$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/efa32d60-5fed-3500-9143-ddb60813ef5a.roa File: efa32d60-5fed-3500-9143-ddb60813ef5a.roa (raw, json) Hash identifier: 7I50SMl//1u4rZPWkwK9rO1hZDie0NTiCER4Q1xRJ+0= Subject key identifier: E3:B5:6B:ED:D0:BC:E4:35:32:5B:71:75:23:3B:27:AE:75:54:61:E4 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849CF68897CC35CEE5921FE6A80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/efa32d60-5fed-3500-9143-ddb60813ef5a.roa Signing time: Sat 10 May 2025 19:56:47 +0000 ROA not before: Sat 10 May 2025 19:56:47 +0000 ROA not after: Fri 08 Aug 2025 19:56:47 +0000 asID: 18779 IP address blocks: 104.165.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:68:89:7c:c3:5c:ee:59:21:fe:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 10 19:56:47 2025 GMT Not After : Aug 8 19:56:47 2025 GMT Subject: CN=57c5a060-3e0f-4f15-9fc9-5171b930c337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:61:ae:52:2a:f8:7f:94:cd:a0:51:42:3a: d4:dd:54:ae:89:d1:7f:2c:fd:03:3f:c4:83:84:66: 6f:b4:b8:ff:2d:fe:ac:2d:89:a8:31:21:39:84:4c: fa:f7:67:f8:31:86:ee:b8:5a:e9:01:cc:cd:14:72: ce:b8:db:14:e5:ed:c9:f6:5a:9b:4f:dd:9f:e3:28: 39:ae:ca:77:05:86:99:b5:bc:63:27:be:f2:41:1e: 3c:44:20:74:22:00:c2:5b:9f:04:2e:2a:1b:3f:9e: f6:f0:9d:01:a4:d4:5a:e1:36:ce:fc:04:5a:e1:a8: 98:37:8d:93:51:ec:f6:55:cd:e9:a0:80:ed:d3:3a: 71:64:c4:97:77:05:87:cc:00:41:f2:e4:9c:45:02: a8:19:cc:f7:b6:ba:68:08:bd:40:14:1d:eb:cc:34: a3:b4:18:1d:ef:32:ae:d2:e7:af:45:99:dd:f8:0b: 0a:0e:aa:df:e5:28:c2:1f:b0:22:80:d7:46:07:7d: 90:c4:86:6a:a1:a6:6a:a4:8a:c3:40:e0:a6:4d:c2: f5:45:11:39:87:81:c8:4f:71:38:61:f5:49:72:c1: 11:2f:45:16:41:b4:66:2c:83:9c:94:43:a1:19:ab: 58:9c:64:78:d9:5c:40:78:92:ed:b5:bf:8a:84:a9: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B5:6B:ED:D0:BC:E4:35:32:5B:71:75:23:3B:27:AE:75:54:61:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/efa32d60-5fed-3500-9143-ddb60813ef5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.165.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:eb:55:89:18:46:e9:7e:cb:61:a2:aa:65:73:9b:8d:bd:38: ab:4d:05:75:5d:f5:d5:14:ef:2c:96:f4:b8:7d:8c:d3:39:2e: 3e:50:82:2a:7c:0d:83:10:86:e8:53:5d:06:67:14:39:67:31: b3:0a:32:73:57:96:84:d6:da:7f:8c:26:00:ad:ba:c6:ec:57: a4:60:7c:c1:1c:a7:3b:b6:82:06:d1:51:f7:c1:fa:e2:29:2f: af:85:2c:e5:e3:74:79:ea:f8:e7:b1:4b:40:55:07:73:90:5e: ac:9f:c1:26:01:85:54:f6:02:65:7b:2e:56:17:1d:a1:1b:21: b1:05:21:5b:d2:2b:37:4a:15:0f:70:0b:17:47:4a:77:c9:a7: 70:2e:61:fb:7f:af:a3:a5:13:b1:ad:48:3f:45:a1:40:cb:85: e9:7d:78:c2:f6:40:a1:c4:32:b5:76:f9:2a:0d:40:be:60:35: 94:b1:34:ac:72:88:22:4c:ad:ab:ed:d4:ee:ee:bb:64:bf:09: 38:70:52:d5:da:ec:20:3d:2c:2c:5f:99:da:16:b3:0b:4e:7f: b2:be:71:1a:21:06:f3:d7:93:13:90:65:c6:7a:f8:b5:c8:83: 26:5e:a9:7d:a1:f9:17:a8:7e:79:61:54:d0:c3:be:04:e1:9d: f4:15:50:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnPaIl8w1zuWSH+aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUxMDE5NTY0N1oXDTI1MDgwODE5NTY0N1owLzEtMCsGA1UEAxMk NTdjNWEwNjAtM2UwZi00ZjE1LTlmYzktNTE3MWI5MzBjMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb1hrlIq+H+UzaBRQjrU3VSuidF/LP0DP8SD hGZvtLj/Lf6sLYmoMSE5hEz692f4MYbuuFrpAczNFHLOuNsU5e3J9lqbT92f4yg5 rsp3BYaZtbxjJ77yQR48RCB0IgDCW58ELiobP5728J0BpNRa4TbO/ARa4aiYN42T Uez2Vc3poIDt0zpxZMSXdwWHzABB8uScRQKoGcz3trpoCL1AFB3rzDSjtBgd7zKu 0uevRZnd+AsKDqrf5SjCH7AigNdGB32QxIZqoaZqpIrDQOCmTcL1RRE5h4HIT3E4 YfVJcsERL0UWQbRmLIOclEOhGatYnGR42VxAeJLttb+KhKlMxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO1a+3QvOQ1MltxdSM7J651VGHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWZhMzJkNjAtNWZlZC0z NTAwLTkxNDMtZGRiNjA4MTNlZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjrVYkYRul+y2GiqmVzm429OKtNBXVd9dUU7yyW9Lh9jNM5Lj5Qgip8 DYMQhuhTXQZnFDlnMbMKMnNXloTW2n+MJgCtusbsV6RgfMEcpzu2ggbRUffB+uIp L6+FLOXjdHnq+OexS0BVB3OQXqyfwSYBhVT2AmV7LlYXHaEbIbEFIVvSKzdKFQ9w CxdHSnfJp3AuYft/r6OlE7GtSD9FoUDLhel9eML2QKHEMrV2+SoNQL5gNZSxNKxy iCJMravt1O7uu2S/CThwUtXa7CA9LCxfmdoWswtOf7K+cRohBvPXkxOQZcZ6+LXI gyZeqX2h+ReofnlhVNDDvgThnfQVUMI= -----END CERTIFICATE-----Generated at Sun May 11 22:56:35 2025 by rpki-client