$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa File: 134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa (raw, json) Hash identifier: ozt8jgS1Mozx6Q707G3iUHxq7M0zfUhQvqhzKmg0Kmw= Subject key identifier: DF:AA:E3:45:40:F3:13:FA:88:37:B5:A1:00:F2:3F:A9:DC:7E:2D:90 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584930DE66243ED4738CD3E54060 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 9009 IP address blocks: 104.253.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:66:24:3e:d4:73:8c:d3:e5:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=c510ce15-8d10-40b0-a8db-d3332928ebdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:38:b4:33:7f:d8:8a:a0:06:88:ba:43:66: a9:97:33:99:24:d4:0a:af:91:df:57:b3:b3:a5:34: be:19:1b:10:5a:55:19:d0:34:d7:04:a2:56:6c:23: 00:22:01:7a:40:0b:4d:7b:fc:57:47:c7:20:97:08: 34:39:30:3d:54:4a:54:17:33:a7:0d:3f:6e:09:53: 11:27:74:1a:9d:3f:2d:5a:49:0c:48:e9:49:b0:e3: 60:c5:c6:5f:67:b5:a6:17:8f:81:5a:6c:d2:cf:ee: 7f:df:30:11:6c:3e:6b:df:31:a1:9e:bd:fe:2b:29: 78:3a:73:50:23:b5:06:2d:a4:9e:f0:0e:b4:36:6d: bb:c1:f1:3b:1f:f9:d9:b0:05:3f:6a:46:1d:93:09: 90:c8:b6:ac:a3:0a:2c:5e:56:9f:bf:a8:da:ea:5c: fa:51:53:d8:85:32:55:df:d8:99:22:ed:c6:38:da: 96:ac:16:ed:27:79:29:0e:b3:f0:ba:7c:2d:00:86: 38:31:8c:e4:29:a3:78:30:da:2c:f8:99:64:48:6e: 6e:f9:1e:c0:1e:2c:65:f3:ae:cb:12:2f:0e:60:54: db:ac:58:63:10:bf:c6:24:4b:73:be:2b:43:49:86: 75:fd:e4:c4:79:87:48:44:35:55:7c:15:99:0e:fb: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:E3:45:40:F3:13:FA:88:37:B5:A1:00:F2:3F:A9:DC:7E:2D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1d:19:ce:44:d2:94:05:4b:53:36:5c:ee:5c:c3:08:8e:f1: ba:d1:f2:20:45:8f:b0:9a:9b:a2:ba:0e:f3:52:cb:42:8f:d4: 53:73:48:c3:32:cb:07:c4:10:ca:fa:a1:c1:b1:2e:ec:ac:c6: 7d:86:05:9c:4a:c0:86:ea:05:75:cb:49:2f:e9:49:4e:0c:d1: 1b:12:70:32:9f:96:ac:0f:c3:09:36:c1:b0:41:de:2e:b8:bd: d3:48:e3:68:42:47:2f:73:06:95:ef:60:8d:0c:90:44:0a:e6: 9e:1b:32:0e:c1:aa:a3:75:c1:f4:1f:81:57:ca:7b:7a:4b:29: 27:49:45:5d:80:60:0d:13:4f:bb:45:7d:01:c5:aa:4a:b6:e5: 6f:64:40:56:ec:a7:53:cd:53:8f:3c:2b:09:84:44:18:ca:1f: 17:32:0b:03:0a:26:62:28:dc:21:2a:98:f6:0c:0f:b5:39:a3: 20:b2:99:32:d3:90:be:4b:63:fa:aa:f4:9b:88:6c:24:fa:5b: 73:7c:40:5a:3d:c9:07:93:fb:14:e7:1e:1a:9f:4f:cf:70:94: dc:e5:3f:6b:56:3d:7f:bc:df:c6:7f:73:dd:d3:52:8f:c0:dc: ff:cf:c1:45:58:c8:82:a3:e8:61:15:d0:7b:a4:b0:4e:b3:00: a2:6c:71:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mYkPtRzjNPlQGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YzUxMGNlMTUtOGQxMC00MGIwLWE4ZGItZDMzMzI5MjhlYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG04tDN/2IqgBoi6Q2aplzOZJNQKr5HfV7Oz pTS+GRsQWlUZ0DTXBKJWbCMAIgF6QAtNe/xXR8cglwg0OTA9VEpUFzOnDT9uCVMR J3QanT8tWkkMSOlJsONgxcZfZ7WmF4+BWmzSz+5/3zARbD5r3zGhnr3+Kyl4OnNQ I7UGLaSe8A60Nm27wfE7H/nZsAU/akYdkwmQyLasowosXlafv6ja6lz6UVPYhTJV 39iZIu3GONqWrBbtJ3kpDrPwunwtAIY4MYzkKaN4MNos+JlkSG5u+R7AHixl867L Ei8OYFTbrFhjEL/GJEtzvitDSYZ1/eTEeYdIRDVVfBWZDvvOdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+q40VA8xP6iDe1oQDyP6ncfi2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTM0ODAwYTItM2RjZC0z ZTcwLWFkMmMtMDA2OTI5ZDhlNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEdGc5E0pQFS1M2XO5cwwiO8brR8iBFj7Cam6K6DvNSy0KP1FNzSMMy ywfEEMr6ocGxLuysxn2GBZxKwIbqBXXLSS/pSU4M0RsScDKflqwPwwk2wbBB3i64 vdNI42hCRy9zBpXvYI0MkEQK5p4bMg7BqqN1wfQfgVfKe3pLKSdJRV2AYA0TT7tF fQHFqkq25W9kQFbsp1PNU488KwmERBjKHxcyCwMKJmIo3CEqmPYMD7U5oyCymTLT kL5LY/qq9JuIbCT6W3N8QFo9yQeT+xTnHhqfT89wlNzlP2tWPX+838Z/c93TUo/A 3P/PwUVYyIKj6GEV0HuksE6zAKJsceQ= -----END CERTIFICATE-----Generated at Sun Apr 13 00:33:58 2025 by rpki-client