$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0fd40f73-0a7d-3575-82fe-f2afedddaed3.roa File: 0fd40f73-0a7d-3575-82fe-f2afedddaed3.roa (raw, json) Hash identifier: 24LVZK9Llg0KHHIYNtZfFGil20c9mJ6IdMdurHAw7Eo= Subject key identifier: C2:52:97:CE:AC:A9:21:E8:9D:39:CC:AA:B9:E3:C2:39:27:3C:67:04 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A03652BF9EF67D2240903B880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0fd40f73-0a7d-3575-82fe-f2afedddaed3.roa Signing time: Thu 29 May 2025 10:52:02 +0000 ROA not before: Thu 29 May 2025 10:52:02 +0000 ROA not after: Wed 27 Aug 2025 10:52:02 +0000 asID: 20473 IP address blocks: 104.164.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:65:2b:f9:ef:67:d2:24:09:03:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 29 10:52:02 2025 GMT Not After : Aug 27 10:52:02 2025 GMT Subject: CN=f161c0e3-aa9a-4cc0-bcf2-79ca37894e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:91:8d:b9:6a:58:a6:a9:c3:46:0d:db:11:72: 14:7b:88:ff:29:8d:37:4f:4c:bd:5f:da:f5:a3:e2: 03:05:7b:b1:df:1c:b3:1c:e1:a6:fe:cb:b0:66:fe: 2f:78:e1:a1:04:24:29:6d:da:5b:12:c5:25:83:52: b8:92:58:01:bf:01:ef:23:1b:31:c7:f6:b9:55:2f: 4f:43:3e:39:ca:32:30:b0:0d:11:47:9e:d9:7b:95: a7:3a:d3:75:42:9d:c2:1c:96:e4:ed:5d:a2:9c:01: 83:a7:a2:82:fb:39:d6:f4:38:74:21:3f:b0:30:95: f0:bb:ca:2b:88:af:27:f7:44:7e:12:58:f4:b0:ff: 8f:66:ea:29:8d:f9:41:58:7f:16:08:41:0e:32:15: 8a:41:f1:64:92:6c:5f:5c:38:cd:8e:9a:be:19:fc: 51:54:42:9e:b0:09:46:6b:3c:64:2e:32:c6:1b:82: 86:28:ab:f4:99:67:38:aa:1d:df:ce:d8:d6:29:eb: 74:b8:b7:2f:77:d7:3c:1b:7a:6a:40:16:c2:25:ec: ab:c6:8a:04:14:58:3f:4d:3c:84:df:e1:16:c1:e5: aa:33:b5:b1:32:eb:2e:fd:33:5a:72:eb:03:81:87: 59:6b:7f:80:f5:c0:04:14:f1:32:39:86:de:99:c4: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:97:CE:AC:A9:21:E8:9D:39:CC:AA:B9:E3:C2:39:27:3C:67:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0fd40f73-0a7d-3575-82fe-f2afedddaed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ce:e7:59:15:45:b7:a3:05:0c:95:11:7d:c7:64:72:60:06: e1:d4:c3:15:fc:fe:a0:ef:77:d8:c6:16:b2:dd:7b:b1:f8:e9: f3:50:c8:5d:55:be:77:86:12:b9:aa:81:ed:a5:6d:73:ed:82: 62:5a:d1:08:ca:8b:12:d5:37:c2:1c:68:d6:ed:95:0c:a4:44: c9:46:04:78:7b:b2:77:59:5a:22:24:db:6c:98:57:1c:e1:aa: c0:f9:ba:77:df:ff:bc:0e:e3:34:a8:af:1c:75:41:77:46:c5: f4:19:41:c4:d0:3b:b2:4c:25:6e:c8:9d:56:e3:06:33:5f:96: 0f:df:88:d9:b5:83:16:c7:bf:25:5a:95:b8:06:13:46:3a:13: a0:ff:59:7d:e7:56:28:b6:cf:77:8d:13:20:b6:c8:74:d9:0d: 7a:b4:7a:f2:50:44:09:46:56:de:8f:ab:a7:38:d4:fc:f1:1a: 13:40:29:9b:ff:a6:c2:5e:ab:a7:fd:73:ed:a3:98:04:3f:85: e6:02:50:10:3b:2a:7c:01:e5:2f:6c:b5:d6:fd:94:e7:8f:42: 74:81:5c:02:e0:7c:cc:18:10:d3:03:cd:e6:32:38:f8:b7:ea: a9:99:d7:bc:fd:d3:45:40:be:89:bf:58:4c:f0:92:10:13:d6: e2:71:58:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDZSv572fSJAkDuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyOTEwNTIwMloXDTI1MDgyNzEwNTIwMlowLzEtMCsGA1UEAxMk ZjE2MWMwZTMtYWE5YS00Y2MwLWJjZjItNzljYTM3ODk0ZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZGNuWpYpqnDRg3bEXIUe4j/KY03T0y9X9r1 o+IDBXux3xyzHOGm/suwZv4veOGhBCQpbdpbEsUlg1K4klgBvwHvIxsxx/a5VS9P Qz45yjIwsA0RR57Ze5WnOtN1Qp3CHJbk7V2inAGDp6KC+znW9Dh0IT+wMJXwu8or iK8n90R+Elj0sP+PZuopjflBWH8WCEEOMhWKQfFkkmxfXDjNjpq+GfxRVEKesAlG azxkLjLGG4KGKKv0mWc4qh3fztjWKet0uLcvd9c8G3pqQBbCJeyrxooEFFg/TTyE 3+EWweWqM7WxMusu/TNacusDgYdZa3+A9cAEFPEyOYbemcTRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJSl86sqSHonTnMqrnjwjknPGcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGZkNDBmNzMtMGE3ZC0z NTc1LTgyZmUtZjJhZmVkZGRhZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLO51kVRbejBQyVEX3HZHJgBuHUwxX8/qDvd9jGFrLde7H46fNQyF1V vneGErmqge2lbXPtgmJa0QjKixLVN8IcaNbtlQykRMlGBHh7sndZWiIk22yYVxzh qsD5unff/7wO4zSorxx1QXdGxfQZQcTQO7JMJW7InVbjBjNflg/fiNm1gxbHvyVa lbgGE0Y6E6D/WX3nVii2z3eNEyC2yHTZDXq0evJQRAlGVt6Pq6c41PzxGhNAKZv/ psJeq6f9c+2jmAQ/heYCUBA7KnwB5S9stdb9lOePQnSBXALgfMwYENMDzeYyOPi3 6qmZ17z900VAvom/WEzwkhAT1uJxWDI= -----END CERTIFICATE-----Generated at Mon Jun 16 14:50:59 2025 by rpki-client