$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eaa0e26f-c4a5-3b7e-b3d4-5f6302920ed8.roa File: eaa0e26f-c4a5-3b7e-b3d4-5f6302920ed8.roa (raw, json) Hash identifier: lfDPxkhyp6PL/8y7FS+PZBThWrctOR4BJ2o/wnNJM5o= Subject key identifier: A3:2A:60:52:65:93:A9:86:0E:C9:F2:D2:F4:6B:DB:17:04:11:1A:BF Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A27EE349AC27F34F3E280 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eaa0e26f-c4a5-3b7e-b3d4-5f6302920ed8.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:27:ee:34:9a:c2:7f:34:f3:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=d2efe589-e2c0-499f-a6dd-d2f356062a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:63:b6:3b:19:d5:a9:e0:dc:39:77:53:9f: 98:d3:f2:04:67:61:e9:ae:f5:c8:ff:36:0e:89:86: ce:ea:a6:ad:bf:71:c7:be:8b:f7:c2:05:43:68:a3: 2c:3a:ac:34:9f:15:f7:56:ac:19:e5:2d:09:26:a0: db:0d:e7:3c:25:8f:44:ad:8f:cc:34:23:2e:a0:0f: 33:ca:74:07:c6:17:78:59:ff:09:b7:e2:41:12:b0: c1:46:74:44:86:e2:9a:f3:72:94:51:c2:f7:f1:8d: 75:cd:75:73:13:c4:2b:d9:41:96:6f:bc:4b:8a:5e: 27:9d:61:01:c8:be:91:3c:a2:10:cc:8a:ca:29:04: a2:15:a0:84:eb:6c:d7:b8:89:b0:16:46:60:b8:81: c0:e2:38:03:5d:8b:fe:7e:02:06:4c:f3:ab:1f:9b: a5:ca:8d:e7:30:72:03:cf:da:7f:16:27:0a:4d:84: 1e:64:8d:74:e5:d9:72:d9:61:44:fb:c1:5d:df:98: 01:46:ee:da:37:a0:50:51:72:18:e2:ca:b2:8e:63: 1f:f4:12:27:37:31:da:73:88:86:49:dc:20:48:68: 89:56:4b:fb:1b:d5:49:63:95:00:95:27:11:fc:82: 3d:f7:cd:f1:6f:f2:7a:48:3c:b8:3b:62:f3:77:c7: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:60:52:65:93:A9:86:0E:C9:F2:D2:F4:6B:DB:17:04:11:1A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eaa0e26f-c4a5-3b7e-b3d4-5f6302920ed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:53:67:38:79:09:26:0b:ed:64:af:de:dd:53:47:b5:81:ad: e3:4e:f2:fc:2c:f8:8b:49:a9:a9:21:24:f3:27:35:a6:d8:81: f0:23:cc:64:e3:ad:e3:c7:9e:30:59:c5:ea:29:70:a6:7e:28: 64:cb:82:56:86:b0:7a:71:2f:92:c3:c9:80:8c:98:42:17:00: 7e:82:23:a7:d7:27:62:30:e9:bb:fe:86:b7:02:ff:78:2a:17: bb:ac:93:7c:52:9e:63:5b:4c:75:67:4d:17:3c:94:aa:8e:ec: 1a:29:40:92:44:ff:57:18:4c:ad:05:e0:49:1d:dc:56:2d:10: 7f:4e:92:bb:7b:00:f9:5a:31:fb:12:0b:25:f2:23:28:9c:36: 82:c3:d0:5f:c4:fc:49:2f:59:03:0c:68:9d:e5:6d:58:0c:b1: 1d:15:e8:49:85:a7:b7:96:62:37:2b:6f:f2:77:c5:47:53:a5: 46:73:59:7b:d1:bc:65:dd:c5:4a:be:7c:14:bb:62:a6:f5:d4: 5a:bf:dc:cc:d4:f4:1d:34:24:28:eb:10:2f:6f:13:ae:4b:b9: 53:d6:00:b9:30:03:c2:2e:e1:38:f5:a0:07:ec:3b:f4:ae:a4: 36:95:a8:50:db:42:83:7e:9c:cb:fd:8a:4d:22:0e:21:aa:e7: 24:df:00:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eifuNJrCfzTz4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZDJlZmU1ODktZTJjMC00OTlmLWE2ZGQtZDJmMzU2MDYyYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLJjtjsZ1ang3Dl3U5+Y0/IEZ2HprvXI/zYO iYbO6qatv3HHvov3wgVDaKMsOqw0nxX3VqwZ5S0JJqDbDec8JY9ErY/MNCMuoA8z ynQHxhd4Wf8Jt+JBErDBRnREhuKa83KUUcL38Y11zXVzE8Qr2UGWb7xLil4nnWEB yL6RPKIQzIrKKQSiFaCE62zXuImwFkZguIHA4jgDXYv+fgIGTPOrH5ulyo3nMHID z9p/FicKTYQeZI105dly2WFE+8Fd35gBRu7aN6BQUXIY4sqyjmMf9BInNzHac4iG SdwgSGiJVkv7G9VJY5UAlScR/II9983xb/J6SDy4O2Lzd8dyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMqYFJlk6mGDsny0vRr2xcEERq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWFhMGUyNmYtYzRhNS0z YjdlLWIzZDQtNWY2MzAyOTIwZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1TZzh5CSYL7WSv3t1TR7WBreNO8vws+ItJqakhJPMnNabYgfAjzGTj rePHnjBZxeopcKZ+KGTLglaGsHpxL5LDyYCMmEIXAH6CI6fXJ2Iw6bv+hrcC/3gq F7usk3xSnmNbTHVnTRc8lKqO7BopQJJE/1cYTK0F4Ekd3FYtEH9Okrt7APlaMfsS CyXyIyicNoLD0F/E/EkvWQMMaJ3lbVgMsR0V6EmFp7eWYjcrb/J3xUdTpUZzWXvR vGXdxUq+fBS7Yqb11Fq/3MzU9B00JCjrEC9vE65LuVPWALkwA8Iu4Tj1oAfsO/Su pDaVqFDbQoN+nMv9ik0iDiGq5yTfAAc= -----END CERTIFICATE-----Generated at Fri May 9 21:51:49 2025 by rpki-client