$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0eb3ee23-7bc1-3d4c-9fd8-71e42f3e8700.roa File: 0eb3ee23-7bc1-3d4c-9fd8-71e42f3e8700.roa (raw, json) Hash identifier: DokCjsSBd99IJo6mNnQByuCLDOH1sghAGIhK6+QvTA0= Subject key identifier: 09:D2:25:1D:E7:A2:2C:16:E9:18:39:56:93:7D:FD:65:CB:56:9C:5E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849CF680912AA8A8843862AC200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0eb3ee23-7bc1-3d4c-9fd8-71e42f3e8700.roa Signing time: Sat 10 May 2025 19:55:46 +0000 ROA not before: Sat 10 May 2025 19:55:46 +0000 ROA not after: Fri 08 Aug 2025 19:55:46 +0000 asID: 18779 IP address blocks: 104.164.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:68:09:12:aa:8a:88:43:86:2a:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 10 19:55:46 2025 GMT Not After : Aug 8 19:55:46 2025 GMT Subject: CN=8fa952d4-0e25-4c52-a671-ac8184a946c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:bd:4c:66:91:29:56:5b:9b:60:6b:a9:b8: 98:67:07:10:78:3c:49:ed:20:0d:f7:fc:36:70:41: d5:ad:19:fa:a6:0c:cf:b8:21:39:15:be:67:45:ae: db:2f:b3:3d:08:6c:08:4b:f3:5a:67:06:15:8a:be: 42:32:5f:dd:6c:52:28:82:2b:48:03:aa:2c:dc:67: 1f:25:99:9c:1e:68:67:18:fd:8f:73:2d:9a:92:70: 95:f2:47:02:11:52:bb:81:06:75:21:23:f4:d3:b5: 32:47:7e:bb:53:ff:a4:14:9b:14:ab:e2:ac:ce:5d: f6:11:08:71:00:34:11:af:14:06:3f:76:0d:f8:ec: 6f:98:93:87:96:9e:2c:83:10:bd:42:f6:20:61:7e: a4:a5:7a:d5:90:13:c6:a2:be:fe:ae:6a:65:3f:de: 0b:c9:87:b4:a2:f2:bf:63:fe:be:69:b9:dc:2c:85: a5:10:2d:5c:df:6e:4a:69:df:ce:2d:28:56:e5:53: b0:9e:a7:f3:f5:cf:0e:98:1b:9a:44:37:ea:73:00: 0e:2b:5a:57:e2:28:0b:32:0c:46:aa:2b:1d:eb:7f: d3:93:2b:a6:21:e3:8c:84:40:a4:63:81:b2:81:1a: a1:cd:38:fc:ed:96:a0:44:66:83:f8:6e:d3:30:19: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D2:25:1D:E7:A2:2C:16:E9:18:39:56:93:7D:FD:65:CB:56:9C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0eb3ee23-7bc1-3d4c-9fd8-71e42f3e8700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b3:62:68:bf:47:e8:f9:35:d5:bd:b8:53:77:9f:0c:3e:6f: d0:b1:88:79:6e:27:2d:f2:5b:f6:e6:6a:fc:39:8c:22:24:d4: e0:e1:31:75:ce:90:6a:7f:6d:c7:44:71:68:a4:f1:2e:7d:0a: f4:23:74:2e:b8:80:2b:ee:22:de:bb:9d:72:6a:34:6d:b8:75: 11:3d:98:0b:3c:0c:dc:f0:77:50:aa:d7:c4:1c:fb:2c:cb:0f: 97:b7:0c:67:68:28:1a:1d:50:42:25:d1:b6:db:d8:78:5e:54: a9:17:f7:f7:26:f8:8a:f4:af:98:c8:3a:f8:6e:ea:58:16:d9: 63:af:92:2c:e9:ae:26:3a:c5:b4:82:77:49:2f:df:76:23:86: e3:d0:9f:e9:1e:fb:e0:64:59:b5:b6:2c:45:84:ed:16:a4:f0: 15:be:cc:64:09:2f:6d:64:bf:eb:0a:a8:63:18:d0:c1:07:67: fe:66:a4:49:34:cf:43:66:87:ef:ef:02:75:c9:7e:d5:62:5b: 15:de:42:7b:ab:dd:15:65:42:78:df:47:65:1c:cb:59:fb:31: bd:af:91:d6:73:f6:4f:a2:fb:0c:08:bd:6d:b5:b2:c3:ab:40: f5:7c:14:bf:95:31:58:3f:1d:55:91:f2:7c:f0:36:2d:af:f0: ff:30:b0:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnPaAkSqoqIQ4YqwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMDE5NTU0NloXDTI1MDgwODE5NTU0NlowLzEtMCsGA1UEAxMk OGZhOTUyZDQtMGUyNS00YzUyLWE2NzEtYWM4MTg0YTk0NmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQG9TGaRKVZbm2BrqbiYZwcQeDxJ7SAN9/w2 cEHVrRn6pgzPuCE5Fb5nRa7bL7M9CGwIS/NaZwYVir5CMl/dbFIogitIA6os3Gcf JZmcHmhnGP2Pcy2aknCV8kcCEVK7gQZ1ISP007UyR367U/+kFJsUq+Kszl32EQhx ADQRrxQGP3YN+OxvmJOHlp4sgxC9QvYgYX6kpXrVkBPGor7+rmplP94LyYe0ovK/ Y/6+abncLIWlEC1c325Kad/OLShW5VOwnqfz9c8OmBuaRDfqcwAOK1pX4igLMgxG qisd63/TkyumIeOMhECkY4GygRqhzTj87ZagRGaD+G7TMBmifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnSJR3noiwW6Rg5VpN9/WXLVpxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGViM2VlMjMtN2JjMS0z ZDRjLTlmZDgtNzFlNDJmM2U4NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACezYmi/R+j5NdW9uFN3nww+b9CxiHluJy3yW/bmavw5jCIk1ODhMXXO kGp/bcdEcWik8S59CvQjdC64gCvuIt67nXJqNG24dRE9mAs8DNzwd1Cq18Qc+yzL D5e3DGdoKBodUEIl0bbb2HheVKkX9/cm+Ir0r5jIOvhu6lgW2WOvkizpriY6xbSC d0kv33YjhuPQn+ke++BkWbW2LEWE7Rak8BW+zGQJL21kv+sKqGMY0MEHZ/5mpEk0 z0Nmh+/vAnXJftViWxXeQnur3RVlQnjfR2Ucy1n7Mb2vkdZz9k+i+wwIvW21ssOr QPV8FL+VMVg/HVWR8nzwNi2v8P8wsE4= -----END CERTIFICATE-----Generated at Sun May 11 06:09:08 2025 by rpki-client