$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/92f0d350-4de5-3232-9c93-5bf38ed7d5e9.roa File: 92f0d350-4de5-3232-9c93-5bf38ed7d5e9.roa (raw, json) Hash identifier: fgJlCPs9sJgCHpBSDd63SaorMrAQa7XPIK8wZH9J5N4= Subject key identifier: D8:9E:59:A3:8F:90:FE:5A:7F:60:21:91:4F:45:47:2C:F2:21:BC:BD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849CBCFAECD205A5AE79A712980 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/92f0d350-4de5-3232-9c93-5bf38ed7d5e9.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 201106 IP address blocks: 104.164.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:ae:cd:20:5a:5a:e7:9a:71:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=67d017fc-ab0f-461f-ad97-b10cf8aa2c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:28:e7:75:38:b0:1e:d7:06:27:f9:0b:c6: 74:46:b6:6c:b7:2e:ae:36:5b:5d:9c:2f:b2:9e:32: 5c:b8:d3:1b:61:cb:a6:ba:28:14:75:50:4e:41:6b: 18:64:b0:c5:10:8f:a0:ab:cf:c1:bf:85:58:db:ff: b3:e3:24:9e:59:9b:c0:7f:c4:36:ae:f5:ff:63:be: 6b:b9:ea:66:4e:4b:6f:f4:83:12:8e:ac:3c:6e:e2: f1:60:ca:af:54:91:32:54:34:43:64:51:59:24:7c: 8e:d3:e2:cb:12:cb:98:6d:dc:cc:69:90:b9:a1:d2: 96:4a:af:b4:4d:f9:2c:bd:56:1e:47:90:d9:e9:1b: 62:36:e4:d2:37:ef:29:ed:61:fe:d8:22:a2:25:b2: 6d:73:d1:38:56:0c:5c:28:1f:ef:ad:20:c7:87:94: 6a:fa:47:76:60:20:c2:f4:b7:8e:11:b3:43:1f:5e: 74:f8:ed:2a:fa:42:43:7d:b1:d5:78:ed:2b:72:0d: 3f:a0:74:e8:c8:8d:98:f8:2b:de:c3:71:07:54:bd: 8f:45:9b:88:e9:79:4f:52:b0:53:aa:b4:f5:d6:44: 66:0e:c8:3d:6c:72:e9:a3:25:34:e9:76:15:c1:3a: 8a:59:49:e7:dd:d1:25:8c:1c:0c:ac:7f:16:78:21: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9E:59:A3:8F:90:FE:5A:7F:60:21:91:4F:45:47:2C:F2:21:BC:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/92f0d350-4de5-3232-9c93-5bf38ed7d5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c2:95:92:94:98:da:b5:b2:96:4d:4f:25:4b:9d:f3:6e:b1: 3e:70:d5:b2:9b:05:10:d1:b5:fc:4c:f7:71:bc:7e:2b:20:fe: 24:1a:dd:f5:7b:46:db:8f:17:99:99:35:44:fd:23:30:08:1a: 4b:cb:ed:f8:3b:26:43:fa:d6:8c:20:59:37:0c:a9:ec:c3:37: 88:dc:ce:f1:06:e7:22:89:ff:07:fe:24:10:d1:00:a3:de:8a: a7:a4:dc:64:30:ab:51:74:88:f6:3a:ba:6a:6c:93:07:d3:4b: 90:c6:71:83:94:9e:92:31:5f:cb:74:62:53:58:5a:30:fe:b7: c3:8f:e7:e7:6f:11:43:65:0e:4e:46:4f:b8:13:b3:75:bf:b2: b7:fd:e7:8e:7a:86:ec:e4:42:f7:ca:9e:d5:b3:de:8c:eb:2e: 8a:6e:39:63:98:ac:ab:4a:22:b0:0a:24:62:f9:fc:ff:c4:a4: 3f:0b:b0:5a:22:8b:20:8f:ac:6d:fc:7e:1a:ec:bd:83:2b:bd: 33:a6:a0:ac:cf:5c:34:86:48:7d:8a:48:e9:21:9a:bc:01:62: 73:55:65:0e:e7:1d:5b:ec:02:fa:ea:8b:d1:d6:4b:1f:49:72: c6:d6:2a:4c:d2:d8:7b:f4:8b:a4:22:35:73:b0:fc:92:35:f8: e7:eb:b5:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz67NIFpa55pxKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NjdkMDE3ZmMtYWIwZi00NjFmLWFkOTctYjEwY2Y4YWEyYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUwo53U4sB7XBif5C8Z0RrZsty6uNltdnC+y njJcuNMbYcumuigUdVBOQWsYZLDFEI+gq8/Bv4VY2/+z4ySeWZvAf8Q2rvX/Y75r uepmTktv9IMSjqw8buLxYMqvVJEyVDRDZFFZJHyO0+LLEsuYbdzMaZC5odKWSq+0 TfksvVYeR5DZ6RtiNuTSN+8p7WH+2CKiJbJtc9E4VgxcKB/vrSDHh5Rq+kd2YCDC 9LeOEbNDH150+O0q+kJDfbHVeO0rcg0/oHToyI2Y+Cvew3EHVL2PRZuI6XlPUrBT qrT11kRmDsg9bHLpoyU06XYVwTqKWUnn3dEljBwMrH8WeCHHzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNieWaOPkP5af2AhkU9FRyzyIby9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTJmMGQzNTAtNGRlNS0z MjMyLTljOTMtNWJmMzhlZDdkNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTClZKUmNq1spZNTyVLnfNusT5w1bKbBRDRtfxM93G8fisg/iQa3fV7 RtuPF5mZNUT9IzAIGkvL7fg7JkP61owgWTcMqezDN4jczvEG5yKJ/wf+JBDRAKPe iqek3GQwq1F0iPY6umpskwfTS5DGcYOUnpIxX8t0YlNYWjD+t8OP5+dvEUNlDk5G T7gTs3W/srf95456huzkQvfKntWz3ozrLopuOWOYrKtKIrAKJGL5/P/EpD8LsFoi iyCPrG38fhrsvYMrvTOmoKzPXDSGSH2KSOkhmrwBYnNVZQ7nHVvsAvrqi9HWSx9J csbWKkzS2Hv0i6QiNXOw/JI1+OfrtQk= -----END CERTIFICATE-----Generated at Sun May 11 14:50:08 2025 by rpki-client