$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa File: 2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa (raw, json) Hash identifier: NfG21oRTi7GxZsgtrdPpLuDSDaxy0WJh5L4ulmWBTOw= Subject key identifier: D2:8C:A9:EA:E1:2D:23:D6:48:74:5E:85:47:33:60:1B:C1:0F:6E:AC Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858496A0270E59CA8C4FEE140219C Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa Signing time: Fri 04 Apr 2025 12:14:26 +0000 ROA not before: Fri 04 Apr 2025 12:14:26 +0000 ROA not after: Thu 03 Jul 2025 12:14:26 +0000 asID: 44133 IP address blocks: 104.253.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:02:70:e5:9c:a8:c4:fe:e1:40:21:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 4 12:14:26 2025 GMT Not After : Jul 3 12:14:26 2025 GMT Subject: CN=e8d589ed-5cbc-43fa-be48-e4100b40720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:21:16:12:59:ef:5b:f8:dc:4b:f5:63:d6: d3:dc:74:f0:0c:a7:06:c0:b7:dd:84:f0:77:3d:bd: fa:3d:f3:92:c8:88:42:0a:98:10:4e:5a:ef:82:bb: d2:b4:0a:52:78:87:b2:73:8c:8a:bf:25:3f:f5:0a: 1c:6a:1c:16:a4:87:8a:82:e5:30:02:9f:53:46:a6: d0:29:16:aa:c2:39:4a:d0:72:e1:d7:0f:1f:e3:22: a9:cc:7b:e1:ac:95:be:db:63:e2:66:81:39:f2:17: ca:ef:1d:97:d8:ea:59:11:42:03:2b:cb:2b:e0:8d: 96:2a:20:2f:de:21:35:2e:af:fc:84:3d:c0:62:1a: a6:0e:12:9c:d4:84:fd:ee:a1:75:42:9d:82:14:aa: a7:8c:42:d9:b0:3d:91:e8:99:3c:86:82:db:1f:af: b3:13:9d:ef:81:fb:6e:eb:1d:df:89:2e:75:a6:2f: 34:49:3a:96:83:02:ff:76:e7:dd:b0:3d:37:07:11: 19:46:4a:fc:61:fb:b0:0b:01:9f:a7:69:41:df:7c: 3d:3c:07:fa:e6:b0:f6:87:8e:49:68:e6:df:7e:12: 80:20:d0:94:99:b2:be:2f:9f:56:c0:47:26:8a:75: 64:50:64:59:b1:85:9d:11:27:73:3d:fd:5c:0d:e5: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8C:A9:EA:E1:2D:23:D6:48:74:5E:85:47:33:60:1B:C1:0F:6E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:3c:70:72:a2:6b:74:57:a7:85:c2:8a:45:e9:99:ba:14:4e: 89:c6:8d:19:5c:50:09:a5:12:9c:b1:b2:52:be:2a:3b:ef:85: 4c:ac:b3:ed:3f:58:37:aa:15:17:d4:5d:12:07:5e:12:38:ea: d7:31:42:c1:4e:d9:fd:b3:05:d3:d5:ee:e6:ab:a6:31:49:0e: d3:7d:2d:d4:cf:11:21:7f:10:74:74:fa:88:bf:9a:42:04:01: 1e:7f:0b:62:2b:6d:cc:dd:f5:46:98:06:ec:af:40:3e:e8:91: 9f:f3:b4:c5:5a:d4:6a:ce:26:1b:80:a4:50:6b:d6:e1:f3:08: 0e:c3:a7:17:a2:9a:d0:eb:14:c4:24:0d:d2:85:4b:90:58:aa: 87:1c:2e:c9:56:a5:ec:ab:ed:36:64:92:93:5f:b3:2b:2d:80: cb:2f:d9:ff:9d:53:65:fb:11:18:8d:6f:49:4a:08:47:24:1d: 4a:3f:d9:1c:55:e5:56:c0:b2:bb:e1:c4:92:88:71:8b:cf:18: c2:99:41:c0:40:89:e1:6b:db:99:4b:15:0e:f8:54:28:15:9f: 57:52:72:d6:1d:49:58:a4:d7:1b:1e:03:a0:d9:b4:cb:81:4b: 73:65:10:9e:a3:a1:54:12:59:b7:c8:78:ff:c5:36:11:16:b2: c8:5d:aa:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqAnDlnKjE/uFAIZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQwNDEyMTQyNloXDTI1MDcwMzEyMTQyNlowLzEtMCsGA1UEAxMk ZThkNTg5ZWQtNWNiYy00M2ZhLWJlNDgtZTQxMDBiNDA3MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg0hFhJZ71v43Ev1Y9bT3HTwDKcGwLfdhPB3 Pb36PfOSyIhCCpgQTlrvgrvStApSeIeyc4yKvyU/9QocahwWpIeKguUwAp9TRqbQ KRaqwjlK0HLh1w8f4yKpzHvhrJW+22PiZoE58hfK7x2X2OpZEUIDK8sr4I2WKiAv 3iE1Lq/8hD3AYhqmDhKc1IT97qF1Qp2CFKqnjELZsD2R6Jk8hoLbH6+zE53vgftu 6x3fiS51pi80STqWgwL/dufdsD03BxEZRkr8YfuwCwGfp2lB33w9PAf65rD2h45J aObffhKAINCUmbK+L59WwEcminVkUGRZsYWdESdzPf1cDeX02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKMqerhLSPWSHRehUczYBvBD26sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmM0Y2I3ZDQtMGM3MS0z YTNmLTkwNTAtZDMxODJmM2ZiOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw8cHKia3RXp4XCikXpmboUTonGjRlcUAmlEpyxslK+KjvvhUyss+0/ WDeqFRfUXRIHXhI46tcxQsFO2f2zBdPV7uarpjFJDtN9LdTPESF/EHR0+oi/mkIE AR5/C2Irbczd9UaYBuyvQD7okZ/ztMVa1GrOJhuApFBr1uHzCA7DpxeimtDrFMQk DdKFS5BYqoccLslWpeyr7TZkkpNfsystgMsv2f+dU2X7ERiNb0lKCEckHUo/2RxV 5VbAsrvhxJKIcYvPGMKZQcBAieFr25lLFQ74VCgVn1dSctYdSVik1xseA6DZtMuB S3NlEJ6joVQSWbfIeP/FNhEWsshdqlM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:33:37 2025 by rpki-client