$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca6c503b-6fa9-33f4-abaf-3c02f5f9674e.roa File: ca6c503b-6fa9-33f4-abaf-3c02f5f9674e.roa (raw, json) Hash identifier: SypZxqjA1hibNYuHc9+aE0rHGZUPb35daW65I/BX/Ic= Subject key identifier: 9F:CE:C8:F2:1A:CC:41:D7:19:9D:4F:28:A4:F3:58:41:DC:7B:66:26 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848AC60C45BF1F3504D96875700 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca6c503b-6fa9-33f4-abaf-3c02f5f9674e.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 400536 IP address blocks: 104.164.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:c4:5b:f1:f3:50:4d:96:87:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=19331cf5-984a-484d-af4f-679b8acbb9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:cc:f9:41:4c:49:2f:83:ec:06:54:6a:55: c3:23:92:06:46:e6:83:58:fb:b7:9b:5b:d7:bb:e7: 1b:db:e8:bc:11:9f:b8:35:a5:b6:6a:9a:2f:fd:8e: b8:fd:1e:59:9c:7a:62:dd:85:90:aa:6c:07:6e:ff: a5:e3:1a:98:fa:4b:f9:4d:b2:a3:ab:2b:76:23:ef: 54:8c:15:4c:b2:87:80:b7:5e:8a:84:cb:25:93:31: dc:c3:d1:a1:9f:66:c8:89:7d:1c:e2:a0:3c:9e:8a: ae:42:80:8a:be:8e:f0:96:37:9d:73:d9:31:8e:31: 07:d7:64:c6:bf:1c:10:57:0c:2d:6f:2a:80:09:dd: 77:0a:be:f8:7b:fa:86:52:cb:0c:ba:5a:60:dd:0c: 18:93:53:79:49:09:df:d5:52:68:53:06:82:80:75: af:61:1b:fb:70:93:0d:17:44:59:34:c5:e2:78:e6: 3c:af:ff:48:d9:d2:98:5d:8b:18:5d:d6:f9:bf:88: b2:11:53:02:90:cd:d6:02:44:8c:79:a9:17:fd:f2: 86:6b:80:d9:53:b7:21:cf:6c:b7:96:5b:2e:cd:d5: ed:d0:0d:70:6f:54:80:d8:50:d4:89:ff:d1:aa:af: 9a:fd:a0:24:8c:38:54:8f:23:2c:6c:26:da:1d:3a: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CE:C8:F2:1A:CC:41:D7:19:9D:4F:28:A4:F3:58:41:DC:7B:66:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca6c503b-6fa9-33f4-abaf-3c02f5f9674e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:60:4c:6f:f9:71:3e:8d:d0:bc:a5:3f:02:89:2f:b6:6a:7f: 50:65:81:c3:4f:bc:6b:4e:5a:27:75:09:af:9f:11:e1:c4:13: 3c:5c:13:aa:2a:09:07:b1:c8:e3:c8:72:bf:cf:d7:ea:ea:03: 4d:64:5f:d4:83:38:7d:39:f7:a3:16:af:a8:59:3f:e0:1f:42: b6:60:aa:7f:ba:7a:71:83:b5:2a:b7:73:d8:0b:75:07:8d:41: 11:91:96:42:8b:8e:0f:da:7e:22:b3:e4:59:e5:9f:c3:7c:05: fa:f8:84:6b:e6:0c:45:37:01:3c:82:2d:e8:b2:94:7e:5d:1d: 85:e6:a4:90:25:bb:57:5b:87:7a:91:ff:a4:65:29:a7:0a:38: 54:7b:37:7b:7e:de:5f:53:e4:f7:fd:e5:81:1a:d2:3d:79:cc: d2:73:fe:05:a4:e0:ef:48:9c:0b:e7:7d:e2:01:4f:db:50:88: 50:25:5a:e9:2b:5a:fe:66:a7:2a:df:f3:b8:48:0b:f8:d3:a1: db:f9:5f:cb:23:83:c0:05:14:44:ca:3f:31:5b:14:1c:f5:ed: 11:d3:80:f1:4d:e1:a2:90:af:18:7a:12:56:93:fa:15:a9:ae: 83:bc:35:6a:b8:d3:f1:06:5f:ea:74:83:00:8f:48:86:8a:2c: a9:bc:a8:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYMRb8fNQTZaHVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk MTkzMzFjZjUtOTg0YS00ODRkLWFmNGYtNjc5YjhhY2JiOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1DM+UFMSS+D7AZUalXDI5IGRuaDWPu3m1vX u+cb2+i8EZ+4NaW2apov/Y64/R5ZnHpi3YWQqmwHbv+l4xqY+kv5TbKjqyt2I+9U jBVMsoeAt16KhMslkzHcw9Ghn2bIiX0c4qA8noquQoCKvo7wljedc9kxjjEH12TG vxwQVwwtbyqACd13Cr74e/qGUssMulpg3QwYk1N5SQnf1VJoUwaCgHWvYRv7cJMN F0RZNMXieOY8r/9I2dKYXYsYXdb5v4iyEVMCkM3WAkSMeakX/fKGa4DZU7chz2y3 llsuzdXt0A1wb1SA2FDUif/Rqq+a/aAkjDhUjyMsbCbaHTo/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/OyPIazEHXGZ1PKKTzWEHce2YmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2E2YzUwM2ItNmZhOS0z M2Y0LWFiYWYtM2MwMmY1Zjk2NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKTxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlgTG/5cT6N0LylPwKJL7Zqf1BlgcNPvGtOWid1Ca+fEeHEEzxcE6oq CQexyOPIcr/P1+rqA01kX9SDOH0596MWr6hZP+AfQrZgqn+6enGDtSq3c9gLdQeN QRGRlkKLjg/afiKz5Fnln8N8Bfr4hGvmDEU3ATyCLeiylH5dHYXmpJAlu1dbh3qR /6RlKacKOFR7N3t+3l9T5Pf95YEa0j15zNJz/gWk4O9InAvnfeIBT9tQiFAlWukr Wv5mpyrf87hIC/jTodv5X8sjg8AFFETKPzFbFBz17RHTgPFN4aKQrxh6ElaT+hWp roO8NWq40/EGX+p0gwCPSIaKLKm8qM8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:41:59 2025 by rpki-client