$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf10c200-24e1-3eb6-82e3-9269468d0723.roa File: cf10c200-24e1-3eb6-82e3-9269468d0723.roa (raw, json) Hash identifier: U3q4YtUvBNK/PmMTd3pYqblZtTu7MMuEq7BpU5CWytA= Subject key identifier: D7:C0:72:91:40:37:2B:7B:C4:FB:9D:B5:C5:A9:A7:23:16:69:8D:F7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164F469D483C08DC3568500 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf10c200-24e1-3eb6-82e3-9269468d0723.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 104.252.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:f4:69:d4:83:c0:8d:c3:56:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=8533fa38-5840-4b2d-860c-85ffc09df8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:b5:4a:74:71:2c:e0:9e:97:76:cd:7a:cb: 2b:fb:df:b5:77:5b:6f:ef:c2:0b:12:b4:4a:df:b2: ca:06:a5:03:ed:a8:8c:f6:a1:ac:2f:5c:07:88:1d: f2:39:d1:46:52:ea:9a:01:40:61:72:97:72:10:d7: 3b:60:50:77:29:21:da:88:37:6f:07:59:c0:91:e3: df:b0:4a:8b:55:10:f7:a3:ed:ef:37:f1:b4:84:a0: 63:f9:0d:c1:da:7a:ff:ab:2b:7b:b1:0e:54:c9:b6: a2:67:5d:a2:51:ff:ff:9a:1d:2e:96:03:39:2d:ce: a3:9a:76:b2:e1:90:53:d8:e3:38:b8:78:fe:0f:ee: 2b:af:79:d7:a8:29:67:b9:10:90:ac:99:93:8b:33: 20:f9:97:c9:33:37:81:ee:6e:fe:ba:9b:97:77:ba: 31:a4:97:db:90:c8:60:b5:25:e4:d4:93:b8:f1:9d: 5d:fc:4c:97:cc:79:e0:14:41:47:a4:f3:6e:fd:bf: 06:9e:e5:36:87:7c:f9:b2:ae:78:0e:f2:cb:67:c4: da:0a:3d:e1:87:d9:30:e0:c9:6f:34:74:29:e1:75: 68:96:85:d3:aa:8f:ec:db:48:7d:19:4b:f1:78:f5: 85:2e:c6:01:ee:16:83:54:31:35:08:71:8e:ed:d6: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C0:72:91:40:37:2B:7B:C4:FB:9D:B5:C5:A9:A7:23:16:69:8D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf10c200-24e1-3eb6-82e3-9269468d0723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:56:20:bc:e8:dd:25:21:24:32:27:3b:f9:7f:61:06:06:47: 13:47:23:a2:52:92:c3:0a:5e:7d:d2:9a:03:26:52:54:81:20: ab:fe:de:0b:0c:24:ba:80:9c:5d:4e:5d:b0:7d:0d:43:6f:d3: b2:97:cb:e1:3e:4b:da:96:70:c8:e3:5c:b9:49:bc:3f:78:e0: 41:2a:bd:59:78:22:f3:0d:2c:24:1a:1d:ec:e0:e2:f8:93:88: 12:f2:6d:e4:9f:e6:67:7f:1c:ff:5a:49:47:71:7f:95:10:88: a8:2f:01:2d:e5:3f:02:8d:1f:e5:97:d1:d2:a1:22:e5:54:d9: ee:dd:a5:e2:09:a8:02:7f:25:ef:8e:1b:e6:a2:20:31:1d:45: 6c:a4:06:d0:8d:14:5a:df:98:c0:0f:41:2a:66:81:69:6e:18: a9:f4:14:aa:f7:d0:62:75:91:b0:b4:01:f8:bc:51:a1:7d:83: 38:b6:be:9c:36:54:9d:3b:9c:39:c0:36:9f:df:07:b7:ab:03: d7:18:fd:9e:02:dd:6e:07:bc:55:59:53:ac:db:38:b5:93:0a: 51:77:62:98:c5:47:ae:29:c7:a7:03:69:08:ea:20:a7:d4:43: 6a:73:d5:46:84:5c:55:37:cf:02:8a:9c:b3:b5:ae:25:09:ed: f2:81:66:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPRp1IPAjcNWhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ODUzM2ZhMzgtNTg0MC00YjJkLTg2MGMtODVmZmMwOWRmOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAude1SnRxLOCel3bNessr+9+1d1tv78ILErRK 37LKBqUD7aiM9qGsL1wHiB3yOdFGUuqaAUBhcpdyENc7YFB3KSHaiDdvB1nAkePf sEqLVRD3o+3vN/G0hKBj+Q3B2nr/qyt7sQ5UybaiZ12iUf//mh0ulgM5Lc6jmnay 4ZBT2OM4uHj+D+4rr3nXqClnuRCQrJmTizMg+ZfJMzeB7m7+upuXd7oxpJfbkMhg tSXk1JO48Z1d/EyXzHngFEFHpPNu/b8GnuU2h3z5sq54DvLLZ8TaCj3hh9kw4Mlv NHQp4XVoloXTqo/s20h9GUvxePWFLsYB7haDVDE1CHGO7daWzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfAcpFANyt7xPudtcWppyMWaY33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2YxMGMyMDAtMjRlMS0z ZWI2LTgyZTMtOTI2OTQ2OGQwNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPxKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFWILzo3SUhJDInO/l/YQYGRxNHI6JSksMKXn3SmgMmUlSBIKv+3gsM JLqAnF1OXbB9DUNv07KXy+E+S9qWcMjjXLlJvD944EEqvVl4IvMNLCQaHezg4viT iBLybeSf5md/HP9aSUdxf5UQiKgvAS3lPwKNH+WX0dKhIuVU2e7dpeIJqAJ/Je+O G+aiIDEdRWykBtCNFFrfmMAPQSpmgWluGKn0FKr30GJ1kbC0Afi8UaF9gzi2vpw2 VJ07nDnANp/fB7erA9cY/Z4C3W4HvFVZU6zbOLWTClF3YpjFR64px6cDaQjqIKfU Q2pz1UaEXFU3zwKKnLO1riUJ7fKBZvQ= -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:25 2025 by rpki-client