$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fbafd27f-52a6-323b-8051-c0ee4cd3ec44.roa File: fbafd27f-52a6-323b-8051-c0ee4cd3ec44.roa (raw, json) Hash identifier: 9NYf64Pg9j5FoRH1vtTQIkLpvWo9/fe1+9d8AOLt3Hc= Subject key identifier: 99:CD:10:2F:02:62:84:31:FA:B3:86:26:0E:ED:A7:A8:0A:82:2D:08 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A0D6A90FA28DE6F3095E24E00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fbafd27f-52a6-323b-8051-c0ee4cd3ec44.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 40676 IP address blocks: 104.253.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:90:fa:28:de:6f:30:95:e2:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=93b8cfa6-6518-4ea2-a436-120011f08c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:b3:c0:e6:b5:0d:d3:73:b8:44:24:f7:10: 85:77:54:e2:fd:fb:27:74:e9:13:50:66:f5:a6:a5: 4f:ec:eb:ab:71:81:55:cd:ca:8a:7c:2a:2b:c7:2c: 01:0d:98:fd:78:3d:24:64:20:d4:de:94:5b:73:7d: 10:c2:2e:f0:c2:bc:86:8a:a2:b6:29:a8:c5:c4:72: 2e:9f:7b:d8:de:57:1f:42:54:86:4e:e6:7c:56:2f: 02:de:cb:21:1f:ea:ee:35:59:cc:67:1e:d0:5f:f8: 04:73:91:38:09:37:fe:31:38:46:50:59:f3:8c:ba: 1b:49:c9:20:12:b8:83:c6:48:6a:ed:8a:28:b5:2b: 42:69:43:57:91:7d:00:e8:61:ea:5a:20:29:cb:06: fe:ea:c6:d6:c9:a9:c1:0e:ca:60:53:59:bf:e4:6a: 92:c1:fb:00:77:0c:03:8f:41:20:a6:f3:90:fb:52: db:31:3f:7a:2e:d7:b6:34:49:c3:7d:66:61:6c:cd: a2:8e:a2:c1:2c:9a:7a:6c:f2:62:74:33:b0:ca:c3: 71:46:3a:63:c2:90:2b:fd:bc:cd:53:48:cd:e2:02: 76:50:5a:c6:26:5b:3c:b8:4d:67:52:c5:f6:00:d9: 8f:e2:70:da:2d:4f:5b:df:89:2d:c6:24:b6:8d:5c: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:10:2F:02:62:84:31:FA:B3:86:26:0E:ED:A7:A8:0A:82:2D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fbafd27f-52a6-323b-8051-c0ee4cd3ec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:46:68:83:b4:5c:a8:40:b4:fa:0e:e5:dc:fa:1e:35:bf:8e: 0e:af:de:19:9a:61:91:a9:91:c0:3f:00:9b:db:ab:bc:7f:3b: 56:c8:cd:b8:01:e6:8a:64:e8:d3:31:8b:32:a8:23:30:e6:fb: 40:00:4d:1c:f6:d2:38:09:04:00:5c:e6:b5:8b:a3:79:64:c5: a6:7e:34:9c:09:d8:e7:97:be:58:b7:2b:b0:2d:a2:a1:cc:32: ab:94:f2:5a:5b:02:ba:23:2a:2d:68:0e:6d:05:b6:38:5a:37: c9:25:8b:fa:a6:ad:57:7b:51:e6:a0:b4:68:21:4b:bb:66:66: 77:d2:62:6d:eb:53:37:22:77:e5:03:e6:b2:ce:f9:30:13:91: 05:3b:4d:6c:a2:a4:e5:68:71:50:b7:29:89:d8:a6:18:28:fb: ec:2b:78:dd:18:68:6c:5a:96:6b:8b:94:56:15:9a:e9:ad:3a: fd:5c:a6:20:b4:ba:83:a7:df:43:6d:44:f9:f8:ec:e6:22:7a: 67:dc:08:00:c4:d4:fd:ad:10:0f:e4:28:e4:aa:ae:21:b8:ee: 2e:e4:c0:75:93:dd:5c:cc:50:df:ce:d9:df:07:d4:04:79:3a: 1a:5b:ae:7b:a3:d1:aa:be:fd:dd:3f:bd:cb:58:be:e4:bc:d5: 53:37:d2:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNapD6KN5vMJXiTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk OTNiOGNmYTYtNjUxOC00ZWEyLWE0MzYtMTIwMDExZjA4YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTazwOa1DdNzuEQk9xCFd1Ti/fsndOkTUGb1 pqVP7OurcYFVzcqKfCorxywBDZj9eD0kZCDU3pRbc30Qwi7wwryGiqK2KajFxHIu n3vY3lcfQlSGTuZ8Vi8C3sshH+ruNVnMZx7QX/gEc5E4CTf+MThGUFnzjLobSckg EriDxkhq7YootStCaUNXkX0A6GHqWiApywb+6sbWyanBDspgU1m/5GqSwfsAdwwD j0EgpvOQ+1LbMT96Lte2NEnDfWZhbM2ijqLBLJp6bPJidDOwysNxRjpjwpAr/bzN U0jN4gJ2UFrGJls8uE1nUsX2ANmP4nDaLU9b34ktxiS2jVwbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnNEC8CYoQx+rOGJg7tp6gKgi0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmJhZmQyN2YtNTJhNi0z MjNiLTgwNTEtYzBlZTRjZDNlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRGaIO0XKhAtPoO5dz6HjW/jg6v3hmaYZGpkcA/AJvbq7x/O1bIzbgB 5opk6NMxizKoIzDm+0AATRz20jgJBABc5rWLo3lkxaZ+NJwJ2OeXvli3K7AtoqHM MquU8lpbArojKi1oDm0FtjhaN8kli/qmrVd7UeagtGghS7tmZnfSYm3rUzcid+UD 5rLO+TATkQU7TWyipOVocVC3KYnYphgo++wreN0YaGxalmuLlFYVmumtOv1cpiC0 uoOn30NtRPn47OYiemfcCADE1P2tEA/kKOSqriG47i7kwHWT3VzMUN/O2d8H1AR5 Ohpbrnuj0aq+/d0/vctYvuS81VM30mg= -----END CERTIFICATE-----Generated at Mon Jun 16 23:25:43 2025 by rpki-client