$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17298c52-c4d8-30de-ae7a-2da81465b88a.roa File: 17298c52-c4d8-30de-ae7a-2da81465b88a.roa (raw, json) Hash identifier: fCRA0AnmrHZrLb+b7qJhsTgYv8boCcv+v/yrZ/3HJuE= Subject key identifier: F0:98:25:DB:49:6E:75:B5:F3:68:6D:8D:AC:56:05:D2:52:EE:4C:49 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858496E497D7539B19773DB419F40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17298c52-c4d8-30de-ae7a-2da81465b88a.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 202015 IP address blocks: 104.253.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:7d:75:39:b1:97:73:db:41:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=87716d1c-bdb0-4b2f-bdb3-8e7a3a73ffd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:5e:e9:a2:d6:aa:c4:cf:f8:e1:5d:fd:9d: 71:89:8b:0a:58:65:97:1b:60:7c:a3:07:c8:e7:b6: 63:67:56:ec:95:13:75:2e:7a:7a:ba:eb:62:e5:44: d5:8c:b3:67:66:24:61:93:f5:93:b4:22:ff:d6:87: eb:a1:57:91:56:21:84:51:0b:dc:dd:41:90:f8:fd: d9:28:e0:69:dc:8d:90:91:a1:07:62:ea:16:53:ab: 77:d0:1e:da:d2:a4:c0:bf:f0:6a:b3:10:76:c2:7e: 42:c2:d5:9b:e0:0c:a3:49:b3:de:9c:bf:2b:f4:88: 98:95:a7:49:c6:57:5b:49:35:4e:29:29:96:a2:cd: a0:33:92:bb:c6:17:13:fb:8f:c7:c0:97:6c:a1:e2: 18:e6:6c:dc:c0:de:ca:dd:69:de:02:4e:75:70:ff: ae:00:ac:1c:93:be:5a:ca:16:21:71:e6:e6:74:7e: 39:1b:2c:f8:89:23:a2:52:83:89:5a:a5:bd:36:00: 1f:19:55:88:89:e5:76:17:ab:98:1c:8d:3d:d4:e7: b9:78:95:b8:06:de:cb:0b:57:8c:19:b7:6e:cb:f4: cf:61:1b:10:2b:e8:53:26:b1:4e:bd:50:19:39:5e: 59:1c:e9:d5:ae:8d:27:4a:a8:c9:73:0e:85:c9:fb: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:98:25:DB:49:6E:75:B5:F3:68:6D:8D:AC:56:05:D2:52:EE:4C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17298c52-c4d8-30de-ae7a-2da81465b88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ee:8b:2a:79:fb:db:e0:d4:a2:7a:c2:57:e9:80:e9:73:4c: ce:82:d9:11:39:4c:eb:a1:d7:97:12:6b:73:f1:4b:a7:76:71: f3:eb:8f:d9:7c:8a:d2:b2:c2:ba:c9:c0:84:fc:f1:33:40:48: 3a:9c:a3:48:e9:c2:2b:d4:69:6b:84:57:e3:02:ea:38:b7:09: 0f:99:89:e7:19:b1:ae:08:6d:4f:b8:46:9f:08:03:10:76:27: 6e:69:7b:70:fd:bd:34:14:f3:c3:64:b6:08:b8:13:14:76:87: 0a:28:25:4e:c8:a3:fb:0c:f2:51:1f:51:a1:a7:e8:bf:8b:fe: 26:7b:3f:10:f2:2b:bc:96:56:d1:bf:80:f4:5f:2b:f5:ee:e8: 00:fa:92:f7:2d:99:5a:dd:22:a2:63:16:e2:45:91:2c:f5:da: ff:2b:73:a6:0b:ce:03:97:80:0e:d7:b4:81:47:f2:91:e3:ec: 7d:3a:74:6b:fe:31:10:e9:c5:94:07:5c:59:6f:f3:6a:cd:5e: 35:ff:b6:a8:34:5f:a7:25:34:91:8f:30:24:ed:a0:ad:e8:62: 11:af:79:80:56:0a:25:b2:92:8a:a3:ba:b9:0e:be:5f:18:e2: 53:87:2d:bf:33:95:cf:03:a5:df:62:d2:91:3d:ad:90:85:10: 34:4c:f3:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSX11ObGXc9tBn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ODc3MTZkMWMtYmRiMC00YjJmLWJkYjMtOGU3YTNhNzNmZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2xe6aLWqsTP+OFd/Z1xiYsKWGWXG2B8owfI 57ZjZ1bslRN1Lnp6uuti5UTVjLNnZiRhk/WTtCL/1ofroVeRViGEUQvc3UGQ+P3Z KOBp3I2QkaEHYuoWU6t30B7a0qTAv/BqsxB2wn5CwtWb4AyjSbPenL8r9IiYladJ xldbSTVOKSmWos2gM5K7xhcT+4/HwJdsoeIY5mzcwN7K3WneAk51cP+uAKwck75a yhYhcebmdH45Gyz4iSOiUoOJWqW9NgAfGVWIieV2F6uYHI091Oe5eJW4Bt7LC1eM Gbduy/TPYRsQK+hTJrFOvVAZOV5ZHOnVro0nSqjJcw6FyfvErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCYJdtJbnW182htjaxWBdJS7kxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTcyOThjNTItYzRkOC0z MGRlLWFlN2EtMmRhODE0NjViODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/uiyp5+9vg1KJ6wlfpgOlzTM6C2RE5TOuh15cSa3PxS6d2cfPrj9l8 itKywrrJwIT88TNASDqco0jpwivUaWuEV+MC6ji3CQ+ZiecZsa4IbU+4Rp8IAxB2 J25pe3D9vTQU88Nktgi4ExR2hwooJU7Io/sM8lEfUaGn6L+L/iZ7PxDyK7yWVtG/ gPRfK/Xu6AD6kvctmVrdIqJjFuJFkSz12v8rc6YLzgOXgA7XtIFH8pHj7H06dGv+ MRDpxZQHXFlv82rNXjX/tqg0X6clNJGPMCTtoK3oYhGveYBWCiWykoqjurkOvl8Y 4lOHLb8zlc8Dpd9i0pE9rZCFEDRM8/I= -----END CERTIFICATE-----Generated at Sun Apr 27 20:19:44 2025 by rpki-client