$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87f85e01-6af9-3277-bc22-997ac43cc44c.roa File: 87f85e01-6af9-3277-bc22-997ac43cc44c.roa (raw, json) Hash identifier: xiAuC2ZTpMK+rBf1aFDCqYYMTlmSF4rNCQfgmZz3jHo= Subject key identifier: 84:7D:56:B6:2D:98:3E:4A:69:98:90:19:2C:76:37:5F:02:1D:E8:B1 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848F1FD7DF3068FE5FCFB1AD380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87f85e01-6af9-3277-bc22-997ac43cc44c.roa Signing time: Thu 20 Feb 2025 12:27:27 +0000 ROA not before: Thu 20 Feb 2025 12:27:27 +0000 ROA not after: Wed 21 May 2025 11:27:27 +0000 asID: 18779 IP address blocks: 104.253.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:fd:7d:f3:06:8f:e5:fc:fb:1a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 20 12:27:27 2025 GMT Not After : May 21 11:27:27 2025 GMT Subject: CN=ba5c6a21-fa4d-4b0b-8a9e-be11202b3033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:bc:3b:58:2b:bc:65:65:3f:83:57:83:86: 91:b8:05:eb:e5:98:45:a4:d7:c4:72:ae:fc:0b:88: fa:c0:65:55:73:bc:ee:b1:d4:15:a0:79:61:3a:ae: 4b:67:72:50:b1:77:95:6f:7b:95:aa:d0:3d:29:cf: 2e:44:1b:73:07:a4:e7:2e:1f:50:14:a6:39:ed:c7: f3:fc:5a:e8:db:fa:f8:d3:d4:81:90:dd:79:9e:d6: 1e:93:f9:7d:da:be:4e:f8:e4:7d:47:66:69:cc:a6: f6:33:77:05:4a:09:83:86:a9:aa:97:3c:35:48:70: 93:1f:36:d4:d5:fa:42:05:84:5e:cb:ab:85:f4:7b: 39:d7:7b:6e:fe:8a:91:7e:d0:16:97:37:d1:0d:72: 76:65:ed:e0:65:37:03:ee:91:e2:a7:b6:ca:99:18: 41:5f:a8:13:91:25:f3:c1:36:da:e1:2c:ee:2e:1e: 53:b7:7c:8f:b0:c8:1f:98:b5:06:9f:2d:41:d4:cd: 2b:94:b6:50:c0:04:a9:ab:2a:73:3b:aa:d5:5e:13: 48:7e:f6:5c:b6:1b:88:cc:07:6c:2b:4b:0d:6b:97: 35:6b:76:3e:9b:6d:de:38:73:85:15:a9:69:c7:9c: 98:89:70:79:41:fa:22:7b:c0:e6:fc:99:82:ff:75: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7D:56:B6:2D:98:3E:4A:69:98:90:19:2C:76:37:5F:02:1D:E8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87f85e01-6af9-3277-bc22-997ac43cc44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:81:6e:5b:65:b8:bb:8b:98:5d:71:07:c2:1a:24:ab:f4:77: 12:58:46:7a:e9:1d:93:c7:01:01:2d:bd:5f:8c:00:ad:5a:8e: 7c:a6:5d:9d:ec:76:03:39:3e:74:f3:13:95:33:05:2f:1c:2c: c0:07:b8:cd:0e:28:3a:25:d4:8d:7f:93:ef:88:59:8e:f0:d9: e4:7b:af:3f:01:0f:13:a0:08:13:3c:87:7e:82:1a:01:9d:04: ef:a5:39:51:73:06:50:82:9c:2d:5b:a1:dd:f6:ba:47:ba:51: f3:20:f2:b9:10:73:68:3e:52:43:90:65:4a:d4:39:70:ca:d0: 2d:34:7c:3e:57:52:8a:d1:4b:6a:73:ef:13:af:1d:4a:d4:36: d4:3e:9f:f9:0d:a2:78:15:b6:b5:4e:7d:a4:3b:68:d8:b2:b3: 35:78:68:82:93:28:07:96:e3:86:6f:6d:94:17:e2:63:f2:5f: 38:c6:7b:11:f1:67:6e:4d:f6:9f:7a:e6:e7:58:6f:84:6e:a7: 8b:2f:76:08:86:01:00:f1:db:3f:51:87:e5:10:36:39:ba:93: 76:92:fa:68:cb:c4:d2:a4:ef:41:36:b8:36:e0:c2:ca:8e:88: db:d7:b3:47:e6:9d:2f:05:4c:c6:34:a1:0d:f4:49:69:10:cb: 70:61:96:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx/X3zBo/l/Psa04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyMDEyMjcyN1oXDTI1MDUyMTExMjcyN1owLzEtMCsGA1UEAxMk YmE1YzZhMjEtZmE0ZC00YjBiLThhOWUtYmUxMTIwMmIzMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif+8O1grvGVlP4NXg4aRuAXr5ZhFpNfEcq78 C4j6wGVVc7zusdQVoHlhOq5LZ3JQsXeVb3uVqtA9Kc8uRBtzB6TnLh9QFKY57cfz /Fro2/r409SBkN15ntYek/l92r5O+OR9R2ZpzKb2M3cFSgmDhqmqlzw1SHCTHzbU 1fpCBYRey6uF9Hs513tu/oqRftAWlzfRDXJ2Ze3gZTcD7pHip7bKmRhBX6gTkSXz wTba4SzuLh5Tt3yPsMgfmLUGny1B1M0rlLZQwASpqypzO6rVXhNIfvZcthuIzAds K0sNa5c1a3Y+m23eOHOFFalpx5yYiXB5Qfoie8Dm/JmC/3XK+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR9VrYtmD5KaZiQGSx2N18CHeixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODdmODVlMDEtNmFmOS0z Mjc3LWJjMjItOTk3YWM0M2NjNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqBbltluLuLmF1xB8IaJKv0dxJYRnrpHZPHAQEtvV+MAK1ajnymXZ3s dgM5PnTzE5UzBS8cLMAHuM0OKDol1I1/k++IWY7w2eR7rz8BDxOgCBM8h36CGgGd BO+lOVFzBlCCnC1bod32uke6UfMg8rkQc2g+UkOQZUrUOXDK0C00fD5XUorRS2pz 7xOvHUrUNtQ+n/kNongVtrVOfaQ7aNiyszV4aIKTKAeW44ZvbZQX4mPyXzjGexHx Z25N9p965udYb4Rup4svdgiGAQDx2z9Rh+UQNjm6k3aS+mjLxNKk70E2uDbgwsqO iNvXs0fmnS8FTMY0oQ30SWkQy3Bhlh4= -----END CERTIFICATE-----Generated at Fri Apr 11 22:17:35 2025 by rpki-client