$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b7cdb7e8-f7fd-3a36-bc7d-e0f96961c294.roa File: b7cdb7e8-f7fd-3a36-bc7d-e0f96961c294.roa (raw, json) Hash identifier: DPPgtHNDvLxumor6Uhn3+VBXVs0eZ81KujZ+eZ/33Uk= Subject key identifier: DB:D3:B7:86:64:B6:F9:8C:DD:63:3C:38:36:60:CA:17:F9:66:DE:66 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858487A388B2FFC61FFF32D8B4F00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b7cdb7e8-f7fd-3a36-bc7d-e0f96961c294.roa Signing time: Wed 08 Jan 2025 14:49:26 +0000 ROA not before: Wed 08 Jan 2025 14:49:26 +0000 ROA not after: Tue 08 Apr 2025 13:49:26 +0000 asID: 3356 IP address blocks: 104.253.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:38:8b:2f:fc:61:ff:f3:2d:8b:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 8 14:49:26 2025 GMT Not After : Apr 8 13:49:26 2025 GMT Subject: CN=08b58c60-61c9-440c-a8b8-1eb8db0d72c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:d6:98:3e:ef:7e:82:59:81:8f:26:bc:0f: 51:d9:eb:de:88:20:86:95:49:67:52:f6:a8:53:e1: 63:7e:b6:9a:04:79:26:7e:84:5d:af:b4:c9:7a:2b: db:e7:39:ea:1b:ff:7a:65:98:1d:3f:29:b1:ec:36: 27:ef:ff:7c:30:fa:fd:99:94:ea:c4:b7:49:a4:c2: 81:07:5f:ba:81:7c:7c:7e:0a:22:51:b6:0b:0b:54: 08:a6:bb:a6:06:4b:c5:be:11:8c:4e:9e:06:5a:3c: 56:4f:af:26:2a:6f:aa:b1:1d:97:26:32:43:6b:92: c4:7f:dc:87:20:e2:79:e3:54:b9:71:91:09:86:fb: 98:06:9d:c9:74:c2:8d:87:b9:84:b6:30:44:66:a2: c1:cc:2f:b9:ce:47:b2:c4:88:81:69:b5:93:ad:4a: 8e:7e:8e:46:bd:33:bb:e1:d4:bd:58:a2:3e:b6:ae: 4f:a4:24:5e:d4:ce:f5:0a:db:ed:19:88:c4:68:6d: d2:22:ea:90:25:7c:ad:3b:2d:7a:77:5f:46:b0:af: a4:82:56:33:af:cd:94:07:b6:3e:f2:48:7e:02:88: 28:2c:04:db:9d:af:7f:6b:29:4e:d3:3c:1f:de:2d: 16:fb:19:34:af:f6:ca:70:b6:d5:32:e0:98:37:fb: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D3:B7:86:64:B6:F9:8C:DD:63:3C:38:36:60:CA:17:F9:66:DE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b7cdb7e8-f7fd-3a36-bc7d-e0f96961c294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f1:29:c7:c6:37:2e:0d:54:f4:95:68:6b:9d:7b:66:28:f6: 6b:3d:d7:db:bd:de:11:b9:b4:36:7d:0a:ca:8b:99:18:95:99: a8:77:39:e5:2d:d2:d9:56:5a:9d:3c:ae:0b:6b:2d:b0:6e:3d: c8:32:03:14:44:36:22:78:31:9d:b5:a4:1f:98:6e:12:df:a9: ed:97:fa:5f:77:62:09:87:60:65:0c:be:1b:00:4c:44:69:71: bc:07:9e:f2:e6:b8:a6:cb:d9:6d:e3:6d:b9:cd:b0:29:2c:ca: d0:24:5c:40:8e:92:a5:4d:8f:fa:28:75:52:2b:e2:fa:c6:b6: 2d:fb:bc:6d:40:b4:eb:07:13:40:37:1d:8a:e6:ee:32:77:d4: 3c:49:e5:84:73:06:1b:fe:b6:68:ff:5c:71:8b:e9:b1:f4:91: 20:fa:5e:94:1d:ea:19:b2:69:c0:75:e7:cd:35:54:75:b0:b3: df:50:20:2d:f0:86:75:3d:d7:dd:fc:87:56:cc:87:63:36:1b: a5:c7:f9:c8:19:c6:22:21:0a:97:da:71:da:8a:41:18:95:06: 71:fa:0a:84:4d:8e:7b:03:ea:2c:2e:91:6a:f7:03:75:d7:06: 76:82:c3:a1:d0:12:18:d9:2b:6f:98:27:36:04:41:82:e1:f7: 5c:ea:ce:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6OIsv/GH/8y2LTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEwODE0NDkyNloXDTI1MDQwODEzNDkyNlowLzEtMCsGA1UEAxMk MDhiNThjNjAtNjFjOS00NDBjLWE4YjgtMWViOGRiMGQ3MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqjWmD7vfoJZgY8mvA9R2eveiCCGlUlnUvao U+FjfraaBHkmfoRdr7TJeivb5znqG/96ZZgdPymx7DYn7/98MPr9mZTqxLdJpMKB B1+6gXx8fgoiUbYLC1QIprumBkvFvhGMTp4GWjxWT68mKm+qsR2XJjJDa5LEf9yH IOJ541S5cZEJhvuYBp3JdMKNh7mEtjBEZqLBzC+5zkeyxIiBabWTrUqOfo5GvTO7 4dS9WKI+tq5PpCRe1M71CtvtGYjEaG3SIuqQJXytOy16d19GsK+kglYzr82UB7Y+ 8kh+AogoLATbna9/aylO0zwf3i0W+xk0r/bKcLbVMuCYN/sxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvTt4ZktvmM3WM8ODZgyhf5Zt5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjdjZGI3ZTgtZjdmZC0z YTM2LWJjN2QtZTBmOTY5NjFjMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDxKcfGNy4NVPSVaGude2Yo9ms919u93hG5tDZ9CsqLmRiVmah3OeUt 0tlWWp08rgtrLbBuPcgyAxRENiJ4MZ21pB+YbhLfqe2X+l93YgmHYGUMvhsATERp cbwHnvLmuKbL2W3jbbnNsCksytAkXECOkqVNj/oodVIr4vrGti37vG1AtOsHE0A3 HYrm7jJ31DxJ5YRzBhv+tmj/XHGL6bH0kSD6XpQd6hmyacB15801VHWws99QIC3w hnU91938h1bMh2M2G6XH+cgZxiIhCpfacdqKQRiVBnH6CoRNjnsD6iwukWr3A3XX BnaCw6HQEhjZK2+YJzYEQYLh91zqzqY= -----END CERTIFICATE-----Generated at Wed Feb 5 18:58:16 2025 by rpki-client