$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa File: ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa (raw, json) Hash identifier: s0VU/JIsAJiCYVMxO8upr05mzhP5ASm36bVh5f2dFFY= Subject key identifier: 3E:11:40:C5:8B:67:AA:BF:F1:5A:15:D5:69:C0:21:FE:67:81:57:9B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848EF45DB1EF6F88F499A334400 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa Signing time: Wed 19 Feb 2025 13:05:50 +0000 ROA not before: Wed 19 Feb 2025 13:05:50 +0000 ROA not after: Tue 20 May 2025 12:05:50 +0000 asID: 212238 IP address blocks: 104.253.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:45:db:1e:f6:f8:8f:49:9a:33:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 19 13:05:50 2025 GMT Not After : May 20 12:05:50 2025 GMT Subject: CN=eed7733e-19e0-4dc4-bd09-bd1e9283b7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:9b:3e:47:3d:f7:17:7b:ff:b0:e5:97:36: 16:6d:31:55:65:bb:af:bb:e4:76:b0:36:01:91:3d: 4b:b6:92:b6:a0:7c:07:75:0e:92:3d:7f:32:73:91: ea:ea:21:4d:fe:88:03:e4:99:6f:d4:bb:59:ec:6e: 16:bb:c2:c9:2a:81:b8:28:6c:3f:fb:a5:0a:3f:d3: 93:04:85:99:2e:9e:5d:8a:e3:12:b8:1b:50:93:7e: 9d:dc:9c:88:87:3d:fc:29:d8:b4:dc:ec:9f:bb:65: 7f:be:41:c8:0a:22:d2:8e:ae:2a:c7:50:f0:ed:ad: 8b:ee:90:c3:97:a1:8b:9e:40:db:be:5e:d3:73:55: 97:29:15:b3:59:9f:71:c4:0d:66:25:3f:7d:88:24: 97:c0:48:22:31:c2:08:81:38:8f:a6:e0:d4:60:e2: a3:0b:4c:33:9c:a3:08:ba:84:8f:68:0e:c7:1e:ae: 88:b8:b0:66:41:e8:d6:c4:a8:c9:dc:66:21:51:22: d0:50:c0:f0:c7:9b:66:8f:23:00:c3:17:e2:50:e4: 53:29:8e:ee:55:af:4a:4e:eb:0e:4d:95:38:f4:0e: e0:ba:c7:9e:4c:01:93:15:a4:a0:24:c2:38:f1:a7: a4:93:0b:81:49:f3:06:e6:23:2a:fb:66:ae:f1:d9: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:11:40:C5:8B:67:AA:BF:F1:5A:15:D5:69:C0:21:FE:67:81:57:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7d:ef:37:7f:6c:d9:7d:8c:76:87:15:da:3a:e5:8d:80:0b: dc:cc:bf:1b:53:2c:cd:1f:d8:15:7c:b4:a8:b3:07:5e:8a:47: 56:a6:46:09:20:76:e8:e1:e8:44:ae:48:4d:a4:19:31:a0:d1: 0a:c0:42:54:8d:40:d2:9c:bf:84:0f:5a:fc:0b:30:b5:35:13: 00:77:44:0c:b1:f0:32:bc:fc:ce:3d:28:cf:51:98:31:64:b3: 75:c4:92:c0:2c:40:e5:87:85:59:3c:28:55:1f:76:b1:07:58: 50:2e:78:45:65:e3:ad:59:51:85:c4:ff:e6:f6:bb:07:a6:3a: d2:b6:a2:21:86:47:fe:d8:07:91:50:1a:ad:30:8b:3c:c0:45: e3:2f:ab:b6:10:54:9f:32:ed:a5:e0:fe:3e:c4:91:b4:e8:6a: fe:38:e5:4e:4d:b0:87:bc:fa:96:17:33:14:e4:50:58:03:1b: 7c:06:e5:27:79:9c:90:31:3e:78:99:39:1a:0a:b3:16:e3:49: b4:9d:40:77:d0:23:f0:0c:eb:62:5b:a5:65:c7:f0:34:07:63: 0f:29:c7:63:ed:2c:a0:4e:84:7f:de:6e:0f:f5:84:76:4a:69: b6:da:30:f1:64:2d:be:2b:82:49:c1:8c:5e:4b:25:6a:91:8d: 49:db:22:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvRdse9viPSZozRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIxOTEzMDU1MFoXDTI1MDUyMDEyMDU1MFowLzEtMCsGA1UEAxMk ZWVkNzczM2UtMTllMC00ZGM0LWJkMDktYmQxZTkyODNiN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59mbPkc99xd7/7DllzYWbTFVZbuvu+R2sDYB kT1LtpK2oHwHdQ6SPX8yc5Hq6iFN/ogD5Jlv1LtZ7G4Wu8LJKoG4KGw/+6UKP9OT BIWZLp5diuMSuBtQk36d3JyIhz38Kdi03Oyfu2V/vkHICiLSjq4qx1Dw7a2L7pDD l6GLnkDbvl7Tc1WXKRWzWZ9xxA1mJT99iCSXwEgiMcIIgTiPpuDUYOKjC0wznKMI uoSPaA7HHq6IuLBmQejWxKjJ3GYhUSLQUMDwx5tmjyMAwxfiUORTKY7uVa9KTusO TZU49A7guseeTAGTFaSgJMI48aekkwuBSfMG5iMq+2au8dkeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4RQMWLZ6q/8VoV1WnAIf5ngVebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWE3MmNmNWEtMWE4My0z M2EyLTkwYmYtM2JkMWI5Mjc4NGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx97zd/bNl9jHaHFdo65Y2AC9zMvxtTLM0f2BV8tKizB16KR1amRgkg dujh6ESuSE2kGTGg0QrAQlSNQNKcv4QPWvwLMLU1EwB3RAyx8DK8/M49KM9RmDFk s3XEksAsQOWHhVk8KFUfdrEHWFAueEVl461ZUYXE/+b2uwemOtK2oiGGR/7YB5FQ Gq0wizzAReMvq7YQVJ8y7aXg/j7EkbToav445U5NsIe8+pYXMxTkUFgDG3wG5Sd5 nJAxPniZORoKsxbjSbSdQHfQI/AM62JbpWXH8DQHYw8px2PtLKBOhH/ebg/1hHZK abbaMPFkLb4rgknBjF5LJWqRjUnbIk4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:04:52 2025 by rpki-client