$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30c7fc8d-92aa-34fe-95ac-1ec452ec2f8d.roa File: 30c7fc8d-92aa-34fe-95ac-1ec452ec2f8d.roa (raw, json) Hash identifier: c5JS9L17Agg9AM3Bbix+hWYp+kIJ5sg6GdNVX2pZ0lY= Subject key identifier: 33:27:69:ED:FA:40:8F:B1:63:21:CE:AA:11:32:9D:FC:B5:66:50:75 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AE461204568DEE6C239E2F100 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30c7fc8d-92aa-34fe-95ac-1ec452ec2f8d.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 2914 IP address blocks: 104.253.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:20:45:68:de:e6:c2:39:e2:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=20fff8af-d1ec-4dd2-b6ae-062e7d91619c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a6:25:c1:04:ea:23:5e:1a:80:8e:1a:8b:a2: 28:e8:db:e7:e2:08:a9:1b:78:7d:da:56:f7:12:9f: 4b:cb:db:a0:a5:6e:16:88:ea:e4:0b:3f:20:0b:e9: 84:cf:91:1d:a9:0c:08:18:05:02:50:44:75:3a:d8: ba:12:22:9e:ec:ba:8c:27:d4:a8:77:54:8d:a5:45: 44:21:f6:d6:d4:fc:8e:a3:c2:d9:6c:5e:0b:ea:5b: 24:c0:64:8d:36:14:d2:09:ac:60:f8:a2:66:60:53: bc:d8:50:3c:39:67:98:12:b4:0c:eb:33:d2:9e:50: f5:73:63:5d:e1:57:7d:31:52:d1:a2:5a:de:f0:24: 89:48:a8:d8:0d:5b:33:87:0f:3c:85:34:cf:ab:89: db:38:5d:f8:79:f6:8c:34:7e:f1:88:5f:15:8e:4f: 9d:02:37:92:c2:0f:97:ce:84:d7:33:f2:7a:1c:1c: 4c:8f:3e:72:e7:2e:08:24:45:78:c5:a1:ab:43:2c: a1:49:bf:24:eb:60:1f:8d:a8:82:28:44:2a:01:73: 9b:e8:2a:8a:7e:72:3f:70:77:b2:21:a0:7c:94:21: e4:49:5c:52:4a:a7:15:7e:4a:07:ea:43:35:f8:69: 48:fd:7b:11:51:0e:ff:be:6a:f8:01:d3:89:bf:06: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:27:69:ED:FA:40:8F:B1:63:21:CE:AA:11:32:9D:FC:B5:66:50:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30c7fc8d-92aa-34fe-95ac-1ec452ec2f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4b:56:e7:6d:b2:22:f2:f5:ee:94:c1:81:17:c3:e8:38:48: f8:90:53:24:9b:8b:3b:1d:e8:65:8b:d2:21:0f:23:86:a0:a4: e4:38:5f:51:55:46:7e:39:91:c3:54:03:c1:36:87:cd:5d:3a: fd:d4:2c:ad:c6:96:dd:5b:56:95:b5:b3:f2:8e:52:f0:01:38: 20:27:e6:8c:c8:4a:60:ec:9c:35:ed:c9:67:10:90:3f:1c:d5: a4:79:53:eb:80:97:e7:95:16:a0:66:5b:f2:aa:71:9f:2e:ed: 47:92:56:8a:d2:e5:37:96:b4:cd:09:94:ec:08:30:de:15:6a: 71:e5:fb:1c:31:62:7c:4a:82:b3:eb:9d:2a:0c:a8:45:8d:ce: 6e:3a:5e:49:7a:05:4f:c1:d7:d4:8f:58:f7:a9:51:ea:32:7b: 16:b0:11:36:53:50:42:aa:76:f1:77:00:53:02:fe:41:32:73: 89:fc:05:a0:67:c7:d8:a4:b5:42:1c:4c:a9:fd:83:23:9e:da: b8:98:36:5f:4a:a6:3d:1c:49:2a:53:dc:6f:a9:7f:ec:bb:b5: 81:89:01:b3:d3:40:fe:61:16:b4:58:ab:cc:01:b7:45:be:16: 90:d5:be:1d:3c:e4:2a:67:f7:0d:ff:a1:ab:41:e1:5f:05:c9: b1:16:2d:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSBFaN7mwjni8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MjBmZmY4YWYtZDFlYy00ZGQyLWI2YWUtMDYyZTdkOTE2MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKYlwQTqI14agI4ai6Io6Nvn4gipG3h92lb3 Ep9Ly9ugpW4WiOrkCz8gC+mEz5EdqQwIGAUCUER1Oti6EiKe7LqMJ9Sod1SNpUVE IfbW1PyOo8LZbF4L6lskwGSNNhTSCaxg+KJmYFO82FA8OWeYErQM6zPSnlD1c2Nd 4Vd9MVLRolre8CSJSKjYDVszhw88hTTPq4nbOF34efaMNH7xiF8Vjk+dAjeSwg+X zoTXM/J6HBxMjz5y5y4IJEV4xaGrQyyhSb8k62AfjaiCKEQqAXOb6CqKfnI/cHey IaB8lCHkSVxSSqcVfkoH6kM1+GlI/XsRUQ7/vmr4AdOJvwZaqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMnae36QI+xYyHOqhEynfy1ZlB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzBjN2ZjOGQtOTJhYS0z NGZlLTk1YWMtMWVjNDUyZWMyZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpLVudtsiLy9e6UwYEXw+g4SPiQUySbizsd6GWL0iEPI4agpOQ4X1FV Rn45kcNUA8E2h81dOv3ULK3Glt1bVpW1s/KOUvABOCAn5ozISmDsnDXtyWcQkD8c 1aR5U+uAl+eVFqBmW/KqcZ8u7UeSVorS5TeWtM0JlOwIMN4VanHl+xwxYnxKgrPr nSoMqEWNzm46Xkl6BU/B19SPWPepUeoyexawETZTUEKqdvF3AFMC/kEyc4n8BaBn x9iktUIcTKn9gyOe2riYNl9Kpj0cSSpT3G+pf+y7tYGJAbPTQP5hFrRYq8wBt0W+ FpDVvh085Cpn9w3/oatB4V8FybEWLZs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:08 2025 by rpki-client