$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa File: 88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa (raw, json) Hash identifier: ZyxhXZ4q+l41yV1v1pM2v/TIOOEV2InpeKcZ9WYgLcY= Subject key identifier: E5:B8:07:7B:60:75:89:7D:32:54:73:87:EA:A9:F6:4E:6D:86:B1:4A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584949FEB35927CC3D10C1800220 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 62160 IP address blocks: 104.253.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:b3:59:27:cc:3d:10:c1:80:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=2f81e0e4-36de-4c95-83f5-ab6b1fb82b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:50:54:2f:87:fc:17:27:39:d2:2f:e6:33: 4d:a5:d2:55:8f:55:a4:74:fd:f2:44:31:24:ac:68: 56:3b:49:8e:58:dc:18:b5:61:cd:4c:b1:0b:a4:98: c9:3f:e3:90:f7:55:83:b1:3d:9e:04:38:79:d2:eb: 75:f1:dd:4f:5f:f6:bc:f1:88:d9:c4:4c:dd:78:6f: fe:5b:6c:2f:86:6a:ac:ee:74:f2:23:05:c1:cb:c1: 63:cf:56:39:0a:03:00:0f:ae:06:a0:57:e3:bd:88: 8e:47:3b:b0:5e:a8:23:e1:34:97:d8:9b:ce:2d:25: 8e:93:3d:b1:49:c6:03:2c:bb:23:ee:64:8a:ba:86: 87:58:44:cd:ff:25:bc:16:35:f8:0a:9e:b9:15:41: 4c:d1:0e:e7:a0:1f:a5:cf:60:22:12:cd:ce:a1:1d: 6f:33:18:df:f1:46:6e:57:7a:03:26:97:00:59:33: 22:c4:72:5e:e3:c6:3a:47:1a:9e:a6:7f:7e:8d:ba: f6:30:e3:24:90:44:f8:1b:e2:c9:66:91:0a:53:40: d8:83:77:ec:a0:1a:8a:05:08:ae:79:c9:28:bd:44: 3b:50:ee:25:dc:01:76:de:80:95:36:b6:ae:8d:c2: b2:7e:6a:5b:40:6f:b2:9c:27:ee:06:d8:c8:be:bf: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B8:07:7B:60:75:89:7D:32:54:73:87:EA:A9:F6:4E:6D:86:B1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a3:3c:4b:ec:63:2b:e8:a1:41:21:80:58:2e:e2:02:1b:4d: b0:d0:9b:28:31:b6:84:06:36:a2:28:7b:4d:68:95:5c:a9:1f: 96:69:10:dc:98:c3:a4:26:fa:3a:a1:75:12:92:65:90:08:7d: 6e:95:78:b2:54:fb:16:67:1a:96:91:9c:25:76:58:54:c7:18: 5d:6b:7e:66:d2:1d:15:33:be:3d:fb:dd:3c:41:e6:1f:b4:df: 78:86:2a:c4:92:61:33:e3:c7:5c:25:2e:b0:47:25:b0:03:e4: 2e:5d:df:9d:96:5a:96:f0:68:04:c6:cb:5f:7e:38:30:f1:cf: d4:2e:f5:ec:76:4e:54:95:53:2c:29:8f:b5:ae:a5:39:c6:9c: c8:b6:12:8f:d6:55:c6:b9:08:db:82:27:07:0a:25:e9:7a:23: b3:e2:c2:da:43:58:92:23:5c:ef:fe:49:45:ea:3d:a3:35:67: 81:3c:45:66:fb:9b:6e:c6:5e:7b:45:94:e9:12:18:3a:3b:46: c5:4e:53:e0:5c:5b:1c:b3:5f:8b:dd:f2:e7:f9:89:b5:2e:ff: cd:44:25:19:e3:85:49:0b:e9:9f:38:7b:81:2d:71:0b:0f:f3: ea:f3:51:6f:cf:78:c6:2f:48:99:d5:32:c8:9a:89:9d:c5:ac: 2c:0c:a4:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/rNZJ8w9EMGAAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MmY4MWUwZTQtMzZkZS00Yzk1LTgzZjUtYWI2YjFmYjgyYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiVQVC+H/BcnOdIv5jNNpdJVj1WkdP3yRDEk rGhWO0mOWNwYtWHNTLELpJjJP+OQ91WDsT2eBDh50ut18d1PX/a88YjZxEzdeG/+ W2wvhmqs7nTyIwXBy8Fjz1Y5CgMAD64GoFfjvYiORzuwXqgj4TSX2JvOLSWOkz2x ScYDLLsj7mSKuoaHWETN/yW8FjX4Cp65FUFM0Q7noB+lz2AiEs3OoR1vMxjf8UZu V3oDJpcAWTMixHJe48Y6Rxqepn9+jbr2MOMkkET4G+LJZpEKU0DYg3fsoBqKBQiu eckovUQ7UO4l3AF23oCVNraujcKyfmpbQG+ynCfuBtjIvr/q5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW4B3tgdYl9MlRzh+qp9k5thrFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODhjNDZlMTktZWNiNy0z NzEzLTlhNTctN2RlNWVkNDM0NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADujPEvsYyvooUEhgFgu4gIbTbDQmygxtoQGNqIoe01olVypH5ZpENyY w6Qm+jqhdRKSZZAIfW6VeLJU+xZnGpaRnCV2WFTHGF1rfmbSHRUzvj373TxB5h+0 33iGKsSSYTPjx1wlLrBHJbAD5C5d352WWpbwaATGy19+ODDxz9Qu9ex2TlSVUywp j7WupTnGnMi2Eo/WVca5CNuCJwcKJel6I7PiwtpDWJIjXO/+SUXqPaM1Z4E8RWb7 m27GXntFlOkSGDo7RsVOU+BcWxyzX4vd8uf5ibUu/81EJRnjhUkL6Z84e4EtcQsP 8+rzUW/PeMYvSJnVMsiaiZ3FrCwMpAE= -----END CERTIFICATE-----Generated at Sun Apr 27 16:47:39 2025 by rpki-client