$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa File: fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa (raw, json) Hash identifier: iq7Ajhjr9SHasQAwMJUphmLuk0TO4Pjor4TsBKcg3mU= Subject key identifier: FB:44:F4:A5:5E:0D:AE:A3:78:CD:2A:44:DF:26:4A:66:5B:8B:AE:F3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A33449C17F9E196CE6380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 204957 IP address blocks: 172.120.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:33:44:9c:17:f9:e1:96:ce:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=03f6988f-a7c6-41e8-9111-f75dd0c678c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:4c:39:05:ff:7b:de:f7:1e:a1:f3:6d:ba: ac:2b:bc:ad:06:0a:11:33:da:bb:cf:d1:f8:e4:88: 3f:0f:a9:0e:e4:c9:de:fe:ba:52:48:f4:56:ec:b1: 98:eb:fc:d3:29:1e:4e:38:3a:93:9a:db:4d:c2:f7: 8c:00:66:29:26:43:02:89:82:0d:d6:8e:3a:9b:45: 3c:cc:e7:2b:58:c6:e2:15:58:b6:a1:e9:bb:ad:c4: 26:89:94:f3:d5:a5:48:42:f6:1f:cb:dd:c6:61:c7: ee:9d:8a:d5:bc:7b:5b:ad:97:ad:d5:11:ce:33:df: dd:44:46:03:cd:c5:e7:6a:5b:6c:ef:c3:31:55:60: 60:7b:24:a8:82:51:1e:f7:f6:be:06:c4:79:5e:c0: 32:58:89:dd:36:38:2f:8f:d1:b3:1a:10:b7:f5:15: 10:d9:58:81:33:68:bf:82:f7:d5:17:07:41:71:61: df:88:30:00:ee:ac:2e:3a:ee:7d:d2:08:87:3a:6c: 26:64:f0:77:13:5e:b9:07:64:64:93:74:29:ff:fb: 64:fb:5b:43:c0:46:6c:18:e1:82:f6:c8:e5:41:8a: 3c:cb:61:e9:b8:94:f4:25:55:cb:8b:28:49:83:e9: f5:6f:2e:66:91:59:59:e8:0f:04:e4:2f:ed:c9:43: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:44:F4:A5:5E:0D:AE:A3:78:CD:2A:44:DF:26:4A:66:5B:8B:AE:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cf:8b:20:fe:b5:0d:2f:9a:e4:c3:b2:94:88:f7:2c:a5:fc: 2a:ce:36:0c:34:97:4b:3b:69:f2:65:79:76:3b:55:68:13:40: c7:a2:f1:8d:85:43:79:c0:c9:31:14:81:91:c6:01:f5:08:01: c8:4e:3f:09:49:13:6b:e7:b4:63:5b:f7:11:ee:b4:d5:6a:bc: 72:7d:14:50:3f:3e:89:d5:3c:47:3d:49:39:fe:fc:69:5b:ae: f0:0c:2f:96:16:ec:10:90:6b:d8:a6:0e:4e:75:ab:03:13:2b: 3a:3c:e6:73:ce:a2:b6:f6:59:55:8c:d6:fc:72:83:90:33:0a: ed:8a:c2:93:0e:16:a2:c7:fe:83:07:1b:fa:cc:fb:14:af:f2: cf:3c:ca:ee:de:e5:a7:a6:39:25:48:5a:ac:d3:18:a1:3c:3d: 1b:37:77:46:dd:10:18:58:24:ff:36:ab:88:ed:f3:f1:b5:9e: fa:80:36:67:80:79:cf:52:9e:1a:11:26:16:3f:4c:fb:12:29: 3e:a6:df:d0:25:75:ea:1c:6c:ff:cb:b8:70:0f:d8:55:04:c1: 0d:de:1c:f6:39:81:17:ab:13:e8:98:de:62:13:d7:14:f6:dd: 6a:6e:eb:ec:0f:88:b7:70:e4:a4:2d:28:5a:45:d9:8e:d9:f0: 27:1e:48:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejNEnBf54ZbOY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MDNmNjk4OGYtYTdjNi00MWU4LTkxMTEtZjc1ZGQwYzY3OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYBMOQX/e973HqHzbbqsK7ytBgoRM9q7z9H4 5Ig/D6kO5Mne/rpSSPRW7LGY6/zTKR5OODqTmttNwveMAGYpJkMCiYIN1o46m0U8 zOcrWMbiFVi2oem7rcQmiZTz1aVIQvYfy93GYcfunYrVvHtbrZet1RHOM9/dREYD zcXnalts78MxVWBgeySoglEe9/a+BsR5XsAyWIndNjgvj9GzGhC39RUQ2ViBM2i/ gvfVFwdBcWHfiDAA7qwuOu590giHOmwmZPB3E165B2Rkk3Qp//tk+1tDwEZsGOGC 9sjlQYo8y2HpuJT0JVXLiyhJg+n1by5mkVlZ6A8E5C/tyUNInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtE9KVeDa6jeM0qRN8mSmZbi67zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmU1ZDNhMDQtMWI1YS0z ZTZhLTlhNjgtMDM2MGFhZjQ5OTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrPiyD+tQ0vmuTDspSI9yyl/CrONgw0l0s7afJleXY7VWgTQMei8Y2F Q3nAyTEUgZHGAfUIAchOPwlJE2vntGNb9xHutNVqvHJ9FFA/PonVPEc9STn+/Glb rvAML5YW7BCQa9imDk51qwMTKzo85nPOorb2WVWM1vxyg5AzCu2KwpMOFqLH/oMH G/rM+xSv8s88yu7e5aemOSVIWqzTGKE8PRs3d0bdEBhYJP82q4jt8/G1nvqANmeA ec9SnhoRJhY/TPsSKT6m39AldeocbP/LuHAP2FUEwQ3eHPY5gRerE+iY3mIT1xT2 3Wpu6+wPiLdw5KQtKFpF2Y7Z8CceSN0= -----END CERTIFICATE-----Generated at Sat May 10 13:52:42 2025 by rpki-client