$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa File: b8da705a-5ddb-3f02-9da1-f521b654a46a.roa (raw, json) Hash identifier: Fdu3fJVxm+SSwWbHDz2X00jQz23Vo3ODrrsgklTotGI= Subject key identifier: 25:27:AA:D2:71:7E:47:24:71:E6:4D:44:14:80:23:74:C2:14:A6:C9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849B57A35DDC65B5D6FC7D0B080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 212238 IP address blocks: 104.164.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:35:dd:c6:5b:5d:6f:c7:d0:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=e85c5830-263e-4fec-bbf4-9c2532884d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:be:95:d2:d8:dc:2d:47:e6:39:f7:5b:5a: b5:0c:ca:80:21:c0:b5:1f:9f:eb:4d:68:af:e3:7c: cf:f6:35:69:41:e6:e4:80:fb:b7:04:53:7d:e1:b2: 4d:ef:cd:ca:62:b5:b4:b5:e3:e1:8a:86:68:86:52: 79:6c:91:6f:12:5d:ae:62:09:56:7c:af:37:75:ab: 4b:f7:4b:e1:d1:fe:fd:89:f2:b7:93:9a:67:6f:76: a7:64:c3:00:5d:ac:ad:8d:42:d4:8b:8e:61:38:79: 05:81:e6:03:dc:1a:22:9a:e1:85:da:28:5b:4c:1d: 10:e9:52:f6:0f:8c:5a:9b:b3:13:21:10:1e:95:28: 68:65:5a:6c:43:b9:8b:9d:b3:a7:ec:7e:f1:80:c3: d0:f7:16:3f:40:76:70:b3:59:c1:d1:35:07:b8:7d: e2:11:27:bb:0d:1a:d9:fb:cb:b5:e6:9c:61:7f:32: 23:92:10:cb:9f:13:63:97:22:20:3c:83:72:10:5e: 44:1e:c0:34:84:66:61:b5:0d:99:bd:62:6b:d5:e6: 72:66:f2:5d:e2:6e:5a:c7:93:5a:d3:33:66:da:e1: 2d:ff:58:3e:d9:ff:14:59:bd:5f:1d:3a:44:c1:4e: 9c:a7:fa:a8:1a:78:0d:96:5f:cb:99:f4:1b:6c:cf: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:27:AA:D2:71:7E:47:24:71:E6:4D:44:14:80:23:74:C2:14:A6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:bd:a0:89:c2:e9:92:bc:a5:02:c2:c8:67:f6:b5:e1:1d:eb: 44:25:46:e0:1d:4f:c2:c5:6a:23:5c:9d:e1:10:4a:a9:a6:7a: 89:3b:b6:1c:d3:64:20:bd:da:87:27:f3:58:02:06:8b:5b:8a: bd:7d:0a:47:37:22:70:60:8d:3e:eb:e3:75:64:02:4a:ca:0d: fd:45:0d:4a:11:0d:a4:26:19:d7:06:b5:62:cd:41:71:e6:5f: 62:13:1e:e7:43:b1:6b:32:7d:ba:4b:01:bd:3c:3a:ec:dd:9d: 20:5d:3f:e1:33:b4:65:e8:2a:a9:51:c8:57:8e:01:ab:62:20: 52:b3:ec:33:c5:42:dd:b7:5d:11:f0:d6:cf:d7:0c:8c:b7:13: 8d:d3:09:80:45:82:c7:d0:81:a7:07:7e:b3:88:fa:ed:ff:cf: 53:bd:fd:5c:70:6c:82:54:42:62:5c:07:73:6f:fa:fa:58:bc: 57:81:ee:a9:3e:d2:a4:31:a9:5d:5b:39:8b:a2:f1:13:3a:7e: 43:f0:3e:63:2c:6b:34:d5:f9:2d:70:a7:48:ba:10:12:d2:c1: 71:ce:79:22:83:ee:9f:cc:2e:ec:46:16:ce:da:ca:e6:51:4a: c6:b4:c2:57:e9:11:3c:1d:74:47:2e:21:b1:12:7f:c7:4b:c2: d4:4c:4f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejXdxltdb8fQsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZTg1YzU4MzAtMjYzZS00ZmVjLWJiZjQtOWMyNTMyODg0ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIi+ldLY3C1H5jn3W1q1DMqAIcC1H5/rTWiv 43zP9jVpQebkgPu3BFN94bJN783KYrW0tePhioZohlJ5bJFvEl2uYglWfK83datL 90vh0f79ifK3k5pnb3anZMMAXaytjULUi45hOHkFgeYD3BoimuGF2ihbTB0Q6VL2 D4xam7MTIRAelShoZVpsQ7mLnbOn7H7xgMPQ9xY/QHZws1nB0TUHuH3iESe7DRrZ +8u15pxhfzIjkhDLnxNjlyIgPINyEF5EHsA0hGZhtQ2ZvWJr1eZyZvJd4m5ax5Na 0zNm2uEt/1g+2f8UWb1fHTpEwU6cp/qoGngNll/LmfQbbM86zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUnqtJxfkckceZNRBSAI3TCFKbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjhkYTcwNWEtNWRkYi0z ZjAyLTlkYTEtZjUyMWI2NTRhNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+9oInC6ZK8pQLCyGf2teEd60QlRuAdT8LFaiNcneEQSqmmeok7thzT ZCC92ocn81gCBotbir19Ckc3InBgjT7r43VkAkrKDf1FDUoRDaQmGdcGtWLNQXHm X2ITHudDsWsyfbpLAb08OuzdnSBdP+EztGXoKqlRyFeOAatiIFKz7DPFQt23XRHw 1s/XDIy3E43TCYBFgsfQgacHfrOI+u3/z1O9/VxwbIJUQmJcB3Nv+vpYvFeB7qk+ 0qQxqV1bOYui8RM6fkPwPmMsazTV+S1wp0i6EBLSwXHOeSKD7p/MLuxGFs7ayuZR Ssa0wlfpETwddEcuIbESf8dLwtRMT34= -----END CERTIFICATE-----Generated at Fri May 9 03:00:15 2025 by rpki-client