$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ae11fbe-47b2-39e3-b43e-158265ff2e14.roa File: 3ae11fbe-47b2-39e3-b43e-158265ff2e14.roa (raw, json) Hash identifier: +787pvgrQgXLcn+J8tJ5eiFRvuopR14h4+N08DjGHF8= Subject key identifier: BC:4D:80:D1:06:A9:52:85:4C:1F:86:6F:C0:3F:57:73:CD:56:56:CF Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F2AA2E2F1AF11FBF91344500 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ae11fbe-47b2-39e3-b43e-158265ff2e14.roa Signing time: Fri 23 May 2025 11:02:20 +0000 ROA not before: Fri 23 May 2025 11:02:20 +0000 ROA not after: Thu 21 Aug 2025 11:02:20 +0000 asID: 44477 IP address blocks: 104.165.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:aa:2e:2f:1a:f1:1f:bf:91:34:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 23 11:02:20 2025 GMT Not After : Aug 21 11:02:20 2025 GMT Subject: CN=3e596c19-63b4-479c-b12d-3a2db25506e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:ab:5b:32:78:37:8d:54:08:50:86:2a:21: 3b:a3:c9:0d:a3:72:f5:a0:56:a5:c3:d6:6d:3a:b0: a8:8d:96:77:5a:c6:89:d9:b5:48:f0:65:61:bd:92: 95:5c:46:d5:47:c5:6c:d8:4b:78:4e:a9:b5:26:c4: 2f:dd:3a:e6:32:69:f2:06:ac:64:f5:cb:df:bf:00: 45:85:a8:58:11:54:65:06:5b:0b:76:e2:22:e4:cc: 7d:36:18:ca:b8:81:9f:47:4c:df:a1:a9:ab:ab:c6: a7:58:a7:a3:3d:3f:74:1f:8b:1a:0a:db:16:38:8c: 4a:35:31:74:80:da:4c:50:76:aa:10:ee:8a:37:97: e8:06:46:fa:ac:6d:93:ac:a5:a1:7f:dd:0e:57:dc: 08:a0:ac:3b:b9:ad:6f:3b:0a:60:ef:49:a5:4d:30: b5:61:4c:a4:6b:3c:e8:57:66:7b:10:88:76:4c:d6: f0:85:05:c8:e2:f7:f8:de:15:10:98:64:7c:11:81: b9:13:f0:8f:a2:6e:2b:5e:33:4d:ea:e8:77:68:a8: a4:02:62:2d:3e:b3:55:57:ac:2a:d2:d5:9f:83:64: ee:a2:4d:45:fd:d9:46:25:03:d6:e9:fd:2b:a6:1b: a4:ee:29:be:a8:64:4c:ca:e0:be:63:e0:fb:ba:eb: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4D:80:D1:06:A9:52:85:4C:1F:86:6F:C0:3F:57:73:CD:56:56:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ae11fbe-47b2-39e3-b43e-158265ff2e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.165.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8a:db:29:14:1e:a9:63:0c:d8:73:5f:12:7f:28:a3:90:15: ac:54:20:8b:27:d0:06:3e:8d:ba:3d:7f:40:cf:73:14:72:13: b4:cb:c5:cc:af:f4:86:ed:95:64:ed:54:a1:aa:a4:28:0e:d2: a7:e5:26:24:b3:43:d4:c3:d1:52:fd:37:51:32:f8:60:9f:ae: 26:aa:8a:6f:be:7b:85:38:dc:c0:57:44:59:06:91:88:3d:d2: 65:41:30:bf:4d:c0:10:88:aa:c6:51:ae:48:25:1c:46:9d:db: 5b:c4:36:cf:54:78:50:a5:f5:a2:1c:b0:c4:be:b9:37:2e:b5: b2:d2:11:37:14:bc:c9:d5:5e:e8:1d:8d:81:a3:62:fd:11:0c: 21:d9:2e:d3:7c:c1:48:f7:f4:97:2b:35:ef:c4:c4:00:dc:6c: fe:1c:81:c3:fb:1e:14:82:90:6c:9b:78:44:a8:55:dd:ee:0a: fb:f4:74:39:45:e0:d3:8f:97:11:67:8e:86:a9:6a:56:55:dd: d3:cb:fb:22:28:44:96:f2:a1:70:65:e8:a7:3b:80:17:af:fb: 38:2a:02:d7:a3:b2:dd:9e:5c:ef:43:5d:52:e8:6d:b4:94:64: 5c:eb:00:ac:a3:4b:00:c0:8f:5a:0e:00:28:00:db:cb:3d:ad: 32:af:11:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnyqi4vGvEfv5E0RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyMzExMDIyMFoXDTI1MDgyMTExMDIyMFowLzEtMCsGA1UEAxMk M2U1OTZjMTktNjNiNC00NzljLWIxMmQtM2EyZGIyNTUwNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHSrWzJ4N41UCFCGKiE7o8kNo3L1oFalw9Zt OrCojZZ3WsaJ2bVI8GVhvZKVXEbVR8Vs2Et4Tqm1JsQv3TrmMmnyBqxk9cvfvwBF hahYEVRlBlsLduIi5Mx9NhjKuIGfR0zfoamrq8anWKejPT90H4saCtsWOIxKNTF0 gNpMUHaqEO6KN5foBkb6rG2TrKWhf90OV9wIoKw7ua1vOwpg70mlTTC1YUykazzo V2Z7EIh2TNbwhQXI4vf43hUQmGR8EYG5E/CPom4rXjNN6uh3aKikAmItPrNVV6wq 0tWfg2Tuok1F/dlGJQPW6f0rphuk7im+qGRMyuC+Y+D7uusnYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxNgNEGqVKFTB+Gb8A/V3PNVlbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2FlMTFmYmUtNDdiMi0z OWUzLWI0M2UtMTU4MjY1ZmYyZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2K2ykUHqljDNhzXxJ/KKOQFaxUIIsn0AY+jbo9f0DPcxRyE7TLxcyv 9IbtlWTtVKGqpCgO0qflJiSzQ9TD0VL9N1Ey+GCfriaqim++e4U43MBXRFkGkYg9 0mVBML9NwBCIqsZRrkglHEad21vENs9UeFCl9aIcsMS+uTcutbLSETcUvMnVXugd jYGjYv0RDCHZLtN8wUj39JcrNe/ExADcbP4cgcP7HhSCkGybeESoVd3uCvv0dDlF 4NOPlxFnjoapalZV3dPL+yIoRJbyoXBl6Kc7gBev+zgqAtejst2eXO9DXVLobbSU ZFzrAKyjSwDAj1oOACgA28s9rTKvEZc= -----END CERTIFICATE-----Generated at Sun Jun 15 20:48:11 2025 by rpki-client