$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78d684f4-32b1-3068-9164-1f5f3587329e.roa File: 78d684f4-32b1-3068-9164-1f5f3587329e.roa (raw, json) Hash identifier: 65BvInWk+YyL1woNJWbCumJQijqndR1cufWVV4+0j/8= Subject key identifier: D6:E6:C2:C2:08:8D:77:AD:65:D2:AB:2F:AA:92:58:9A:00:88:73:E6 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285849F2932FFB8B17A3F582F6DF40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78d684f4-32b1-3068-9164-1f5f3587329e.roa Signing time: Fri 23 May 2025 10:16:01 +0000 ROA not before: Fri 23 May 2025 10:16:01 +0000 ROA not after: Thu 21 Aug 2025 10:16:01 +0000 asID: 44477 IP address blocks: 104.252.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:93:2f:fb:8b:17:a3:f5:82:f6:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 23 10:16:01 2025 GMT Not After : Aug 21 10:16:01 2025 GMT Subject: CN=901b3db4-bfcb-4357-94ab-48b7374996d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:e5:09:3c:d0:6d:7d:c1:76:6f:41:f1:83: 17:9c:a2:21:9d:f0:9c:68:fa:9e:d8:ab:55:f4:44: 4d:e6:c9:cc:d3:a8:41:39:20:d0:8b:98:ce:19:e5: 46:ec:7c:da:e8:69:b1:f9:c9:19:95:dc:c8:fc:c7: 12:37:67:2a:c4:4d:c2:e2:61:a7:4f:fb:26:8d:76: d8:29:91:0e:d5:8d:c8:94:26:f3:3b:ca:76:80:a6: f1:be:d4:e8:6f:60:b1:f0:91:ae:41:00:6d:0f:3f: 95:f4:2c:64:c5:fa:a1:e6:87:05:5c:f1:58:ad:60: 6a:25:d3:e8:d9:03:83:4e:a5:14:ba:03:2a:25:fb: aa:f6:26:1d:58:50:8b:67:3b:55:a8:b2:61:15:56: 77:da:b4:ab:5e:da:7e:ba:f9:93:ba:85:fd:d7:28: 71:5b:1f:42:12:f1:f1:76:88:22:de:74:93:aa:15: 7a:d7:b3:06:93:b7:88:dc:d4:c9:ae:df:e8:ab:28: 34:c6:7f:6a:93:ba:da:ba:1b:83:e2:a5:88:80:ed: 47:7e:b6:d5:73:e9:8b:e5:d6:e7:ec:ba:80:6b:02: 37:01:a8:45:bd:62:72:25:b2:e8:e5:ca:a3:f9:17: 69:13:1b:d9:51:09:ce:05:79:c5:57:00:ef:64:c3: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E6:C2:C2:08:8D:77:AD:65:D2:AB:2F:AA:92:58:9A:00:88:73:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78d684f4-32b1-3068-9164-1f5f3587329e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:cc:ff:7d:bf:ea:79:b9:a1:25:85:6a:5b:d5:2d:b9:b8:a2: c7:6b:f3:d7:e7:ec:bc:80:cc:9e:24:33:42:3f:17:5f:c8:be: 46:88:cc:5a:b1:ef:5d:87:2c:ef:bb:b0:eb:27:d6:b1:55:da: 37:6e:dd:d2:4a:31:10:8d:53:43:a0:49:bd:e0:23:31:9e:6b: 6b:01:ae:a0:8b:c0:2b:a2:e3:87:ac:1a:2c:1a:b0:34:af:7b: 51:93:e3:62:d5:eb:44:99:84:4f:b3:42:4f:1e:4b:76:38:8c: e6:77:2a:dd:15:d0:00:83:e0:43:40:4a:f2:88:28:04:d0:fb: 17:6a:72:64:f5:56:00:91:ff:e1:bb:17:0a:19:4a:41:2d:e3: 7b:74:31:d5:c8:a2:52:04:21:80:e4:8b:23:ee:15:ca:90:51: cf:6e:63:4e:9f:dd:79:85:b6:98:3e:32:8d:6c:12:73:41:54: 54:de:33:81:0a:67:9b:cb:77:d4:af:9a:b9:2c:eb:8c:ce:fa: c2:02:f8:78:e4:03:6c:57:ab:ab:13:7b:5f:01:06:d9:90:eb: 39:3f:42:56:a8:29:43:5d:20:e5:2d:52:29:5c:45:74:08:0b: 90:e8:b1:c1:f1:fd:26:97:7a:8d:9c:e4:5d:40:13:65:80:52: 77:74:ab:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnyky/7ixej9YL230AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyMzEwMTYwMVoXDTI1MDgyMTEwMTYwMVowLzEtMCsGA1UEAxMk OTAxYjNkYjQtYmZjYi00MzU3LTk0YWItNDhiNzM3NDk5NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT3lCTzQbX3Bdm9B8YMXnKIhnfCcaPqe2KtV 9ERN5snM06hBOSDQi5jOGeVG7Hza6Gmx+ckZldzI/McSN2cqxE3C4mGnT/smjXbY KZEO1Y3IlCbzO8p2gKbxvtTob2Cx8JGuQQBtDz+V9Cxkxfqh5ocFXPFYrWBqJdPo 2QODTqUUugMqJfuq9iYdWFCLZztVqLJhFVZ32rSrXtp+uvmTuoX91yhxWx9CEvHx dogi3nSTqhV617MGk7eI3NTJrt/oqyg0xn9qk7rauhuD4qWIgO1HfrbVc+mL5dbn 7LqAawI3AahFvWJyJbLo5cqj+RdpExvZUQnOBXnFVwDvZMNb+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbmwsIIjXetZdKrL6qSWJoAiHPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzhkNjg0ZjQtMzJiMS0z MDY4LTkxNjQtMWY1ZjM1ODczMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrM/32/6nm5oSWFalvVLbm4osdr89fn7LyAzJ4kM0I/F1/IvkaIzFqx 712HLO+7sOsn1rFV2jdu3dJKMRCNU0OgSb3gIzGea2sBrqCLwCui44esGiwasDSv e1GT42LV60SZhE+zQk8eS3Y4jOZ3Kt0V0ACD4ENASvKIKATQ+xdqcmT1VgCR/+G7 FwoZSkEt43t0MdXIolIEIYDkiyPuFcqQUc9uY06f3XmFtpg+Mo1sEnNBVFTeM4EK Z5vLd9Svmrks64zO+sIC+HjkA2xXq6sTe18BBtmQ6zk/QlaoKUNdIOUtUilcRXQI C5DoscHx/SaXeo2c5F1AE2WAUnd0q4Q= -----END CERTIFICATE-----Generated at Tue Jun 17 13:45:57 2025 by rpki-client