$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af1c2f9a-3ec7-3426-a60c-598bb630c19a.roa File: af1c2f9a-3ec7-3426-a60c-598bb630c19a.roa (raw, json) Hash identifier: Nr68j3kyxXH6AtVUQDeMAre5oOwe9qPhiCLW9y6O1yU= Subject key identifier: 76:C4:2D:3E:30:41:D9:17:93:DC:89:33:CD:AA:72:86:2D:11:29:63 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858488E11FFE2180A7EF48FAEB560 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af1c2f9a-3ec7-3426-a60c-598bb630c19a.roa Signing time: Wed 15 Jan 2025 17:27:56 +0000 ROA not before: Wed 15 Jan 2025 17:27:56 +0000 ROA not after: Tue 15 Apr 2025 16:27:56 +0000 asID: 214238 IP address blocks: 104.164.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8e:11:ff:e2:18:0a:7e:f4:8f:ae:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 15 17:27:56 2025 GMT Not After : Apr 15 16:27:56 2025 GMT Subject: CN=baf1e989-8d98-4c30-99c0-b663e9a8e364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:a6:84:e4:c6:0f:d7:23:8f:95:2d:93:b0: 7e:70:04:9a:53:3a:28:c2:4e:cb:3b:7e:f6:0f:77: 11:f6:0f:5d:4a:0b:ba:d9:91:64:08:01:cd:84:7b: 99:fe:a8:f1:29:9d:e4:0b:38:10:2c:b9:23:6b:0d: a0:a9:cd:22:bb:2c:a5:c5:00:fe:c2:b9:3d:53:06: 75:e7:de:a7:a8:ca:ff:c5:07:80:ed:b4:87:0b:2b: f2:4e:e5:71:ac:d1:ea:de:83:a5:00:5b:19:5d:3f: 47:bc:b2:fe:9b:44:8d:0d:64:fa:39:e1:54:c1:a8: 19:ed:a5:3b:77:5f:77:7d:d7:a6:31:d4:24:2f:09: 0f:00:7b:cc:4c:94:d3:b7:50:96:09:1c:26:a0:58: 1a:2d:1f:8a:ac:ae:85:dc:66:3a:1d:f6:77:57:7d: dd:68:17:b1:b0:40:a0:44:fd:15:b0:23:21:48:58: f0:e6:a1:6c:02:d4:21:31:74:d8:2b:71:2c:96:a6: 0d:2f:48:f1:7e:04:05:1a:87:d9:aa:5b:25:4b:43: 7a:bf:9b:be:75:d1:0b:e3:ae:6b:6f:ff:7f:c6:e3: 12:af:30:1f:06:4c:e4:6d:48:60:1c:69:6d:74:be: 21:21:f8:7e:82:a3:06:e8:be:e3:6e:a8:2f:64:07: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:2D:3E:30:41:D9:17:93:DC:89:33:CD:AA:72:86:2D:11:29:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af1c2f9a-3ec7-3426-a60c-598bb630c19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1e:3f:25:ed:a9:ca:84:0c:96:a7:32:ca:49:8b:c8:86:d7: 45:be:47:66:dc:ec:55:a4:30:cd:2e:3b:e6:01:4d:5e:cd:53: 1b:ff:e6:b8:78:31:5b:52:55:b0:ad:4e:22:2b:18:ab:5b:54: 51:9f:ee:ad:97:f9:2d:17:f2:c9:b7:a6:df:86:1d:93:cf:ff: 6e:63:ae:29:29:88:7d:65:39:86:96:b9:33:57:dc:29:c0:d1: c8:ec:9a:e6:89:a5:15:89:c8:45:e9:39:5e:7f:f7:58:06:1a: 64:28:91:7f:eb:e5:d8:45:d1:b6:83:f3:7e:fd:fd:f0:00:61: 6d:96:37:c6:d4:9c:f3:df:5b:d0:b8:68:6e:c5:93:45:cf:f0: de:60:39:d4:87:aa:e9:6e:a8:3d:60:05:7d:48:3a:85:e7:40: 72:d3:71:17:3a:3d:8b:bd:da:fd:80:1b:5f:89:1f:e6:04:bc: 57:f1:63:67:c2:a4:09:86:a9:d8:61:ee:82:81:1f:98:7a:8a: 6e:4a:e9:5e:72:74:f2:63:f6:9e:07:e9:50:ae:56:0b:cb:d7: 28:5a:b3:46:ee:a6:38:f2:94:92:bd:b7:0a:93:7e:28:54:6e: b5:ef:d5:b2:21:ae:db:9c:05:b8:d3:25:8a:f0:04:01:27:49: e7:7e:6f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiOEf/iGAp+9I+utWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDExNTE3Mjc1NloXDTI1MDQxNTE2Mjc1NlowLzEtMCsGA1UEAxMk YmFmMWU5ODktOGQ5OC00YzMwLTk5YzAtYjY2M2U5YThlMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogemhOTGD9cjj5Utk7B+cASaUzoowk7LO372 D3cR9g9dSgu62ZFkCAHNhHuZ/qjxKZ3kCzgQLLkjaw2gqc0iuyylxQD+wrk9UwZ1 596nqMr/xQeA7bSHCyvyTuVxrNHq3oOlAFsZXT9HvLL+m0SNDWT6OeFUwagZ7aU7 d193fdemMdQkLwkPAHvMTJTTt1CWCRwmoFgaLR+KrK6F3GY6HfZ3V33daBexsECg RP0VsCMhSFjw5qFsAtQhMXTYK3EslqYNL0jxfgQFGofZqlslS0N6v5u+ddEL465r b/9/xuMSrzAfBkzkbUhgHGltdL4hIfh+gqMG6L7jbqgvZAeGiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbELT4wQdkXk9yJM82qcoYtESljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWYxYzJmOWEtM2VjNy0z NDI2LWE2MGMtNTk4YmI2MzBjMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUePyXtqcqEDJanMspJi8iG10W+R2bc7FWkMM0uO+YBTV7NUxv/5rh4 MVtSVbCtTiIrGKtbVFGf7q2X+S0X8sm3pt+GHZPP/25jrikpiH1lOYaWuTNX3CnA 0cjsmuaJpRWJyEXpOV5/91gGGmQokX/r5dhF0baD8379/fAAYW2WN8bUnPPfW9C4 aG7Fk0XP8N5gOdSHquluqD1gBX1IOoXnQHLTcRc6PYu92v2AG1+JH+YEvFfxY2fC pAmGqdhh7oKBH5h6im5K6V5ydPJj9p4H6VCuVgvL1yhas0bupjjylJK9twqTfihU brXv1bIhrtucBbjTJYrwBAEnSed+b+Y= -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:53 2025 by rpki-client