$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa File: f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa (raw, json) Hash identifier: PP+6iP++/gBhXA7o4eVDZrfYL6YBooj6EykijInl71c= Subject key identifier: 22:F0:C1:39:25:DB:0D:59:EB:7B:AC:26:04:26:FC:C8:D8:A2:DB:A1 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A36431B8D1F9C7AFC5F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 212238 IP address blocks: 172.121.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:36:43:1b:8d:1f:9c:7a:fc:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=3864ef0f-1aed-48ed-91c7-e7c2d3e4d715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:f4:36:71:52:3d:a9:9c:7e:d3:88:79:22: 73:13:23:13:03:4a:0c:c9:c1:78:11:18:8c:53:ee: ab:dc:de:22:a7:91:35:03:8d:df:26:71:31:75:8c: 56:03:d1:20:25:fb:13:e6:8e:84:a6:b0:c1:a0:a0: db:af:92:2f:d0:d6:39:39:9d:2a:8b:9a:7c:4e:da: 2b:46:14:62:ad:08:a6:a0:9f:4c:7c:fc:e4:30:17: f2:a1:12:23:69:75:9c:e0:20:0d:3c:50:40:e6:ea: 85:55:16:58:06:f7:9a:51:da:bb:5a:32:fe:9b:25: 38:e0:33:40:0f:af:e4:71:f9:b9:0d:d6:82:67:0d: 3c:ea:cd:63:92:11:a5:cd:29:83:0e:8b:30:92:61: 25:bb:22:db:71:26:c1:c2:ea:cd:34:4c:99:05:84: 31:af:0d:f0:eb:f9:25:94:42:7b:9e:0f:e6:53:82: 2b:0f:04:40:0b:e8:a5:a3:9d:8a:b2:df:92:9b:8c: fb:f5:b0:fe:b0:ad:0a:d8:10:25:a4:d9:45:e6:3e: a7:58:5c:66:10:85:21:74:40:3f:f4:84:56:8f:69: e0:e1:24:fe:75:41:92:61:2d:e2:d0:e0:bf:bd:44: eb:c0:06:76:fa:b9:bc:d0:c4:36:21:cb:28:a0:5f: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F0:C1:39:25:DB:0D:59:EB:7B:AC:26:04:26:FC:C8:D8:A2:DB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:50:99:a3:6e:a2:f0:d8:de:ab:7b:6d:38:ca:35:46:40:f1: c6:2a:2d:ae:46:bc:ed:c8:f7:54:98:d4:47:3e:f8:2b:f2:f4: c5:ae:56:a6:ba:48:1b:b8:b3:76:9a:89:41:b5:e6:53:c9:71: 64:2d:28:d7:df:fb:7e:89:7b:a0:1a:78:77:c0:33:3d:fb:f4: 80:f8:95:22:83:cf:a8:7d:57:fb:2d:6e:85:52:b9:36:81:7e: c4:20:d5:15:dc:13:b6:b1:da:2f:db:cd:3f:9f:61:0a:46:1f: aa:21:17:39:b4:ca:b2:ea:ce:02:5f:42:c3:3b:88:ed:d6:b9: 39:19:fa:af:77:1f:b0:8b:bb:af:65:8c:c4:f1:6d:17:3b:24: 5a:04:5c:f3:20:68:dd:0f:fe:d2:c5:fc:c5:bb:63:59:21:8b: 21:ec:af:72:ea:87:ff:cc:e9:2d:ec:10:6f:46:c7:d7:d5:e4: 31:7e:84:31:3c:2f:13:51:25:e6:36:3e:f9:c4:02:85:9d:ae: 9c:72:8d:fb:ba:e3:4f:7d:ec:9c:b4:cc:c9:bb:56:3f:cd:ef: c6:45:0e:a5:4a:86:25:b1:84:7a:c0:4b:7a:24:42:95:58:eb: ba:cb:f1:88:47:fa:b8:da:91:61:c4:de:f3:cd:13:1d:94:05: b4:8e:43:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejZDG40fnHr8X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk Mzg2NGVmMGYtMWFlZC00OGVkLTkxYzctZTdjMmQzZTRkNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWP0NnFSPamcftOIeSJzEyMTA0oMycF4ERiM U+6r3N4ip5E1A43fJnExdYxWA9EgJfsT5o6EprDBoKDbr5Iv0NY5OZ0qi5p8Ttor RhRirQimoJ9MfPzkMBfyoRIjaXWc4CANPFBA5uqFVRZYBveaUdq7WjL+myU44DNA D6/kcfm5DdaCZw086s1jkhGlzSmDDoswkmEluyLbcSbBwurNNEyZBYQxrw3w6/kl lEJ7ng/mU4IrDwRAC+ilo52Kst+Sm4z79bD+sK0K2BAlpNlF5j6nWFxmEIUhdEA/ 9IRWj2ng4ST+dUGSYS3i0OC/vUTrwAZ2+rm80MQ2IcsooF9O9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLwwTkl2w1Z63usJgQm/MjYotuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjVmZjRjNGEtYjNlMy0z NTBkLTllOGItOTQ4MjE0MmYyMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5QmaNuovDY3qt7bTjKNUZA8cYqLa5GvO3I91SY1Ec++Cvy9MWuVqa6 SBu4s3aaiUG15lPJcWQtKNff+36Je6AaeHfAMz379ID4lSKDz6h9V/stboVSuTaB fsQg1RXcE7ax2i/bzT+fYQpGH6ohFzm0yrLqzgJfQsM7iO3WuTkZ+q93H7CLu69l jMTxbRc7JFoEXPMgaN0P/tLF/MW7Y1khiyHsr3Lqh//M6S3sEG9Gx9fV5DF+hDE8 LxNRJeY2PvnEAoWdrpxyjfu640997Jy0zMm7Vj/N78ZFDqVKhiWxhHrAS3okQpVY 67rL8YhH+rjakWHE3vPNEx2UBbSOQ3w= -----END CERTIFICATE-----Generated at Sun May 11 08:00:47 2025 by rpki-client