWLsEmhekxbvkaqGhBrAT60UIE9o1BbmhfzGid751p/TjlH+LE2N6B vT2TvLCjBW+7M+FfC9PEqVr1k2188Jqc+Hqqjzhd0HxMTUyaPvpd1OYO/yMn4kew Q9pWa0yoHOFy17u0lU0Eg19GSqytEUk= -----END CERTIFICATE-----Generated at Sat May 10 13:10:55 2025 by rpki-client