$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa File: ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa (raw, json) Hash identifier: uKBsJp97pr4jD7KW2LIp62Ir8uRpWXUQ4gQqPiuOn28= Subject key identifier: 6F:D1:A6:BA:71:84:BC:DB:04:46:25:40:74:13:3F:D2:C1:25:27:00 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584908763F8A33BB2E3502472F00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa Signing time: Fri 28 Feb 2025 13:38:33 +0000 ROA not before: Fri 28 Feb 2025 13:38:33 +0000 ROA not after: Thu 29 May 2025 12:38:33 +0000 asID: 7029 IP address blocks: 104.253.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:76:3f:8a:33:bb:2e:35:02:47:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 28 13:38:33 2025 GMT Not After : May 29 12:38:33 2025 GMT Subject: CN=8d0e6d8d-95d2-4dae-8c3c-e256bc356d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:23:8f:66:97:c3:b1:8a:88:90:5b:63:76: de:b9:86:b6:4b:02:cf:85:3d:92:c4:e2:9e:09:2a: 38:43:8d:14:82:82:62:90:5f:41:cd:5c:cb:a8:8f: 7c:51:36:ca:9f:93:71:7d:10:11:d1:f7:db:d5:c2: 52:19:1f:3d:e6:94:37:ca:f8:36:e0:d0:09:6b:b4: 71:6d:df:a0:e9:d1:d1:34:7f:0e:2a:8d:27:d9:c2: 62:a9:a4:2f:45:04:cd:62:ad:9a:9a:c7:5b:18:af: 7a:45:80:ea:d6:79:bc:b6:15:90:b2:f1:ef:94:01: be:04:2f:1c:c9:0c:99:e5:4c:6f:bf:f9:0f:5c:de: fc:16:1b:37:bc:e9:dd:42:3e:92:b1:d7:b4:21:43: d5:8a:4d:99:96:ef:f1:7c:78:d3:e1:3d:44:29:f9: 86:c9:36:0e:52:c4:9a:7a:24:40:0e:91:32:11:74: d1:b2:98:53:75:c8:0c:3f:1b:e6:a5:07:32:3f:b6: 01:b0:97:76:87:ff:b2:8c:91:1a:7c:14:8f:72:99: 86:e3:09:72:ed:bd:b7:e4:e3:a0:11:9c:0d:91:a3: c8:b3:f1:21:f6:03:27:4a:6c:04:83:71:4c:b2:53: 3f:8c:8f:d2:04:12:cf:cb:be:f7:59:b6:ae:b3:3a: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D1:A6:BA:71:84:BC:DB:04:46:25:40:74:13:3F:D2:C1:25:27:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:97:6b:a1:ee:46:50:66:cd:26:5b:ab:d4:2d:1c:f7:87:ed: 6f:c3:9e:af:0a:4d:9e:b7:9f:d9:3c:1a:4b:35:48:79:b3:5d: 02:db:23:60:63:f2:fa:df:c1:1c:42:4f:3c:89:40:02:5f:ea: de:8a:70:a5:83:23:51:d4:6e:a9:f7:3b:a9:d1:1e:62:ee:ff: 40:c1:01:66:5b:e2:c4:14:5e:3f:76:e5:0c:2d:ea:ce:55:e0: 09:3a:7d:e1:6b:04:34:92:5f:67:99:cd:a7:5a:bd:0a:4f:7b: 25:cf:5e:94:67:ea:11:af:77:ca:58:45:68:f3:86:c2:b5:24: dd:52:72:71:83:5b:b2:78:0a:6d:df:df:13:53:0b:19:92:fc: ab:27:0e:f1:15:3a:76:0c:9c:69:e3:79:39:4d:cb:18:32:65: 34:2e:b8:fd:d1:36:e7:da:7f:4e:21:f5:e1:0c:35:5a:a4:ff: c7:56:32:dd:34:da:07:f9:b3:33:0f:06:c7:51:82:da:91:e3: ee:88:ca:2d:f3:d8:09:7d:91:5b:7e:28:9d:3f:4e:b8:f2:92: e2:54:d6:9b:e3:c9:c7:b9:81:02:81:f7:c1:87:87:ca:9c:2e: 20:ce:5e:5d:43:60:28:e4:8f:5f:e5:98:ab:f1:1e:0d:bd:51: c5:17:e6:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIdj+KM7suNQJHLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyODEzMzgzM1oXDTI1MDUyOTEyMzgzM1owLzEtMCsGA1UEAxMk OGQwZTZkOGQtOTVkMi00ZGFlLThjM2MtZTI1NmJjMzU2ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheEjj2aXw7GKiJBbY3beuYa2SwLPhT2SxOKe CSo4Q40UgoJikF9BzVzLqI98UTbKn5NxfRAR0ffb1cJSGR895pQ3yvg24NAJa7Rx bd+g6dHRNH8OKo0n2cJiqaQvRQTNYq2amsdbGK96RYDq1nm8thWQsvHvlAG+BC8c yQyZ5Uxvv/kPXN78Fhs3vOndQj6Ssde0IUPVik2Zlu/xfHjT4T1EKfmGyTYOUsSa eiRADpEyEXTRsphTdcgMPxvmpQcyP7YBsJd2h/+yjJEafBSPcpmG4wly7b235OOg EZwNkaPIs/Eh9gMnSmwEg3FMslM/jI/SBBLPy773Wbauszro3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/RprpxhLzbBEYlQHQTP9LBJScAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWI1Y2RlYzItYTQ1Zi0z MzY0LWE2ZmItZDdkMDA3MjE0YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmXa6HuRlBmzSZbq9QtHPeH7W/Dnq8KTZ63n9k8Gks1SHmzXQLbI2Bj 8vrfwRxCTzyJQAJf6t6KcKWDI1HUbqn3O6nRHmLu/0DBAWZb4sQUXj925Qwt6s5V 4Ak6feFrBDSSX2eZzadavQpPeyXPXpRn6hGvd8pYRWjzhsK1JN1ScnGDW7J4Cm3f 3xNTCxmS/KsnDvEVOnYMnGnjeTlNyxgyZTQuuP3RNufaf04h9eEMNVqk/8dWMt00 2gf5szMPBsdRgtqR4+6Iyi3z2Al9kVt+KJ0/TrjykuJU1pvjyce5gQKB98GHh8qc LiDOXl1DYCjkj1/lmKvxHg29UcUX5lY= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:11 2025 by rpki-client