$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa File: 8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa (raw, json) Hash identifier: XKOJNqNJV0LC4DnQNTi35wZWb1I3xHleqnHaTKm4Nr8= Subject key identifier: 3A:E1:5D:89:71:96:3B:8F:FA:F6:B9:52:21:21:BE:86:07:7A:F8:63 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164F4A229760F28CD21CA60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 104.252.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:f4:a2:29:76:0f:28:cd:21:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=4a2b1d6b-7ddc-48e8-bdcd-ec32ff74fec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e7:08:90:c8:02:21:71:55:37:90:cd:94:8a: 79:a2:f4:12:14:97:0f:50:96:19:e7:f7:e0:3c:42: 54:68:b2:ea:fd:f1:49:48:f3:a2:48:41:97:f6:45: 8d:b0:ff:f8:f7:11:fe:be:2f:ae:15:cf:ec:ee:25: 2d:63:2e:a9:05:09:c7:c3:70:38:20:fe:94:9b:75: b2:89:1b:c3:00:96:84:29:4d:4c:76:1c:36:bd:4a: 06:a0:7b:72:dd:42:97:8a:4b:8f:99:36:18:20:65: a1:d1:ec:71:94:a5:a4:a4:d7:f4:97:41:02:4e:bb: 5b:79:2e:3e:12:85:4d:07:9e:bb:4d:5c:f1:4c:8e: a0:54:62:a2:fc:82:5f:2f:6b:ae:d3:f0:ae:59:6b: 1d:48:4b:c8:b1:d9:bc:94:82:6f:81:47:4d:9c:0c: 2b:b5:ae:41:dd:1f:32:9b:ec:93:f7:04:6c:4d:dc: 04:99:5e:f6:c6:e2:1c:dc:dc:92:95:ea:a2:56:1a: 1d:48:41:7b:7b:24:74:29:c6:e2:82:b7:b9:e5:df: d7:0a:a5:13:1a:56:b6:f2:50:f1:87:3e:59:27:33: a3:ad:9a:ec:44:86:8a:d1:b5:3d:3e:89:9a:bb:fd: cb:c7:a9:86:ea:ca:f1:a1:3c:10:d6:c3:68:6b:28: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:5D:89:71:96:3B:8F:FA:F6:B9:52:21:21:BE:86:07:7A:F8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3b:65:3c:82:0c:bf:be:ed:fb:91:af:6d:ed:7a:33:c4:28: f1:72:c9:25:5b:70:2d:82:e8:70:b7:81:19:a0:b1:76:a5:b0: a0:76:dd:61:f6:2b:fb:9f:64:4f:d8:c0:d9:df:fc:2c:44:f0: 0c:9b:33:0e:02:6b:ef:06:4e:93:e5:1f:2d:3a:48:1b:95:76: fb:6b:0b:92:80:48:a6:40:a4:2c:db:8b:7c:48:a2:a6:a2:93: 60:7e:11:7c:2a:b4:a9:cb:a8:43:47:24:eb:51:e5:b7:62:4f: fd:64:71:a0:80:67:9c:7e:f2:29:8d:61:cb:46:28:29:12:e5: 04:c1:44:bc:3e:a0:9d:ae:e7:f2:25:25:bd:1b:ce:b7:24:73: 23:ee:3e:1a:e2:d0:53:b3:08:a1:84:98:f7:1a:37:91:0c:da: 56:ef:2e:28:0f:78:ab:71:de:c8:92:82:44:8b:f5:bd:49:0c: ed:86:47:85:33:1a:1b:8f:f9:7d:8c:52:57:db:27:0f:82:a7: 83:3c:06:7a:40:8d:6c:54:39:2a:dd:44:7b:b0:d8:ed:a3:47: c4:da:9d:9f:65:88:51:88:ab:fd:20:80:1f:0c:b9:18:99:cc: ed:10:77:37:52:3d:40:71:e6:fa:9b:0d:77:d7:b5:de:bb:19: 94:90:de:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPSiKXYPKM0hymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NGEyYjFkNmItN2RkYy00OGU4LWJkY2QtZWMzMmZmNzRmZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOcIkMgCIXFVN5DNlIp5ovQSFJcPUJYZ5/fg PEJUaLLq/fFJSPOiSEGX9kWNsP/49xH+vi+uFc/s7iUtYy6pBQnHw3A4IP6Um3Wy iRvDAJaEKU1Mdhw2vUoGoHty3UKXikuPmTYYIGWh0exxlKWkpNf0l0ECTrtbeS4+ EoVNB567TVzxTI6gVGKi/IJfL2uu0/CuWWsdSEvIsdm8lIJvgUdNnAwrta5B3R8y m+yT9wRsTdwEmV72xuIc3NySleqiVhodSEF7eyR0Kcbigre55d/XCqUTGla28lDx hz5ZJzOjrZrsRIaK0bU9Pomau/3Lx6mG6srxoTwQ1sNoayh20wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrhXYlxljuP+va5UiEhvoYHevhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGY1ZTUzNzctZTg3OS0z NGZmLWEyY2YtN2E2YTIxZjZhMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo7ZTyCDL++7fuRr23tejPEKPFyySVbcC2C6HC3gRmgsXalsKB23WH2 K/ufZE/YwNnf/CxE8AybMw4Ca+8GTpPlHy06SBuVdvtrC5KASKZApCzbi3xIoqai k2B+EXwqtKnLqENHJOtR5bdiT/1kcaCAZ5x+8imNYctGKCkS5QTBRLw+oJ2u5/Il Jb0bzrckcyPuPhri0FOzCKGEmPcaN5EM2lbvLigPeKtx3siSgkSL9b1JDO2GR4Uz GhuP+X2MUlfbJw+Cp4M8BnpAjWxUOSrdRHuw2O2jR8TanZ9liFGIq/0ggB8MuRiZ zO0QdzdSPUBx5vqbDXfXtd67GZSQ3po= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:54 2025 by rpki-client