$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ab52d20-25d0-36ac-a846-dbebdd96d3c2.roa File: 1ab52d20-25d0-36ac-a846-dbebdd96d3c2.roa (raw, json) Hash identifier: dMSk9HX3MaNeOOxG5NaaOnZT7dF1Vvmy0/6zjw3CVww= Subject key identifier: 9E:63:45:EB:C4:7A:6C:32:E8:C8:9D:C9:18:13:FE:3C:26:2E:5A:15 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848F1FD5A5346787A77B5FB0180 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ab52d20-25d0-36ac-a846-dbebdd96d3c2.roa Signing time: Thu 20 Feb 2025 12:27:10 +0000 ROA not before: Thu 20 Feb 2025 12:27:10 +0000 ROA not after: Wed 21 May 2025 11:27:10 +0000 asID: 18779 IP address blocks: 104.253.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:fd:5a:53:46:78:7a:77:b5:fb:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 20 12:27:10 2025 GMT Not After : May 21 11:27:10 2025 GMT Subject: CN=cf3a1d9d-54ef-496f-80d1-1ce9b81c50ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:68:5f:e9:f4:97:f5:87:1b:b3:e0:46:95:7b: 64:68:65:ba:c4:69:fa:c3:46:5d:8f:47:70:bc:e9: 46:3f:2f:dc:1f:dd:3f:92:2c:80:05:83:2b:92:96: e2:89:95:87:06:f2:56:ba:0a:97:e5:ce:c3:e1:4f: 46:bc:a4:97:fc:b6:e3:7a:42:36:6a:09:e2:8d:2d: 4b:ce:eb:ad:a0:df:01:a6:92:e6:8b:c7:23:8b:88: cc:0c:57:1c:f4:ec:b7:14:b2:9d:98:94:dd:17:91: 3f:77:7a:24:15:d1:10:3b:3d:f2:2b:02:11:3a:88: 7c:1b:1c:88:b8:cb:52:d8:01:f5:0b:29:91:62:7d: 2f:90:bc:83:4d:40:64:bc:63:73:e2:f6:f6:02:eb: 9b:0c:0f:29:31:da:11:8c:a4:d4:1d:0a:35:a1:6c: e2:b1:e3:49:e2:a4:59:ec:e9:91:28:0d:f8:87:6f: 8b:91:2f:2e:5c:e5:5a:ce:79:60:31:7c:fc:25:bd: 02:c2:60:74:0f:0f:6a:36:d6:ad:0b:e7:81:c4:a1: 13:c1:e5:6f:4f:6d:b2:7c:22:14:8f:fb:c8:06:e1: 0f:e7:e1:28:00:7e:b2:0f:d8:10:d3:68:8d:c3:12: a2:82:89:98:ec:05:d8:5b:72:bc:0e:64:05:f8:02: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:45:EB:C4:7A:6C:32:E8:C8:9D:C9:18:13:FE:3C:26:2E:5A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ab52d20-25d0-36ac-a846-dbebdd96d3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c8:d0:39:a3:7f:3c:ec:a8:d9:4e:4d:31:82:b4:4c:fd:8e: 22:e7:6d:cd:ad:98:86:4c:24:94:c3:d0:df:5b:84:e3:72:2a: 14:71:7f:20:f3:6c:e5:32:f3:9b:92:b8:b5:99:47:e7:5b:a9: 80:e4:6d:28:7a:2d:a9:a8:01:a0:73:d2:54:8a:58:81:42:3f: cb:4f:56:1a:92:bc:50:ee:4f:21:39:d7:2d:f9:c6:21:51:c9: 64:75:53:6e:a4:15:48:7a:89:9f:d7:18:89:e5:8a:19:3a:52: 4f:82:9d:ef:7d:f7:82:b9:2f:0e:73:1e:32:b0:27:a0:cf:54: a6:74:13:32:e9:e3:86:b8:e4:ca:f6:ea:33:6f:46:ed:cb:95: 57:cf:83:7e:f9:ec:1b:65:a0:94:dc:82:b3:76:dc:29:50:8e: e8:ef:3f:b3:1e:52:ae:f1:c5:2e:55:a8:26:7b:e8:cf:58:3d: f9:b3:4b:30:db:e4:b2:ae:fc:af:f4:1e:50:1d:2c:97:1b:f4: 2e:34:d6:1e:3f:c6:fa:3d:a9:8d:71:6f:a5:92:53:29:e0:14: 26:77:01:b6:30:ad:9f:8c:63:03:07:7f:30:11:79:64:3b:b1: 2e:fb:a6:0d:99:b0:1a:35:03:ea:7a:6d:2c:be:c6:a0:b9:69: d5:7b:c9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx/VpTRnh6d7X7AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyMDEyMjcxMFoXDTI1MDUyMTExMjcxMFowLzEtMCsGA1UEAxMk Y2YzYTFkOWQtNTRlZi00OTZmLTgwZDEtMWNlOWI4MWM1MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmhf6fSX9Ycbs+BGlXtkaGW6xGn6w0Zdj0dw vOlGPy/cH90/kiyABYMrkpbiiZWHBvJWugqX5c7D4U9GvKSX/LbjekI2agnijS1L zuutoN8BppLmi8cji4jMDFcc9Oy3FLKdmJTdF5E/d3okFdEQOz3yKwIROoh8GxyI uMtS2AH1CymRYn0vkLyDTUBkvGNz4vb2AuubDA8pMdoRjKTUHQo1oWziseNJ4qRZ 7OmRKA34h2+LkS8uXOVaznlgMXz8Jb0CwmB0Dw9qNtatC+eBxKETweVvT22yfCIU j/vIBuEP5+EoAH6yD9gQ02iNwxKigomY7AXYW3K8DmQF+AKRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5jRevEemwy6MidyRgT/jwmLloVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWFiNTJkMjAtMjVkMC0z NmFjLWE4NDYtZGJlYmRkOTZkM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDI0DmjfzzsqNlOTTGCtEz9jiLnbc2tmIZMJJTD0N9bhONyKhRxfyDz bOUy85uSuLWZR+dbqYDkbSh6LamoAaBz0lSKWIFCP8tPVhqSvFDuTyE51y35xiFR yWR1U26kFUh6iZ/XGInlihk6Uk+Cne9994K5Lw5zHjKwJ6DPVKZ0EzLp44a45Mr2 6jNvRu3LlVfPg3757BtloJTcgrN23ClQjujvP7MeUq7xxS5VqCZ76M9YPfmzSzDb 5LKu/K/0HlAdLJcb9C401h4/xvo9qY1xb6WSUyngFCZ3AbYwrZ+MYwMHfzAReWQ7 sS77pg2ZsBo1A+p6bSy+xqC5adV7ySI= -----END CERTIFICATE-----Generated at Fri Apr 11 22:40:00 2025 by rpki-client