$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2063bf2-fb15-3abb-9d75-6a6e5bb5223e.roa File: a2063bf2-fb15-3abb-9d75-6a6e5bb5223e.roa (raw, json) Hash identifier: 9SzJWxB2MBUpy6DodOe+Dbr2Hp0/tn354cSHdBbYWGc= Subject key identifier: 5B:20:3C:23:0E:D2:95:D7:45:21:13:50:F9:F9:1E:30:08:FA:20:BB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584975445E371A59D694BB1CE680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2063bf2-fb15-3abb-9d75-6a6e5bb5223e.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 44477 IP address blocks: 104.252.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5e:37:1a:59:d6:94:bb:1c:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=fb52e239-8409-43ad-86e3-ccda9ddee503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:f9:73:eb:51:5e:b6:86:77:2c:cf:30:c4: 75:11:db:55:e9:6e:7a:aa:fd:e1:23:dc:81:f5:79: c3:60:9b:75:f1:36:d1:df:c5:e7:75:ac:8f:1a:64: 30:f2:0f:e1:a1:18:0b:0b:d7:71:30:28:3e:e7:70: 79:78:ea:b6:a5:b6:e6:d1:e5:98:a1:e6:92:9c:9d: da:dd:6c:37:26:d6:12:fc:79:e6:5c:21:69:89:56: c5:d6:2b:16:d1:cf:84:6b:5d:63:23:8d:86:c8:f6: f4:13:84:23:5b:ad:9e:83:ae:42:c4:15:d4:3e:90: 23:b5:71:f9:e8:be:95:a1:04:c1:33:f9:89:3a:3a: d5:dc:f9:de:62:30:18:48:31:ee:63:21:c1:94:c3: 6f:ce:f4:5e:0f:51:6c:70:f7:05:08:45:58:65:89: f3:33:47:2b:28:b3:1e:05:4f:e2:e4:47:c7:23:66: 78:35:93:7b:47:14:02:82:c8:7a:0a:e6:ad:6a:07: ad:b2:0d:45:a3:2a:d0:4a:7f:e4:e1:b8:db:25:bf: de:ae:7a:b1:b6:47:8d:33:44:3b:a3:ce:a5:cb:6e: c0:a0:0f:8f:a6:98:0b:69:5d:67:65:e0:78:df:f4: fe:3b:65:08:36:1f:88:48:70:fd:9e:fb:35:40:92: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:20:3C:23:0E:D2:95:D7:45:21:13:50:F9:F9:1E:30:08:FA:20:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2063bf2-fb15-3abb-9d75-6a6e5bb5223e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8c:29:20:a0:f0:a8:0c:65:3c:6f:81:0e:cb:61:0a:98:64: 99:cc:e9:93:aa:1d:57:12:08:61:e6:0e:da:7a:77:c6:0f:66: ff:75:90:8b:4f:d2:c2:c0:e9:c7:86:82:f4:2c:02:88:74:00: 3a:a7:11:fb:e7:d4:12:3a:dc:3b:64:3b:0c:a3:a4:bf:08:3d: 42:7b:69:0d:82:b6:29:2d:b6:eb:e2:d0:39:24:a4:bb:72:65: f8:68:a6:69:82:e9:68:af:15:81:18:be:7f:9b:1c:d6:48:f9: bd:38:94:6b:3b:02:1b:9c:42:ca:00:d1:b4:3d:a6:b2:c4:e3: 88:5e:e4:a1:05:ec:62:84:c9:30:90:73:16:e1:0c:6b:d6:0c: 1f:86:cd:e6:8a:df:99:16:76:32:f3:b8:10:51:c9:18:ce:47: 0d:ea:78:10:f9:cf:56:c1:2a:5c:8b:9d:f0:aa:df:4b:2e:d7: 47:86:66:8c:8c:2b:b7:f7:e1:39:91:4d:6d:3b:3b:b3:b2:9f: 9b:d1:1c:4f:39:c7:8c:16:f0:f2:36:a5:bd:71:df:1e:93:96: 9f:4d:a6:d2:d4:51:f1:0e:ec:0d:62:cd:c7:a6:52:6d:7b:db: ee:67:15:0d:7f:e9:db:52:e8:37:c3:b7:4a:2c:3f:fd:41:33: 12:db:b6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF43GlnWlLsc5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZmI1MmUyMzktODQwOS00M2FkLTg2ZTMtY2NkYTlkZGVlNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApub5c+tRXraGdyzPMMR1EdtV6W56qv3hI9yB 9XnDYJt18TbR38XndayPGmQw8g/hoRgLC9dxMCg+53B5eOq2pbbm0eWYoeaSnJ3a 3Ww3JtYS/HnmXCFpiVbF1isW0c+Ea11jI42GyPb0E4QjW62eg65CxBXUPpAjtXH5 6L6VoQTBM/mJOjrV3PneYjAYSDHuYyHBlMNvzvReD1FscPcFCEVYZYnzM0crKLMe BU/i5EfHI2Z4NZN7RxQCgsh6Cuatagetsg1FoyrQSn/k4bjbJb/ernqxtkeNM0Q7 o86ly27AoA+PppgLaV1nZeB43/T+O2UINh+ISHD9nvs1QJLdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsgPCMO0pXXRSETUPn5HjAI+iC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTIwNjNiZjItZmIxNS0z YWJiLTlkNzUtNmE2ZTViYjUyMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmMKSCg8KgMZTxvgQ7LYQqYZJnM6ZOqHVcSCGHmDtp6d8YPZv91kItP 0sLA6ceGgvQsAoh0ADqnEfvn1BI63DtkOwyjpL8IPUJ7aQ2Ctikttuvi0DkkpLty ZfhopmmC6WivFYEYvn+bHNZI+b04lGs7AhucQsoA0bQ9prLE44he5KEF7GKEyTCQ cxbhDGvWDB+GzeaK35kWdjLzuBBRyRjORw3qeBD5z1bBKlyLnfCq30su10eGZoyM K7f34TmRTW07O7Oyn5vRHE85x4wW8PI2pb1x3x6Tlp9NptLUUfEO7A1izcemUm17 2+5nFQ1/6dtS6DfDt0osP/1BMxLbtiU= -----END CERTIFICATE-----Generated at Tue Apr 29 21:42:41 2025 by rpki-client