$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa File: b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa (raw, json) Hash identifier: kxQnJTz/gxkZr77OBfWlzcmo5jEK437Ryczxa2pb5FY= Subject key identifier: C4:79:E9:30:18:F8:91:9E:A3:03:8D:91:BD:E9:5E:21:99:A6:15:FF Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848CDE10B3EDB3B9B092AE5B680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 16509 IP address blocks: 104.253.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:0b:3e:db:3b:9b:09:2a:e5:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=1f40e288-fd8c-4d06-92e3-d36db406622c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:fb:0a:94:96:39:fc:41:77:5e:37:e9:34: b3:2f:5c:80:46:d4:07:b4:66:ce:09:27:7c:45:29: 7f:73:07:62:fa:5d:7a:71:76:0d:64:47:b6:80:97: 98:5b:13:d2:79:7f:36:46:5c:e0:44:6d:b5:aa:04: d2:76:6a:42:97:30:6d:ca:99:cd:c3:4e:2a:42:80: 42:7c:01:ef:f6:93:a1:ac:2f:85:3a:56:45:8d:32: 24:46:e5:ce:f4:3a:44:21:e8:16:7c:ad:b8:53:1a: fc:63:3b:54:4b:d7:7b:3e:4a:ef:99:12:8e:8b:7d: 8e:34:72:6e:d2:99:cc:6f:e3:49:da:3f:98:7a:c3: 5d:bc:4b:44:5b:02:2d:ff:e6:d8:15:39:64:cf:f3: 95:26:f0:cf:f8:d5:da:94:24:9a:9f:7e:53:41:18: 14:a8:75:0f:ca:2a:df:68:5e:b9:c8:7e:33:c7:b8: 13:a0:a3:e8:3e:92:6f:49:35:81:ae:0c:84:1a:fa: 9f:91:5e:f8:e5:88:e2:fa:0c:a1:fd:60:c6:8c:db: 02:10:8b:a6:e4:8a:2c:ae:b0:f9:a6:bc:b6:28:fd: 61:78:6f:e9:b4:23:66:b2:bc:29:62:b9:f4:2a:b9: d1:1a:85:0f:a5:8f:33:61:e7:05:3c:bf:c5:e7:57: 4e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:E9:30:18:F8:91:9E:A3:03:8D:91:BD:E9:5E:21:99:A6:15:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:fb:09:f2:37:d5:6f:35:6e:bb:18:7d:66:11:97:60:92:87: e4:d7:8a:03:68:43:52:f3:c1:69:26:f7:17:f4:b9:f2:92:84: ef:88:85:e5:96:b7:ba:73:85:30:9d:f0:91:36:a4:50:39:e6: c9:ad:d6:82:36:63:d5:35:5a:1c:9e:e5:d7:b1:74:c0:1b:d3: a1:0d:d0:f0:75:5d:c7:c6:91:ba:99:6d:58:63:04:13:a7:d6: 79:34:00:2c:28:f3:1b:2a:6f:58:85:d3:90:47:be:f9:0f:8f: 59:01:4f:e4:bb:0a:3e:11:33:5b:28:05:59:ad:20:64:39:6d: 5b:ea:4a:41:2c:9f:24:68:5d:65:ca:1f:73:f2:0a:b9:39:12: e9:54:a1:70:7e:62:58:4a:a5:7b:40:ed:92:ad:2d:59:de:e5: 71:41:ca:3c:22:30:c4:b5:df:cd:81:c0:d2:81:c9:cd:6a:24: 60:42:26:b7:02:39:96:3a:2f:c3:cb:c0:52:6b:05:20:c8:ee: 1b:ad:ce:f0:04:b6:64:b4:71:1b:f3:f3:1f:c0:9a:93:36:79: 2e:f6:81:8f:81:e2:27:f4:b7:c6:c3:29:fa:4d:5b:6e:c0:4b: e4:d5:b7:f2:b3:fc:d0:f5:86:99:e7:56:d8:34:e7:45:a9:36: 9d:1a:71:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Qs+2zubCSrltoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MWY0MGUyODgtZmQ4Yy00ZDA2LTkyZTMtZDM2ZGI0MDY2MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQf7CpSWOfxBd1436TSzL1yARtQHtGbOCSd8 RSl/cwdi+l16cXYNZEe2gJeYWxPSeX82RlzgRG21qgTSdmpClzBtypnNw04qQoBC fAHv9pOhrC+FOlZFjTIkRuXO9DpEIegWfK24Uxr8YztUS9d7PkrvmRKOi32ONHJu 0pnMb+NJ2j+YesNdvEtEWwIt/+bYFTlkz/OVJvDP+NXalCSan35TQRgUqHUPyirf aF65yH4zx7gToKPoPpJvSTWBrgyEGvqfkV745Yji+gyh/WDGjNsCEIum5IosrrD5 pry2KP1heG/ptCNmsrwpYrn0KrnRGoUPpY8zYecFPL/F51dOVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR56TAY+JGeowONkb3pXiGZphX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjRmYjEwMGYtM2M4NC0z NTYxLWJiZTYtMjliZTY3OWViN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr7CfI31W81brsYfWYRl2CSh+TXigNoQ1LzwWkm9xf0ufKShO+IheWW t7pzhTCd8JE2pFA55smt1oI2Y9U1Whye5dexdMAb06EN0PB1XcfGkbqZbVhjBBOn 1nk0ACwo8xsqb1iF05BHvvkPj1kBT+S7Cj4RM1soBVmtIGQ5bVvqSkEsnyRoXWXK H3PyCrk5EulUoXB+YlhKpXtA7ZKtLVne5XFByjwiMMS1382BwNKByc1qJGBCJrcC OZY6L8PLwFJrBSDI7hutzvAEtmS0cRvz8x/AmpM2eS72gY+B4if0t8bDKfpNW27A S+TVt/Kz/ND1hpnnVtg050WpNp0acV8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:46 2025 by rpki-client