$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d936796a-8c67-3080-b581-39a2880fb9de.roa File: d936796a-8c67-3080-b581-39a2880fb9de.roa (raw, json) Hash identifier: reqQEiE0bil1+JXaaOryKOjxBrzpbhqry2vRJZCv9Ss= Subject key identifier: 98:4F:E3:BB:06:0B:1C:A7:AB:90:8B:21:CD:D7:86:94:34:63:FC:13 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584904573F1C1F727FF9ADC35100 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d936796a-8c67-3080-b581-39a2880fb9de.roa Signing time: Thu 27 Feb 2025 02:12:51 +0000 ROA not before: Thu 27 Feb 2025 02:12:51 +0000 ROA not after: Wed 28 May 2025 01:12:51 +0000 asID: 400536 IP address blocks: 104.164.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:04:57:3f:1c:1f:72:7f:f9:ad:c3:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 27 02:12:51 2025 GMT Not After : May 28 01:12:51 2025 GMT Subject: CN=685b6c4e-e3ff-4980-bc91-5cfbc07df0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:f0:72:8a:b8:bf:29:57:75:6f:f7:38:01: a3:23:1f:92:ab:b7:36:29:b0:a9:8f:dc:4a:4c:6d: c6:ab:8e:d1:78:6f:ab:be:71:99:c3:50:b8:a5:d9: ed:4c:fe:7e:f0:d2:57:24:e2:34:b0:75:6c:a2:33: 23:3f:18:08:4b:62:97:cd:bd:87:37:20:ec:ce:b0: a3:93:05:90:57:98:b6:c4:88:1b:ff:92:38:36:f4: 41:00:13:79:b2:18:00:8f:a3:29:08:57:73:db:91: d0:e1:9f:11:b2:de:ee:5c:69:d0:64:48:3f:c3:e5: c3:ac:cb:69:f5:ac:b6:80:9f:da:fc:fa:f0:0a:a7: ff:d5:01:ee:5a:4a:00:a0:ef:09:f6:c2:fe:97:00: a7:81:e8:0a:e8:15:0a:96:8b:a6:6d:65:51:20:33: a8:c3:6a:9a:c9:17:2c:e9:5a:9c:1e:93:26:b9:b8: 46:b6:1b:1a:2c:b7:24:dd:21:74:ac:24:fc:99:bd: d1:e5:71:33:c2:18:1e:6d:c6:4c:38:84:6c:17:7e: be:18:fe:7f:74:51:93:a6:26:96:92:0f:ab:41:fa: 89:7d:26:3f:44:43:8e:e2:7e:89:7d:4e:84:c0:f1: 73:31:b6:a1:3e:e1:76:29:dc:71:41:17:38:4c:cc: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4F:E3:BB:06:0B:1C:A7:AB:90:8B:21:CD:D7:86:94:34:63:FC:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d936796a-8c67-3080-b581-39a2880fb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:99:ec:73:9a:86:b7:85:82:d0:e3:cf:25:0d:3c:29:2e:3e: da:b9:b5:9c:3f:71:28:5a:69:1a:7e:52:63:99:c8:7c:5b:c1: 1b:a2:8c:22:a3:ad:90:6f:1a:83:29:96:09:46:26:92:22:f2: 8b:26:a8:ce:2d:22:70:c6:4c:ee:e9:08:e0:b8:e6:2e:9e:f9: 74:fa:43:69:68:a8:1d:f3:7f:bc:1a:19:f6:a9:8f:ef:da:e0: ad:6d:fb:5d:58:f2:2c:2e:a0:55:d1:f7:84:75:92:34:c1:6e: a0:6d:4b:69:4e:22:36:6d:ad:10:ea:d0:6c:12:20:f3:36:9e: 55:5e:50:8a:33:c3:df:a7:22:fc:56:23:b6:53:93:da:04:80: 00:2a:a5:31:7a:7c:fa:2c:46:56:70:d6:bc:39:68:64:28:4c: c8:9a:86:31:a5:6e:1e:73:16:79:3f:e9:c2:07:e2:2f:8a:79: 11:1d:5a:b9:ba:87:e3:b9:49:66:fe:80:f7:3b:c7:b7:45:2d: 89:82:14:f7:0a:02:56:f1:9b:36:b0:af:38:fd:ee:5b:e7:1e: a8:aa:b5:9f:9b:26:e9:23:3a:c8:e1:1b:1d:87:34:0e:66:52: 1c:04:bd:85:71:9a:4f:b0:a4:84:75:9d:f5:f0:e7:37:c1:06: 52:96:58:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkEVz8cH3J/+a3DUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIyNzAyMTI1MVoXDTI1MDUyODAxMTI1MVowLzEtMCsGA1UEAxMk Njg1YjZjNGUtZTNmZi00OTgwLWJjOTEtNWNmYmMwN2RmMGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Szwcoq4vylXdW/3OAGjIx+Sq7c2KbCpj9xK TG3Gq47ReG+rvnGZw1C4pdntTP5+8NJXJOI0sHVsojMjPxgIS2KXzb2HNyDszrCj kwWQV5i2xIgb/5I4NvRBABN5shgAj6MpCFdz25HQ4Z8Rst7uXGnQZEg/w+XDrMtp 9ay2gJ/a/PrwCqf/1QHuWkoAoO8J9sL+lwCngegK6BUKloumbWVRIDOow2qayRcs 6VqcHpMmubhGthsaLLck3SF0rCT8mb3R5XEzwhgebcZMOIRsF36+GP5/dFGTpiaW kg+rQfqJfSY/REOO4n6JfU6EwPFzMbahPuF2KdxxQRc4TMwtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhP47sGCxynq5CLIc3XhpQ0Y/wTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDkzNjc5NmEtOGM2Ny0z MDgwLWI1ODEtMzlhMjg4MGZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKRrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiZ7HOahreFgtDjzyUNPCkuPtq5tZw/cShaaRp+UmOZyHxbwRuijCKj rZBvGoMplglGJpIi8osmqM4tInDGTO7pCOC45i6e+XT6Q2loqB3zf7waGfapj+/a 4K1t+11Y8iwuoFXR94R1kjTBbqBtS2lOIjZtrRDq0GwSIPM2nlVeUIozw9+nIvxW I7ZTk9oEgAAqpTF6fPosRlZw1rw5aGQoTMiahjGlbh5zFnk/6cIH4i+KeREdWrm6 h+O5SWb+gPc7x7dFLYmCFPcKAlbxmzawrzj97lvnHqiqtZ+bJukjOsjhGx2HNA5m UhwEvYVxmk+wpIR1nfXw5zfBBlKWWKs= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:39 2025 by rpki-client