$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa File: 9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa (raw, json) Hash identifier: iYkDhXM6KWIIrjC/KYVtAjuv0bev8G4AQUqYoAvMO9A= Subject key identifier: 17:EE:39:85:76:79:A6:50:5C:FE:A7:05:D5:C1:88:F4:28:57:F9:4C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164F8F411BE29A9143BBB40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 104.253.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:f8:f4:11:be:29:a9:14:3b:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=e873b580-7bb0-4ad4-88b7-595a79c4fe11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:dc:52:64:0a:bd:ec:f7:6e:14:f6:d1:22: b6:86:d8:a3:e4:28:6c:73:3c:7b:10:22:bc:0d:fa: 65:bd:36:a0:15:f5:9c:cf:85:4c:78:d7:21:bb:dd: a7:65:dd:4c:5c:90:a1:35:ac:0b:7c:1c:39:96:4c: b5:f8:ad:9d:99:6d:48:42:7c:bc:75:a3:2f:5a:89: f3:60:b6:dc:29:e7:35:71:26:cc:86:8c:be:c5:53: 38:e4:fd:56:27:02:9c:2b:5c:53:d2:8d:f6:88:3d: 97:9c:fa:0e:93:e6:72:83:aa:2d:af:61:36:7e:65: 82:01:b9:85:bc:20:84:5e:fe:34:49:6c:d9:6a:d1: 56:6e:27:08:b7:62:47:af:81:8e:d8:98:95:16:00: 9c:91:a6:a4:f3:22:8c:3c:f1:dc:01:7f:02:e4:c9: 09:61:1a:68:c2:e7:39:2b:24:1e:68:e8:50:ef:23: 18:3e:e5:af:c0:0a:c7:95:41:aa:9d:9c:56:97:31: ec:35:43:f1:0f:1e:1a:8a:6f:57:27:c1:eb:c3:63: 09:50:83:a3:04:cc:b5:1d:12:a7:2e:19:ed:14:5e: bf:31:66:c9:d3:dc:8e:19:45:a3:da:96:eb:88:50: 5b:ef:98:f6:7d:e7:cf:8c:60:0a:1a:d9:b4:3f:df: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EE:39:85:76:79:A6:50:5C:FE:A7:05:D5:C1:88:F4:28:57:F9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:59:39:86:41:c9:76:59:50:a6:c1:f1:62:95:1d:82:6e:c3: ae:dd:6a:d2:94:a9:c7:3c:38:0a:ac:9a:25:e7:1e:99:df:f0: ce:28:b8:e0:47:77:77:24:3e:bb:88:ee:73:f8:98:1c:28:f5: 67:11:29:a1:83:33:b6:8e:0f:23:fe:79:43:84:32:28:96:a8: 21:a5:f7:b2:b7:7e:18:0a:18:30:ac:27:c5:cd:75:db:8a:d0: 87:ae:8c:11:33:01:09:11:7d:9d:dd:1d:6b:00:20:16:1c:7e: ad:65:b4:b8:f8:db:63:ac:3f:0e:1d:e9:43:39:87:cb:c4:05: cf:0f:10:0e:54:18:88:46:fd:38:a7:34:37:10:ec:77:05:7a: c9:22:72:bc:30:24:22:cf:bf:5c:fe:63:59:a0:18:75:4c:9c: e0:f3:4f:e4:72:2f:f2:91:d8:98:41:c6:7b:c2:f5:48:d4:59: cb:8e:d4:49:91:b1:df:3b:6a:e3:91:90:6b:9b:33:6d:17:bc: c0:73:b3:0a:17:f5:ad:e3:cf:67:3e:23:af:31:57:42:02:57: ad:ea:ba:12:dc:cc:21:cb:00:0c:8f:1c:ce:82:16:b2:30:7e: 23:9f:66:d3:71:b0:8a:d6:0a:c3:33:66:37:80:2b:9b:f0:05: fb:ee:ee:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPj0Eb4pqRQ7u0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZTg3M2I1ODAtN2JiMC00YWQ0LTg4YjctNTk1YTc5YzRmZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPPcUmQKvez3bhT20SK2htij5Chsczx7ECK8 DfplvTagFfWcz4VMeNchu92nZd1MXJChNawLfBw5lky1+K2dmW1IQny8daMvWonz YLbcKec1cSbMhoy+xVM45P1WJwKcK1xT0o32iD2XnPoOk+Zyg6otr2E2fmWCAbmF vCCEXv40SWzZatFWbicIt2JHr4GO2JiVFgCckaak8yKMPPHcAX8C5MkJYRpowuc5 KyQeaOhQ7yMYPuWvwArHlUGqnZxWlzHsNUPxDx4aim9XJ8Hrw2MJUIOjBMy1HRKn LhntFF6/MWbJ09yOGUWj2pbriFBb75j2fefPjGAKGtm0P99CPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfuOYV2eaZQXP6nBdXBiPQoV/lMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWE1YzhmOGYtY2QxZS0z Yzk4LWIwZjktZWJlZWM3OGIwNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFZOYZByXZZUKbB8WKVHYJuw67datKUqcc8OAqsmiXnHpnf8M4ouOBH d3ckPruI7nP4mBwo9WcRKaGDM7aODyP+eUOEMiiWqCGl97K3fhgKGDCsJ8XNdduK 0IeujBEzAQkRfZ3dHWsAIBYcfq1ltLj422OsPw4d6UM5h8vEBc8PEA5UGIhG/Tin NDcQ7HcFeskicrwwJCLPv1z+Y1mgGHVMnODzT+RyL/KR2JhBxnvC9UjUWcuO1EmR sd87auORkGubM20XvMBzswoX9a3jz2c+I68xV0ICV63quhLczCHLAAyPHM6CFrIw fiOfZtNxsIrWCsMzZjeAK5vwBfvu7j4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:08 2025 by rpki-client