$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa File: 1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa (raw, json) Hash identifier: V4GBnpSjv81L5RfUqo0PAlKLWmc9bIBprKefc4DSnrU= Subject key identifier: 3A:31:D2:55:A2:2E:C1:D2:1E:99:C9:C9:D4:DE:B3:1E:8A:75:5A:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C50E086C112EF97A36A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.20.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:0e:08:6c:11:2e:f9:7a:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=f0d39e1d-6f02-4450-815d-ae1833ada6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:eb:56:9c:3d:89:2d:cf:fe:7f:12:18:fe:8b: 1e:7b:20:1b:0d:2e:a6:85:dc:8f:c9:20:8e:9a:75: 09:f1:ef:00:fc:a2:70:e6:e4:b1:09:f1:3d:1e:e1: 79:68:6a:6f:ad:c3:10:8b:b0:98:9d:47:0b:8a:fe: d8:76:5d:96:8b:40:fc:67:81:57:7a:fe:d7:21:96: db:2f:5a:dc:96:42:0e:90:e7:3d:51:e8:f1:7a:eb: a8:b7:b5:b0:1b:21:82:0b:92:a5:4e:c9:f9:2f:90: d2:ac:7a:15:56:85:8f:e5:85:d7:05:27:28:d3:b6: 26:5a:c9:69:48:20:b2:60:77:b4:68:bd:61:98:3e: 8a:68:c9:1b:b6:f0:c2:aa:38:ff:08:bd:d0:ef:ab: 43:75:dd:b4:6e:d5:5e:f6:7f:f8:4e:d9:e1:a9:7b: 37:14:94:53:4f:fb:e3:79:d5:a8:4f:53:38:ad:78: c5:e1:2c:23:d1:d4:e8:ef:50:3e:4e:66:b1:71:ec: 7a:99:68:25:09:40:66:30:ec:ed:01:7a:21:d1:71: 0e:2f:a9:6d:49:87:89:fa:b5:72:a9:03:a1:47:12: af:d0:f6:98:3f:09:45:24:5b:d9:05:33:e3:0e:90: 6f:c9:4e:5b:62:e8:1c:5a:db:0b:66:8b:7b:55:83: cf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:D2:55:A2:2E:C1:D2:1E:99:C9:C9:D4:DE:B3:1E:8A:75:5A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:db:23:b7:63:3d:0b:d4:ba:1a:00:e8:85:ac:79:97:19:a8: 4d:d8:51:48:fd:0b:f5:86:c1:eb:0c:6d:11:8c:11:5b:7e:58: 6e:7c:e3:bd:a9:cc:79:1e:a9:18:44:82:c4:0e:a3:60:c9:cd: 36:80:fb:1d:56:02:ae:41:6a:dd:c3:02:a0:44:b6:e6:9f:2a: 17:8b:51:e0:d5:1e:aa:2d:cc:25:b9:d2:e4:02:96:72:ba:86: 35:46:14:a5:98:ba:0d:d3:84:29:5f:bb:7d:cb:37:b1:f7:c3: 95:a1:49:c4:60:0c:a2:ad:4f:1f:28:78:d8:58:7a:26:bc:64: 8e:5b:20:64:07:bf:63:08:de:33:45:58:65:03:55:7a:17:f7: 4c:59:d0:55:1f:0e:2f:d5:19:71:e7:37:d1:bc:e5:32:7c:93: 48:1e:07:2a:b8:66:1f:d5:83:e1:cf:6a:97:41:ad:90:28:1f: 4b:d1:bc:fd:81:47:95:54:c7:76:fa:99:38:ff:96:1a:f9:da: be:d5:a6:75:5d:6d:eb:0f:1f:46:87:86:fb:9d:9c:23:ce:d1: e9:93:d0:6d:af:53:a9:6b:9e:cc:0f:d4:77:01:c3:07:a5:56: c5:2b:31:90:36:05:b1:4d:ed:09:a8:8f:9b:27:39:66:65:2f: 34:35:33:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsUOCGwRLvl6NqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ZjBkMzllMWQtNmYwMi00NDUwLTgxNWQtYWUxODMzYWRhNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgetWnD2JLc/+fxIY/oseeyAbDS6mhdyPySCO mnUJ8e8A/KJw5uSxCfE9HuF5aGpvrcMQi7CYnUcLiv7Ydl2Wi0D8Z4FXev7XIZbb L1rclkIOkOc9Uejxeuuot7WwGyGCC5KlTsn5L5DSrHoVVoWP5YXXBSco07YmWslp SCCyYHe0aL1hmD6KaMkbtvDCqjj/CL3Q76tDdd20btVe9n/4TtnhqXs3FJRTT/vj edWoT1M4rXjF4Swj0dTo71A+Tmaxcex6mWglCUBmMOztAXoh0XEOL6ltSYeJ+rVy qQOhRxKv0PaYPwlFJFvZBTPjDpBvyU5bYugcWtsLZot7VYPPpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDox0lWiLsHSHpnJydTesx6KdVrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWM4ZWRkODAtNjFhMi0z MmQ5LWEwYzctYTQwYzc3ZDYwNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnbI7djPQvUuhoA6IWseZcZqE3YUUj9C/WGwesMbRGMEVt+WG58472p zHkeqRhEgsQOo2DJzTaA+x1WAq5Bat3DAqBEtuafKheLUeDVHqotzCW50uQClnK6 hjVGFKWYug3ThClfu33LN7H3w5WhScRgDKKtTx8oeNhYeia8ZI5bIGQHv2MI3jNF WGUDVXoX90xZ0FUfDi/VGXHnN9G85TJ8k0geByq4Zh/Vg+HPapdBrZAoH0vRvP2B R5VUx3b6mTj/lhr52r7VpnVdbesPH0aHhvudnCPO0emT0G2vU6lrnswP1HcBwwel VsUrMZA2BbFN7Qmoj5snOWZlLzQ1M9E= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:11 2025 by rpki-client