$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cbd91a1e-82e2-3e3e-8c23-da7f09eacebd.roa File: cbd91a1e-82e2-3e3e-8c23-da7f09eacebd.roa (raw, json) Hash identifier: jVgc73HYyr7P3bo5NUYh93zlFUoZoNzfzl82vI5otGE= Subject key identifier: B3:9F:68:95:B9:60:92:B1:08:90:B8:4C:35:93:CC:71:39:7A:6B:84 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848699E094A99FC6ABE1BEF9600 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cbd91a1e-82e2-3e3e-8c23-da7f09eacebd.roa Signing time: Thu 02 Jan 2025 16:05:11 +0000 ROA not before: Thu 02 Jan 2025 16:05:11 +0000 ROA not after: Wed 02 Apr 2025 15:05:11 +0000 asID: 25160 IP address blocks: 104.252.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:9e:09:4a:99:fc:6a:be:1b:ef:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 2 16:05:11 2025 GMT Not After : Apr 2 15:05:11 2025 GMT Subject: CN=150d2c23-bb21-46b3-a687-2997f7d027af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:62:56:3f:73:bb:f1:40:e0:2b:f7:df:b4: ab:9c:59:72:6f:64:2b:95:8a:7c:a1:b1:1d:d7:95: 55:15:6a:9b:a6:19:ce:56:1d:64:35:63:ae:29:78: a0:8f:bd:0a:88:75:60:24:f4:f6:3b:65:15:24:fb: 4d:4b:5e:a7:b8:10:ad:5b:2c:d1:e1:40:ef:99:4f: 44:13:ac:aa:a9:a4:0e:91:bc:ba:c4:5c:db:77:48: b3:b8:7b:ca:d2:ef:4d:7b:0e:5c:ce:88:55:dd:98: ce:6c:1a:3d:c4:27:32:c1:c2:ac:f4:18:5f:01:e4: 6b:cb:ac:4f:94:68:f5:13:ee:f8:c4:10:ab:5d:f3: 67:f0:65:c1:0f:56:bf:07:ae:22:87:5f:71:b1:7a: 69:14:31:7c:32:89:72:b0:7e:1d:bc:fa:f7:5c:cd: 95:9a:97:33:87:39:d6:11:14:ce:a3:b8:6d:aa:93: 40:13:4c:8c:e5:6d:b2:af:38:25:b5:1f:08:e4:4e: 81:b3:4f:b2:50:d5:b8:93:ee:5f:b6:0e:dc:37:34: 00:f3:d1:04:64:3f:31:c1:49:88:e5:ad:6c:b4:eb: a9:06:50:13:ed:2b:02:93:af:32:f4:c4:12:c2:95: 53:c6:76:05:bd:81:d7:a0:ae:f5:5a:d5:ab:a4:cf: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9F:68:95:B9:60:92:B1:08:90:B8:4C:35:93:CC:71:39:7A:6B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cbd91a1e-82e2-3e3e-8c23-da7f09eacebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:3d:7d:2b:18:5e:24:9d:cb:3b:85:76:86:b7:81:20:4e: fa:8b:f5:6a:8b:36:69:af:76:50:a6:ae:72:20:ab:57:20:2e: 11:63:26:1a:1c:b2:1a:25:26:0e:5a:0b:dc:ef:6e:0e:75:5c: 7b:e2:8e:3b:78:aa:22:d0:05:8a:4d:dc:67:3d:31:da:68:04: 49:b3:1d:06:3d:0f:ca:ae:5f:1d:ed:8c:f0:70:fe:f1:77:89: 2d:86:08:95:6a:18:89:0a:6f:35:6c:69:8e:4e:8c:dc:64:3d: 4c:4e:c1:b2:80:d3:0b:8b:51:f9:a2:8d:c8:e5:36:c3:c0:7e: 2e:39:8a:7e:7c:31:04:a2:fa:c1:8f:21:7c:7e:04:71:c7:d9: 89:be:45:ff:25:07:51:ba:e9:1d:61:d9:ec:e0:34:98:ee:ef: c3:a2:37:29:7d:f8:90:38:ac:d2:99:09:5e:62:8a:78:38:7a: 36:17:f2:c6:2a:9a:85:d5:c8:96:c3:65:2d:37:22:62:05:61: cd:16:22:c0:8d:0d:9a:81:8c:dd:83:57:83:28:f3:00:6d:e8: c0:ef:33:38:59:f3:5c:d8:6b:38:98:7e:41:56:7b:5f:68:d8: 5b:84:01:5e:84:38:8b:39:d0:9b:10:b0:53:15:4c:bb:e9:9a: 25:d7:26:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpnglKmfxqvhvvlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEwMjE2MDUxMVoXDTI1MDQwMjE1MDUxMVowLzEtMCsGA1UEAxMk MTUwZDJjMjMtYmIyMS00NmIzLWE2ODctMjk5N2Y3ZDAyN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXNiVj9zu/FA4Cv337SrnFlyb2QrlYp8obEd 15VVFWqbphnOVh1kNWOuKXigj70KiHVgJPT2O2UVJPtNS16nuBCtWyzR4UDvmU9E E6yqqaQOkby6xFzbd0izuHvK0u9New5czohV3ZjObBo9xCcywcKs9BhfAeRry6xP lGj1E+74xBCrXfNn8GXBD1a/B64ih19xsXppFDF8MolysH4dvPr3XM2VmpczhznW ERTOo7htqpNAE0yM5W2yrzgltR8I5E6Bs0+yUNW4k+5ftg7cNzQA89EEZD8xwUmI 5a1stOupBlAT7SsCk68y9MQSwpVTxnYFvYHXoK71WtWrpM8y+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOfaJW5YJKxCJC4TDWTzHE5emuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2JkOTFhMWUtODJlMi0z ZTNlLThjMjMtZGE3ZjA5ZWFjZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXMPX0rGF4kncs7hXaGt4EgTvqL9WqLNmmvdlCmrnIgq1cgLhFjJhoc sholJg5aC9zvbg51XHvijjt4qiLQBYpN3Gc9MdpoBEmzHQY9D8quXx3tjPBw/vF3 iS2GCJVqGIkKbzVsaY5OjNxkPUxOwbKA0wuLUfmijcjlNsPAfi45in58MQSi+sGP IXx+BHHH2Ym+Rf8lB1G66R1h2ezgNJju78OiNyl9+JA4rNKZCV5iing4ejYX8sYq moXVyJbDZS03ImIFYc0WIsCNDZqBjN2DV4Mo8wBt6MDvMzhZ81zYaziYfkFWe19o 2FuEAV6EOIs50JsQsFMVTLvpmiXXJog= -----END CERTIFICATE-----Generated at Wed Feb 19 20:40:47 2025 by rpki-client