$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40435dd5-7986-3c05-a3c1-d000ffa050b6.roa File: 40435dd5-7986-3c05-a3c1-d000ffa050b6.roa (raw, json) Hash identifier: HtiRUQw1cNK7LWBVnd4ls6rigt0Yc3plx+T/2/JHSIY= Subject key identifier: 1F:F1:46:08:C4:9B:E6:9F:FA:C8:27:C6:E2:A7:B4:79:08:AC:B0:BD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A4275860CA59979616BCA2D40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40435dd5-7986-3c05-a3c1-d000ffa050b6.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 59253 IP address blocks: 104.252.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:86:0c:a5:99:79:61:6b:ca:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=44520afc-508c-48fe-86d4-7c096c6658d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:8c:ee:1f:29:a8:1a:b0:f8:b6:de:18:19: 54:4c:b3:b9:66:5f:ee:58:12:37:64:b2:db:46:4c: 82:65:6f:b7:fc:8f:07:ff:5e:46:25:8e:09:39:33: bf:37:d3:4a:e6:a7:96:5f:a1:5f:4a:49:27:c2:04: a4:60:78:52:d7:a2:a3:19:ef:3b:05:a1:bb:f2:08: bd:6e:39:e3:e4:1d:cd:bd:99:e5:71:fc:0a:0e:0e: f1:b6:7c:ce:64:ff:87:bb:db:c9:35:8f:e6:d7:ea: a1:88:9c:35:bc:d5:27:dd:58:78:37:25:b3:7b:7e: 43:12:19:08:6a:10:69:61:05:71:b2:88:1c:0a:88: 55:13:ee:da:50:10:fe:1b:1e:f7:03:3c:42:7b:73: 45:66:b4:bd:25:82:d8:9c:73:61:4d:24:3f:f5:40: 9c:2b:a0:c8:b0:82:84:e9:e0:08:9b:01:ed:59:83: a6:bd:5c:5e:5e:45:b4:64:9d:27:27:7a:df:bf:4c: bc:f5:31:60:d7:32:68:05:d5:21:b0:44:87:e7:90: ae:2c:19:fc:c1:e4:7e:12:c7:ce:63:c2:89:2a:73: 2e:0d:85:c5:ff:7c:a0:4c:4d:e3:f0:fa:4e:db:5e: c5:77:59:76:05:d5:0b:eb:16:97:d5:00:75:e8:90: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F1:46:08:C4:9B:E6:9F:FA:C8:27:C6:E2:A7:B4:79:08:AC:B0:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40435dd5-7986-3c05-a3c1-d000ffa050b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e8:9e:5e:e3:c2:73:d1:20:aa:26:e2:b7:fa:3c:e3:42:0a: 09:7e:34:a9:1e:72:c6:b4:b3:fa:b0:34:1c:52:fb:a9:5d:99: 4b:d0:b9:b2:f6:19:23:c0:48:e2:b8:82:48:45:c5:4c:1c:ee: fa:62:08:d9:c3:30:16:5b:bc:62:92:26:5d:20:be:d2:e0:e3: 68:87:74:58:b5:f7:a0:74:b0:7d:7b:59:f2:e4:6e:4e:88:5d: ba:d7:24:1c:10:fd:2d:60:f7:5c:14:2f:99:dc:d0:8d:e6:8c: 87:bd:d3:ba:df:2b:75:af:aa:e7:b5:ba:1f:bb:11:69:fb:8d: db:4e:e5:e8:b6:23:3e:1d:36:db:31:fa:7b:6a:dc:37:95:9f: 6f:93:47:2c:92:0b:b4:a2:fc:a7:0b:3b:84:19:13:08:0c:88: 3a:6a:48:dc:4a:97:6f:41:77:ff:47:40:1a:53:06:b2:a6:bf: a8:50:1a:27:0e:c2:60:66:d0:e9:d8:ac:ef:2f:75:2d:a0:2d: b5:e5:9c:aa:8a:fd:04:f5:fb:30:ae:3a:73:e2:31:94:68:b3: b3:c1:61:b3:d0:fc:29:7a:24:4e:27:5d:12:1e:7a:35:72:45: d5:5f:73:d4:f3:6a:b0:98:55:2b:9e:16:22:08:08:a8:87:cb: 3a:02:56:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYYMpZl5YWvKLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NDQ1MjBhZmMtNTA4Yy00OGZlLTg2ZDQtN2MwOTZjNjY1OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyiM7h8pqBqw+LbeGBlUTLO5Zl/uWBI3ZLLb RkyCZW+3/I8H/15GJY4JOTO/N9NK5qeWX6FfSkknwgSkYHhS16KjGe87BaG78gi9 bjnj5B3NvZnlcfwKDg7xtnzOZP+Hu9vJNY/m1+qhiJw1vNUn3Vh4NyWze35DEhkI ahBpYQVxsogcCohVE+7aUBD+Gx73AzxCe3NFZrS9JYLYnHNhTSQ/9UCcK6DIsIKE 6eAImwHtWYOmvVxeXkW0ZJ0nJ3rfv0y89TFg1zJoBdUhsESH55CuLBn8weR+EsfO Y8KJKnMuDYXF/3ygTE3j8PpO217Fd1l2BdUL6xaX1QB16JAmjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/xRgjEm+af+sgnxuKntHkIrLC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDA0MzVkZDUtNzk4Ni0z YzA1LWEzYzEtZDAwMGZmYTA1MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7onl7jwnPRIKom4rf6PONCCgl+NKkecsa0s/qwNBxS+6ldmUvQubL2 GSPASOK4gkhFxUwc7vpiCNnDMBZbvGKSJl0gvtLg42iHdFi196B0sH17WfLkbk6I XbrXJBwQ/S1g91wUL5nc0I3mjIe907rfK3Wvque1uh+7EWn7jdtO5ei2Iz4dNtsx +ntq3DeVn2+TRyySC7Si/KcLO4QZEwgMiDpqSNxKl29Bd/9HQBpTBrKmv6hQGicO wmBm0OnYrO8vdS2gLbXlnKqK/QT1+zCuOnPiMZRos7PBYbPQ/Cl6JE4nXRIeejVy RdVfc9TzarCYVSueFiIICKiHyzoCVig= -----END CERTIFICATE-----Generated at Tue Jul 1 13:04:40 2025 by rpki-client