$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69d27512-d4ff-3715-a82b-86ca09da9e44.roa File: 69d27512-d4ff-3715-a82b-86ca09da9e44.roa (raw, json) Hash identifier: Fc9unvelmgVwFnOGVnAXCHvY3AyYrDi48CUl2Ym0Cu8= Subject key identifier: 52:55:40:BE:E1:B9:1F:54:88:D9:21:1C:7E:29:0A:DB:0B:B2:EF:67 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858499BCDB2E979858724BE53EDB0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69d27512-d4ff-3715-a82b-86ca09da9e44.roa Signing time: Tue 22 Apr 2025 08:18:35 +0000 ROA not before: Tue 22 Apr 2025 08:18:35 +0000 ROA not after: Mon 21 Jul 2025 08:18:35 +0000 asID: 18779 IP address blocks: 104.253.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:cd:b2:e9:79:85:87:24:be:53:ed:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 22 08:18:35 2025 GMT Not After : Jul 21 08:18:35 2025 GMT Subject: CN=21f68d4f-6dcc-42ab-92ae-d8f419202bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a8:22:73:f6:11:cf:6a:2c:39:0c:71:fb:81: b0:03:67:5b:4c:37:29:8b:50:5c:71:76:c7:82:81: f3:77:ae:a2:44:98:73:5a:7d:9a:7f:b3:67:35:e9: 0f:66:30:dd:b2:c3:a2:1b:50:02:ea:ae:85:10:0f: d8:4d:a6:60:69:85:41:84:96:63:ca:83:d6:a2:7a: 9e:d1:68:5b:d3:de:2c:48:ae:0e:dd:ed:a9:fa:06: 53:53:eb:f9:a9:59:98:44:38:45:bf:dd:08:1a:9c: 9a:89:5f:35:7a:e2:11:e0:1e:75:24:98:83:9b:b7: 47:93:aa:05:70:7b:8e:bd:04:f2:ac:31:a1:46:7b: 9c:03:60:94:9e:f5:5c:a0:6c:20:92:35:c4:0f:2f: 15:80:81:4f:22:34:47:79:4f:41:bd:e7:5f:c2:b7: 05:5e:6f:b3:13:4c:cb:78:f7:26:97:2f:7b:94:93: cb:4c:8e:7d:7a:d5:fd:d7:df:a7:ca:b6:59:1c:87: 5d:b5:c4:2c:52:2b:3a:08:3f:11:17:53:05:b4:b7: f6:72:1e:55:e4:7a:09:af:97:38:7b:8a:ca:0e:25: f7:44:10:0c:60:e4:e1:76:0e:e1:63:85:91:1d:fa: a3:1c:b5:43:38:70:20:f5:27:38:aa:70:39:aa:15: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:55:40:BE:E1:B9:1F:54:88:D9:21:1C:7E:29:0A:DB:0B:B2:EF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69d27512-d4ff-3715-a82b-86ca09da9e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e0:51:b4:b4:47:9e:00:29:c4:7b:75:94:70:08:d6:ad:b1: 3f:10:72:61:87:0b:62:3f:19:55:fb:7d:39:ba:0c:08:d2:81: 43:11:d9:45:29:b8:e2:dc:c6:c3:4c:1b:c0:2c:fd:05:f8:20: cb:67:7f:e2:f5:f0:30:dd:39:e7:9c:dc:0f:51:99:34:e1:e8: 93:14:ef:14:25:0e:0c:40:cf:f4:ac:0a:f9:c6:89:3d:0d:4f: a3:4e:b9:0e:75:90:84:bb:bd:7e:e8:0b:7c:59:a4:e0:d1:37: b8:fc:e5:f8:07:77:75:cf:6a:93:d3:b2:d2:77:7d:8f:19:e9: b2:cb:53:b1:53:45:d0:82:ba:14:ae:8d:33:93:84:8b:9f:62: c5:85:a5:c1:15:fe:c1:d3:07:6b:ec:76:62:45:c9:6b:55:e4: 65:1c:ef:21:78:3d:4d:8c:b0:27:09:39:99:8b:39:e4:d7:9e: a5:5c:27:42:b1:5b:95:fc:49:e6:8c:38:cb:4f:6c:b4:ac:4d: 69:ba:28:25:86:4c:38:4d:61:af:91:39:16:10:b9:79:c2:a5: f5:b1:26:e2:1b:99:e2:3f:09:84:aa:fd:d6:69:ef:56:7c:45: 55:48:4f:ae:c7:ef:76:75:0e:ed:c6:a9:e3:e2:f4:7f:65:3c: f5:d1:d3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmbzbLpeYWHJL5T7bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQyMjA4MTgzNVoXDTI1MDcyMTA4MTgzNVowLzEtMCsGA1UEAxMk MjFmNjhkNGYtNmRjYy00MmFiLTkyYWUtZDhmNDE5MjAyYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6gic/YRz2osOQxx+4GwA2dbTDcpi1BccXbH goHzd66iRJhzWn2af7NnNekPZjDdssOiG1AC6q6FEA/YTaZgaYVBhJZjyoPWonqe 0Whb094sSK4O3e2p+gZTU+v5qVmYRDhFv90IGpyaiV81euIR4B51JJiDm7dHk6oF cHuOvQTyrDGhRnucA2CUnvVcoGwgkjXEDy8VgIFPIjRHeU9BvedfwrcFXm+zE0zL ePcmly97lJPLTI59etX919+nyrZZHIddtcQsUis6CD8RF1MFtLf2ch5V5HoJr5c4 e4rKDiX3RBAMYOThdg7hY4WRHfqjHLVDOHAg9Sc4qnA5qhUw6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJVQL7huR9UiNkhHH4pCtsLsu9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjlkMjc1MTItZDRmZi0z NzE1LWE4MmItODZjYTA5ZGE5ZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTgUbS0R54AKcR7dZRwCNatsT8QcmGHC2I/GVX7fTm6DAjSgUMR2UUp uOLcxsNMG8As/QX4IMtnf+L18DDdOeec3A9RmTTh6JMU7xQlDgxAz/SsCvnGiT0N T6NOuQ51kIS7vX7oC3xZpODRN7j85fgHd3XPapPTstJ3fY8Z6bLLU7FTRdCCuhSu jTOThIufYsWFpcEV/sHTB2vsdmJFyWtV5GUc7yF4PU2MsCcJOZmLOeTXnqVcJ0Kx W5X8SeaMOMtPbLSsTWm6KCWGTDhNYa+RORYQuXnCpfWxJuIbmeI/CYSq/dZp71Z8 RVVIT67H73Z1Du3GqePi9H9lPPXR00M= -----END CERTIFICATE-----Generated at Sat Apr 26 22:48:20 2025 by rpki-client