$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2c78c2a-3aa7-3339-9e73-becefbc92b27.roa File: f2c78c2a-3aa7-3339-9e73-becefbc92b27.roa (raw, json) Hash identifier: Dlm9tJG6FZiYl1GPHLtjBbkcbf7OIQU0UCzIBRDIYc0= Subject key identifier: CD:B4:D0:F2:95:79:1D:38:39:AE:2C:19:66:22:F4:AF:38:62:29:0D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849D164F9880D56E0CE2FD178A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2c78c2a-3aa7-3339-9e73-becefbc92b27.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 18779 IP address blocks: 104.253.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:f9:88:0d:56:e0:ce:2f:d1:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=f7363032-c093-46a1-bb2a-801b6508a859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:28:88:98:10:d4:9b:03:16:4a:0b:06:c9:d7: f5:4c:59:dd:35:9f:72:92:5d:8c:6a:d5:a3:82:ec: ff:8a:34:04:ae:df:64:d5:00:4d:13:99:1f:e7:c6: 08:0b:76:1f:f5:a7:1c:8d:2e:0e:04:54:a0:f4:72: 2f:27:88:7a:c8:8f:c6:b9:85:15:28:8b:d1:1d:72: 95:a9:f0:3f:82:a2:6e:55:8c:54:3c:8c:7d:41:34: 59:47:b5:b3:13:eb:8e:7d:98:2f:7d:86:4d:1c:4c: 36:8b:69:7e:c1:88:65:4f:61:93:79:e4:51:c9:20: d3:b8:78:21:dc:4a:77:85:ce:78:ba:19:4c:45:84: 40:3e:6e:ab:fe:89:23:35:cc:af:79:8c:e4:06:f7: c0:b1:9f:99:9a:f0:54:30:d6:19:7a:ab:58:4b:71: 6c:35:bb:f7:68:27:f0:28:a0:2e:71:33:06:c2:a0: 67:7a:f5:81:44:d2:68:7b:2f:1c:1a:d4:e7:74:6a: 79:0f:ca:14:98:ce:80:24:6b:55:4f:f2:2e:22:cd: f6:ef:b4:93:7a:49:5d:21:16:3c:e9:38:33:10:ec: 40:9b:bd:1c:a2:68:b8:e2:e5:7f:48:dd:c4:48:86: 6d:37:ef:67:24:02:2a:6f:e6:0e:2a:bf:7a:d8:c1: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:D0:F2:95:79:1D:38:39:AE:2C:19:66:22:F4:AF:38:62:29:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2c78c2a-3aa7-3339-9e73-becefbc92b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d3:80:0e:6e:27:5f:72:74:2f:da:6d:2b:0c:f7:3c:a2:9d: 07:fb:1b:df:59:1e:ff:20:8e:e1:84:bc:36:90:40:b6:e5:c9: e1:3f:61:98:8e:55:41:4d:35:95:4c:26:84:4f:d6:44:e9:03: b1:25:2c:98:68:11:7d:32:0c:ee:4c:33:c0:50:d6:15:e2:de: c6:de:e9:70:83:70:dd:11:ca:8d:58:43:72:c4:b1:c7:89:74: 35:c2:85:51:bb:36:7c:99:4f:9c:71:1b:67:ba:c3:2f:45:89: 3a:f4:8b:2d:70:ee:90:8a:29:11:4f:78:f9:9b:2a:3f:15:d9: 12:38:fa:ee:fd:c2:05:a0:51:ef:ca:77:49:5f:86:a0:ee:3b: d5:c2:0f:70:a1:35:fc:02:65:85:19:d0:67:cc:cc:58:42:a5: d9:4a:72:71:93:6e:f0:ea:d4:2f:72:cc:26:08:d7:b5:9d:4d: 98:c8:8b:f8:53:b0:e6:1e:98:cd:8e:23:eb:da:77:ea:21:37: 41:89:84:ae:0f:e3:e6:91:1a:07:2e:d1:e4:42:97:5a:30:55: 98:95:38:0f:fd:54:1d:f0:1d:98:75:07:5e:1e:9a:51:98:7e: 59:05:b2:ab:f7:1e:7d:69:a3:72:43:be:96:f0:a0:07:b6:e5: e6:49:9a:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPmIDVbgzi/ReKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjczNjMwMzItYzA5My00NmExLWJiMmEtODAxYjY1MDhhODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiiImBDUmwMWSgsGydf1TFndNZ9ykl2MatWj guz/ijQErt9k1QBNE5kf58YIC3Yf9accjS4OBFSg9HIvJ4h6yI/GuYUVKIvRHXKV qfA/gqJuVYxUPIx9QTRZR7WzE+uOfZgvfYZNHEw2i2l+wYhlT2GTeeRRySDTuHgh 3Ep3hc54uhlMRYRAPm6r/okjNcyveYzkBvfAsZ+ZmvBUMNYZeqtYS3FsNbv3aCfw KKAucTMGwqBnevWBRNJoey8cGtTndGp5D8oUmM6AJGtVT/IuIs3277STekldIRY8 6TgzEOxAm70comi44uV/SN3ESIZtN+9nJAIqb+YOKr962MGN7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM200PKVeR04Oa4sGWYi9K84YikNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjJjNzhjMmEtM2FhNy0z MzM5LTllNzMtYmVjZWZiYzkyYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP26MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDTgA5uJ19ydC/abSsM9zyinQf7G99ZHv8gjuGEvDaQQLblyeE/YZiO VUFNNZVMJoRP1kTpA7ElLJhoEX0yDO5MM8BQ1hXi3sbe6XCDcN0Ryo1YQ3LEsceJ dDXChVG7NnyZT5xxG2e6wy9FiTr0iy1w7pCKKRFPePmbKj8V2RI4+u79wgWgUe/K d0lfhqDuO9XCD3ChNfwCZYUZ0GfMzFhCpdlKcnGTbvDq1C9yzCYI17WdTZjIi/hT sOYemM2OI+vad+ohN0GJhK4P4+aRGgcu0eRCl1owVZiVOA/9VB3wHZh1B14emlGY flkFsqv3Hn1po3JDvpbwoAe25eZJmqY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:02 2025 by rpki-client