$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d918b19-93a7-36b3-b4b7-4a84b1f937a9.roa File: 4d918b19-93a7-36b3-b4b7-4a84b1f937a9.roa (raw, json) Hash identifier: wP+OHtjXVhPAMmGdnWS89MnlZNl0WoyV4pqBS6ji5Rw= Subject key identifier: C9:BC:F2:37:D9:33:EF:EF:CF:1D:4B:FA:24:5F:5D:33:1E:1B:14:4A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164F66BBDB60314862F5D80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d918b19-93a7-36b3-b4b7-4a84b1f937a9.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 104.252.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:f6:6b:bd:b6:03:14:86:2f:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=9671cb04-4408-4af2-97e7-ab749a39251d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:65:33:0b:8b:1c:6c:42:6b:61:60:59:c3: 47:59:a6:c9:16:f4:36:60:d0:fd:7b:81:22:f8:b0: 37:6b:9f:e0:27:fe:99:91:82:a5:fb:4c:5b:eb:88: eb:d1:ae:69:a2:94:f8:d4:ba:2b:c7:3e:54:4f:0f: 62:0c:5b:c2:23:a0:11:c6:2b:41:38:9b:40:3a:5e: 87:d7:0e:33:c0:0c:b4:da:13:0d:85:81:88:b5:29: dc:dc:75:8b:a7:37:51:e4:61:d1:e8:59:63:76:88: 04:c1:47:fc:db:ec:69:25:9b:ca:d1:15:5f:4a:2f: 36:9e:c0:1b:59:c1:6a:ff:b9:e1:41:44:71:dd:59: c8:c0:a6:b5:33:43:17:27:48:b7:bc:44:d9:7f:5e: 88:62:b4:83:32:e9:f4:d8:04:b7:a8:01:79:67:9c: 3c:a1:ca:c8:e9:38:9a:86:5c:1f:b3:5e:2a:0d:c1: e1:7f:cd:3e:9e:29:a9:f1:b2:cc:d6:d4:43:06:22: b9:72:49:65:cc:61:4a:f6:6f:53:20:8d:9f:c4:1b: b3:33:71:a6:13:a5:e3:34:2f:19:e5:79:e3:46:d6: ff:47:fd:3d:18:ed:a9:ea:bd:36:8f:20:57:23:32: 6a:43:73:c7:65:a3:8f:17:85:7a:21:e8:32:6c:8c: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BC:F2:37:D9:33:EF:EF:CF:1D:4B:FA:24:5F:5D:33:1E:1B:14:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d918b19-93a7-36b3-b4b7-4a84b1f937a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d1:04:89:f3:4f:d3:d5:fd:2a:d3:e2:08:08:20:2e:a2:5c: fa:3c:84:76:11:fc:b8:e9:56:77:ca:49:13:fd:2d:07:e3:ca: 5d:3a:90:f4:d6:a5:f2:71:3b:f9:61:6f:46:f1:2b:40:f7:d9: b7:e1:a1:11:fc:05:75:c1:ac:71:8c:03:5c:17:df:85:ad:ca: ff:52:5b:d0:bd:a7:60:ad:93:35:ea:bc:87:93:49:6c:9a:a5: 68:74:00:95:16:2e:61:ea:19:ec:a3:b1:64:96:9b:ae:08:f1: 56:18:92:c5:14:32:99:08:e7:cc:cd:d5:d0:7e:09:f4:9f:b2: 99:e5:6e:0b:e3:8a:20:cd:04:1b:34:12:e4:b3:a7:42:07:58: ea:51:1c:fb:a0:f9:74:ab:6b:f1:77:a9:f7:fe:e0:0c:87:06: 3e:6a:7d:d0:a1:47:e7:02:09:fa:fa:9b:24:13:3f:ba:8c:d5: 4d:8a:41:c4:a1:71:45:81:de:7b:66:b9:41:42:78:e9:fe:a6: bd:5f:4d:43:b4:35:8f:e1:cb:44:b9:91:37:21:70:11:87:de: 5d:e8:53:b7:8d:d6:b3:5d:a9:c0:f9:78:25:4e:11:4f:1c:30: 4f:7e:85:f6:2d:8b:55:8d:92:f4:ba:e4:42:c7:07:20:61:1f: 62:5a:1e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPZrvbYDFIYvXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk OTY3MWNiMDQtNDQwOC00YWYyLTk3ZTctYWI3NDlhMzkyNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk11lMwuLHGxCa2FgWcNHWabJFvQ2YND9e4Ei +LA3a5/gJ/6ZkYKl+0xb64jr0a5popT41Lorxz5UTw9iDFvCI6ARxitBOJtAOl6H 1w4zwAy02hMNhYGItSnc3HWLpzdR5GHR6FljdogEwUf82+xpJZvK0RVfSi82nsAb WcFq/7nhQURx3VnIwKa1M0MXJ0i3vETZf16IYrSDMun02AS3qAF5Z5w8ocrI6Tia hlwfs14qDcHhf80+nimp8bLM1tRDBiK5ckllzGFK9m9TII2fxBuzM3GmE6XjNC8Z 5XnjRtb/R/09GO2p6r02jyBXIzJqQ3PHZaOPF4V6IegybIwzzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm88jfZM+/vzx1L+iRfXTMeGxRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGQ5MThiMTktOTNhNy0z NmIzLWI0YjctNGE4NGIxZjkzN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXRBInzT9PV/SrT4ggIIC6iXPo8hHYR/LjpVnfKSRP9LQfjyl06kPTW pfJxO/lhb0bxK0D32bfhoRH8BXXBrHGMA1wX34Wtyv9SW9C9p2CtkzXqvIeTSWya pWh0AJUWLmHqGeyjsWSWm64I8VYYksUUMpkI58zN1dB+CfSfspnlbgvjiiDNBBs0 EuSzp0IHWOpRHPug+XSra/F3qff+4AyHBj5qfdChR+cCCfr6myQTP7qM1U2KQcSh cUWB3ntmuUFCeOn+pr1fTUO0NY/hy0S5kTchcBGH3l3oU7eN1rNdqcD5eCVOEU8c ME9+hfYti1WNkvS65ELHByBhH2JaHok= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:29 2025 by rpki-client