$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4e20ad-4e77-39af-9498-51e7a4516d9a.roa File: 8c4e20ad-4e77-39af-9498-51e7a4516d9a.roa (raw, json) Hash identifier: C3tUtxL2Ys68hD4PPb65+zhV0xSaHVtjb7F2pE+k30g= Subject key identifier: 9B:3E:DA:DD:E1:4C:E5:B2:37:85:8F:29:CD:6E:43:BD:82:49:2B:D7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848B1F623B07A869E514B381780 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4e20ad-4e77-39af-9498-51e7a4516d9a.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 400536 IP address blocks: 104.164.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:23:b0:7a:86:9e:51:4b:38:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=1abc45b0-2a3c-4bb8-b113-906fb0df1264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:8b:17:ab:77:7e:6c:0d:70:00:55:7b:28: 49:14:54:11:3a:39:65:c8:94:1a:32:42:86:b7:b8: 43:9f:21:e6:d5:23:e4:34:be:64:4b:61:00:a3:77: 8d:5f:38:df:81:a6:a8:84:6f:2e:57:21:64:a9:8e: 69:9c:7f:d9:a3:46:c4:7f:16:a7:24:d3:30:57:f2: 0d:6a:a9:01:fe:02:92:3e:e8:c3:91:8c:68:79:08: fd:c9:72:9e:54:9c:a8:f0:74:fa:ce:da:45:fa:7a: 7f:99:d2:35:38:6a:46:64:e7:5c:d7:27:82:0b:cc: 2b:e5:84:d1:a4:bb:3d:36:b0:d8:ad:ee:ff:1f:d4: e1:fe:1a:21:36:a8:0e:fd:1d:6c:dc:bb:9b:d0:03: 0c:bd:6f:8e:00:b7:46:b6:69:61:51:00:b4:d3:4d: 0e:4c:69:f3:b1:63:57:07:4d:c0:2a:a0:0f:88:2a: 70:5c:04:36:d2:fb:4b:42:36:d0:5a:4e:7d:b8:aa: bd:32:aa:bd:93:c2:e6:03:c9:7c:15:42:4d:69:bf: 2e:32:b8:c0:93:62:70:9b:d0:43:02:9a:8c:52:ba: 93:49:b3:c3:a5:86:fa:b6:8d:8f:8d:9b:50:7e:aa: 7d:7d:8f:be:15:67:1b:a6:53:bd:bb:31:a8:35:ec: 47:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3E:DA:DD:E1:4C:E5:B2:37:85:8F:29:CD:6E:43:BD:82:49:2B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4e20ad-4e77-39af-9498-51e7a4516d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f3:68:35:2f:e6:50:f7:f5:f1:1b:1c:08:da:66:eb:5e:36: fd:05:15:05:04:7d:c3:6c:69:a0:51:d6:ea:d7:cf:82:9c:4c: 1d:99:c1:cd:be:ce:7e:db:f6:16:37:dd:ae:8b:f1:a9:47:fc: 51:e5:88:7b:55:50:4d:68:83:e7:eb:26:54:9b:53:05:49:81: f5:18:27:69:4e:11:85:7b:f1:bc:aa:fa:c4:49:69:62:2e:6d: 2b:9b:de:9c:dc:20:73:b0:d9:74:c6:10:4b:49:c8:81:6a:dd: b9:11:eb:b5:40:82:46:2e:c2:05:fe:02:55:7b:97:b9:0b:9a: b4:e3:01:ed:40:93:eb:65:17:2b:4c:72:5f:fd:41:1a:7e:7a: 04:ee:c7:6a:4b:68:68:97:a5:0f:b0:be:a4:d5:19:ec:b7:5f: 9e:50:2f:47:47:0f:30:68:4c:af:70:2f:16:52:42:3b:f7:4d: 89:d6:02:a3:78:c5:cc:f3:32:d1:66:af:43:2d:56:c4:ee:ba: 52:9c:ce:65:0f:a6:86:86:9b:f4:e9:fb:fb:a4:59:6d:ff:f8: 1a:fc:05:c3:ac:aa:c1:22:0c:62:74:d4:74:67:fb:48:56:c1: bf:9d:2b:35:3d:91:fa:95:4b:77:35:fe:6e:a3:05:36:bd:2a: 1c:89:c5:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9iOweoaeUUs4F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk MWFiYzQ1YjAtMmEzYy00YmI4LWIxMTMtOTA2ZmIwZGYxMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHeLF6t3fmwNcABVeyhJFFQROjllyJQaMkKG t7hDnyHm1SPkNL5kS2EAo3eNXzjfgaaohG8uVyFkqY5pnH/Zo0bEfxanJNMwV/IN aqkB/gKSPujDkYxoeQj9yXKeVJyo8HT6ztpF+np/mdI1OGpGZOdc1yeCC8wr5YTR pLs9NrDYre7/H9Th/hohNqgO/R1s3Lub0AMMvW+OALdGtmlhUQC0000OTGnzsWNX B03AKqAPiCpwXAQ20vtLQjbQWk59uKq9Mqq9k8LmA8l8FUJNab8uMrjAk2Jwm9BD ApqMUrqTSbPDpYb6to2PjZtQfqp9fY++FWcbplO9uzGoNexHFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs+2t3hTOWyN4WPKc1uQ72CSSvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGM0ZTIwYWQtNGU3Ny0z OWFmLTk0OTgtNTFlN2E0NTE2ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfzaDUv5lD39fEbHAjaZuteNv0FFQUEfcNsaaBR1urXz4KcTB2Zwc2+ zn7b9hY33a6L8alH/FHliHtVUE1og+frJlSbUwVJgfUYJ2lOEYV78byq+sRJaWIu bSub3pzcIHOw2XTGEEtJyIFq3bkR67VAgkYuwgX+AlV7l7kLmrTjAe1Ak+tlFytM cl/9QRp+egTux2pLaGiXpQ+wvqTVGey3X55QL0dHDzBoTK9wLxZSQjv3TYnWAqN4 xczzMtFmr0MtVsTuulKczmUPpoaGm/Tp+/ukWW3/+Br8BcOsqsEiDGJ01HRn+0hW wb+dKzU9kfqVS3c1/m6jBTa9KhyJxfc= -----END CERTIFICATE-----Generated at Sun Apr 6 08:45:48 2025 by rpki-client