$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7a88064f-7306-3332-80a4-a089cad04d65.roa File: 7a88064f-7306-3332-80a4-a089cad04d65.roa (raw, json) Hash identifier: Q1t+dLK7RlUPmj7LC2BaUjl1Ajv55XkC5oKNRGf7Bcc= Subject key identifier: 26:12:E1:5D:AE:70:C5:AB:19:E5:33:32:20:76:10:5F:52:3D:85:7C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848B23BAFF41543126BDDD32780 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7a88064f-7306-3332-80a4-a089cad04d65.roa Signing time: Tue 28 Jan 2025 16:21:02 +0000 ROA not before: Tue 28 Jan 2025 16:21:02 +0000 ROA not after: Mon 28 Apr 2025 15:21:02 +0000 asID: 5511 IP address blocks: 104.253.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:3b:af:f4:15:43:12:6b:dd:d3:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 28 16:21:02 2025 GMT Not After : Apr 28 15:21:02 2025 GMT Subject: CN=bd238c84-fa9c-45ca-8de0-d26525b1bc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:93:6c:e1:cd:f1:30:26:ff:ad:22:8a:22:14: af:84:e8:cc:eb:68:78:4a:ec:88:d6:f0:55:07:ed: 08:23:37:9a:9d:88:e4:26:6e:4f:3e:cc:03:7b:76: e7:cd:0e:a9:73:a2:cc:6d:b2:ec:e9:29:5d:22:c2: df:bd:e1:2c:0c:1b:fc:65:c5:96:4d:76:c1:36:5e: ec:3e:fe:dd:74:77:bf:60:dc:46:df:53:98:9a:d1: ba:62:72:d9:ab:df:6b:50:c6:6a:40:61:3f:1d:98: 4d:0f:9d:1a:16:48:4e:16:a0:3c:77:3d:d9:69:45: f4:24:ba:a9:53:49:b4:d5:ca:e1:73:62:4c:96:93: fc:8a:ae:ae:59:45:fc:6d:e0:d2:83:b5:11:20:a6: d8:13:b5:f1:01:34:d3:07:d1:22:3b:74:b6:89:44: 47:16:16:dc:28:36:6f:50:9d:40:9d:58:1a:18:58: fe:cf:1c:22:1a:16:15:b9:00:31:16:6b:a4:fb:79: ee:d0:1a:01:a2:09:cf:28:32:fe:24:c5:b6:92:c0: 92:3f:21:7c:ad:e2:0e:21:a9:85:49:b3:a5:d4:a0: a8:9f:c1:86:9a:22:65:5a:2a:e7:2b:0a:52:09:86: a5:bc:1e:ff:7e:75:a8:86:39:14:35:00:cb:71:fd: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:12:E1:5D:AE:70:C5:AB:19:E5:33:32:20:76:10:5F:52:3D:85:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7a88064f-7306-3332-80a4-a089cad04d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f4:8e:2d:db:f9:b2:ea:7f:d0:d8:f4:a1:4a:7a:54:46:fd: 84:ed:0b:e6:9c:aa:9a:5b:f3:06:e8:63:eb:82:71:da:2e:5d: 33:0e:ca:6e:4f:7d:82:69:c9:e7:73:1c:1c:f9:1c:3c:62:78: 76:a3:6d:bf:c2:7e:fa:ac:02:e3:bf:d9:76:01:ae:75:0e:ff: 7c:93:72:8f:68:dc:e5:06:32:38:25:03:7c:06:b1:89:32:40: b3:30:4c:79:c3:7b:3c:3f:8f:a8:c1:1f:2c:22:4e:3d:b0:e7: f8:58:b9:1b:05:62:27:d7:eb:59:93:e7:8f:2f:db:bd:86:b8: 68:d7:4e:0b:9f:c9:6a:b5:19:56:aa:0b:bc:d3:ca:16:a4:7c: 60:1d:f8:ef:32:23:56:6c:27:9e:27:21:97:b8:68:c9:b5:88: dd:0e:35:16:57:f6:96:0c:bd:36:33:42:77:52:aa:3f:e9:6f: 81:7a:c9:5f:06:47:2b:8a:3d:40:ff:8c:ac:81:b7:8b:50:b4: 79:27:bb:51:0e:3d:95:03:59:ab:0b:b6:2f:4e:c5:aa:ae:31: 5a:26:e7:e3:81:ce:d6:79:00:4b:66:b0:ff:ca:62:c4:48:d1: 1f:5f:9c:8b:d1:c6:80:ba:aa:eb:ec:41:ab:c1:1d:70:d0:54: 00:78:4f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyO6/0FUMSa93TJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyODE2MjEwMloXDTI1MDQyODE1MjEwMlowLzEtMCsGA1UEAxMk YmQyMzhjODQtZmE5Yy00NWNhLThkZTAtZDI2NTI1YjFiYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipNs4c3xMCb/rSKKIhSvhOjM62h4SuyI1vBV B+0IIzeanYjkJm5PPswDe3bnzQ6pc6LMbbLs6SldIsLfveEsDBv8ZcWWTXbBNl7s Pv7ddHe/YNxG31OYmtG6YnLZq99rUMZqQGE/HZhND50aFkhOFqA8dz3ZaUX0JLqp U0m01crhc2JMlpP8iq6uWUX8beDSg7URIKbYE7XxATTTB9EiO3S2iURHFhbcKDZv UJ1AnVgaGFj+zxwiGhYVuQAxFmuk+3nu0BoBognPKDL+JMW2ksCSPyF8reIOIamF SbOl1KCon8GGmiJlWirnKwpSCYalvB7/fnWohjkUNQDLcf2nyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYS4V2ucMWrGeUzMiB2EF9SPYV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvN2E4ODA2NGYtNzMwNi0z MzMyLTgwYTQtYTA4OWNhZDA0ZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP0ji3b+bLqf9DY9KFKelRG/YTtC+acqppb8wboY+uCcdouXTMOym5P fYJpyedzHBz5HDxieHajbb/CfvqsAuO/2XYBrnUO/3yTco9o3OUGMjglA3wGsYky QLMwTHnDezw/j6jBHywiTj2w5/hYuRsFYifX61mT548v272GuGjXTgufyWq1GVaq C7zTyhakfGAd+O8yI1ZsJ54nIZe4aMm1iN0ONRZX9pYMvTYzQndSqj/pb4F6yV8G RyuKPUD/jKyBt4tQtHknu1EOPZUDWasLti9OxaquMVom5+OBztZ5AEtmsP/KYsRI 0R9fnIvRxoC6quvsQavBHXDQVAB4T0w= -----END CERTIFICATE-----Generated at Sat Apr 5 21:38:11 2025 by rpki-client