$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d08715b3-6835-3c30-ad43-74686a075e4c.roa File: d08715b3-6835-3c30-ad43-74686a075e4c.roa (raw, json) Hash identifier: qEhDtKCfvL56jRoRj3lDrEs74VNpddloedQ7/MuM1Fg= Subject key identifier: 73:B6:9A:6E:52:97:88:01:6B:53:E0:36:DE:FD:56:FB:86:17:E7:DD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848A565FAE87BE9B24DC0CF1D80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d08715b3-6835-3c30-ad43-74686a075e4c.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 3561 IP address blocks: 104.164.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:fa:e8:7b:e9:b2:4d:c0:cf:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=9ff9bc4e-a45f-44d1-91de-879566c2a09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:aa:67:34:82:7f:af:3e:fb:bf:4e:67:cb: 17:2f:a3:5e:60:4f:7e:5e:6f:af:74:43:b4:97:93: 3b:af:6d:37:e8:67:61:a1:e2:38:e8:19:95:e4:d8: ac:84:c3:b9:3d:b1:67:ca:de:b9:31:2e:22:15:17: 63:d0:08:e5:8c:55:33:b2:a6:74:aa:74:4a:62:36: 21:38:20:69:89:aa:39:e9:26:e7:64:4f:71:e5:d5: 4d:40:9e:93:dd:95:ba:06:30:91:14:d6:13:be:69: 5e:c4:71:fd:64:42:81:93:7c:75:1f:22:67:c5:6a: 92:66:e8:af:1a:db:36:86:55:7f:39:c0:d2:44:e5: d2:6e:a6:d4:e1:93:d7:13:c9:7c:15:a2:51:9f:f3: 4b:96:c3:30:e0:68:ba:14:5c:28:f3:b5:9a:82:a0: 0a:77:96:fb:35:48:8a:46:d2:fc:6b:de:05:58:12: 1e:0f:90:13:77:b7:47:ee:d4:80:b9:a7:9e:dd:33: 90:24:f0:30:63:68:7e:08:55:12:3a:ea:78:13:c7: 3f:48:b1:9c:04:82:b5:17:a4:16:0c:67:fc:2b:be: 39:13:40:65:5f:4e:3c:63:19:32:a4:a6:31:b1:d9: 85:a3:8a:26:55:aa:a4:ec:8b:8f:d2:81:5c:02:8a: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B6:9A:6E:52:97:88:01:6B:53:E0:36:DE:FD:56:FB:86:17:E7:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d08715b3-6835-3c30-ad43-74686a075e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e1:33:a2:cd:a0:ff:39:0c:ae:ff:a8:29:06:2a:e0:60:ec: 36:cc:24:ba:ac:b9:76:60:a2:47:65:5a:2b:3e:00:bd:8b:38: de:0b:8d:b0:93:ab:c6:38:a4:8c:d7:62:87:13:45:fb:ec:a6: 1c:dc:ca:a6:be:e7:0a:69:4f:d2:04:5f:31:01:ad:fe:ee:89: 32:91:9c:ea:90:7a:01:db:6f:34:c8:da:76:c7:52:a0:98:0f: c0:9f:7a:ee:03:d1:c1:e8:ad:b5:0e:df:fc:55:01:a7:4f:74: 92:68:fd:af:3d:97:5b:6c:8d:de:bd:6d:e3:f5:9d:5f:8a:11: 88:7b:67:24:a3:1f:c7:53:d0:ef:34:0c:18:dc:fa:80:d3:9c: 01:c5:a4:3c:93:b6:c6:fa:56:01:50:50:97:53:e3:b7:8e:ee: 26:7f:ab:81:1d:58:88:cb:e9:5f:ac:d7:14:1c:4d:23:78:cb: ff:c1:e0:20:f6:3a:48:14:95:42:dd:6e:24:96:60:d3:69:f7: 8f:6f:d9:a8:df:e7:25:b4:9a:0d:c9:f6:72:cd:0c:12:0a:cd: 0c:9b:de:30:86:2d:5a:33:a6:74:e6:47:42:e0:ba:fb:b9:24: 92:1d:7f:4b:f1:f5:b7:61:60:55:d7:df:5a:a3:79:53:81:91: d0:8d:7b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfroe+myTcDPHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk OWZmOWJjNGUtYTQ1Zi00NGQxLTkxZGUtODc5NTY2YzJhMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqSqZzSCf68++79OZ8sXL6NeYE9+Xm+vdEO0 l5M7r2036GdhoeI46BmV5NishMO5PbFnyt65MS4iFRdj0AjljFUzsqZ0qnRKYjYh OCBpiao56SbnZE9x5dVNQJ6T3ZW6BjCRFNYTvmlexHH9ZEKBk3x1HyJnxWqSZuiv Gts2hlV/OcDSROXSbqbU4ZPXE8l8FaJRn/NLlsMw4Gi6FFwo87WagqAKd5b7NUiK RtL8a94FWBIeD5ATd7dH7tSAuaee3TOQJPAwY2h+CFUSOup4E8c/SLGcBIK1F6QW DGf8K745E0BlX048YxkypKYxsdmFo4omVaqk7IuP0oFcAoq1gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO2mm5Sl4gBa1PgNt79VvuGF+fdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDA4NzE1YjMtNjgzNS0z YzMwLWFkNDMtNzQ2ODZhMDc1ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArhM6LNoP85DK7/qCkGKuBg7DbMJLqsuXZgokdlWis+AL2LON4LjbCT q8Y4pIzXYocTRfvsphzcyqa+5wppT9IEXzEBrf7uiTKRnOqQegHbbzTI2nbHUqCY D8Cfeu4D0cHorbUO3/xVAadPdJJo/a89l1tsjd69beP1nV+KEYh7ZySjH8dT0O80 DBjc+oDTnAHFpDyTtsb6VgFQUJdT47eO7iZ/q4EdWIjL6V+s1xQcTSN4y//B4CD2 OkgUlULdbiSWYNNp949v2ajf5yW0mg3J9nLNDBIKzQyb3jCGLVozpnTmR0Lguvu5 JJIdf0vx9bdhYFXX31qjeVOBkdCNe+s= -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:48 2025 by rpki-client