$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200ff806-7d55-3b0c-a669-b108a93a32ad.roa File: 200ff806-7d55-3b0c-a669-b108a93a32ad.roa (raw, json) Hash identifier: sZkgkMr1szKxII93VMYBMIkIvhEON+x+Qfhi1KBFBRw= Subject key identifier: 4A:BF:4D:9C:64:58:A5:E3:1F:5C:8D:00:50:EE:54:10:C5:33:E5:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849A1EF3F91F389A100B6ECD8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200ff806-7d55-3b0c-a669-b108a93a32ad.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.23.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:3f:91:f3:89:a1:00:b6:ec:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=0b321f0d-8c81-47cb-86f7-b94e3f21db0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:a0:50:79:44:71:e5:c4:29:e7:66:cc:ce: 6f:2c:78:bf:6d:ba:b9:18:39:1d:4e:c3:3d:34:d7: 65:a3:ee:3d:f4:fa:47:35:8b:1a:a8:fe:84:c8:fb: 9f:70:85:c8:e9:0a:41:c9:4e:fa:00:f6:64:db:5c: f2:b0:1b:eb:74:f1:be:62:5a:0b:2a:42:54:51:41: 8c:80:ff:52:24:33:b9:4d:ed:fa:15:cb:c4:18:4a: 66:59:0f:02:65:16:a9:03:a5:bd:18:d4:d6:e9:de: a1:be:1e:c0:14:74:50:12:5d:9a:b8:78:a7:3a:9f: cd:b1:98:d3:33:6d:33:30:a7:8e:98:b5:7b:62:ec: c7:4a:e5:9b:0f:f4:86:e6:89:e7:aa:97:bb:d7:9a: 83:28:aa:a4:ef:0e:df:d0:55:b7:18:58:83:16:24: 61:9d:36:cf:1d:4d:66:9b:e5:cb:ef:8b:54:ad:a1: 4e:53:0b:12:bd:7b:d1:93:a9:00:a6:8c:89:a9:6e: 5f:af:94:d7:72:9b:15:6c:d2:73:68:52:bc:89:b7: 45:20:5f:64:38:fa:d9:32:21:f2:d7:71:36:d8:3e: 8e:27:1e:14:ea:61:0e:7a:46:a2:f2:d3:a0:c4:a3: 9a:c0:6b:87:30:0f:e8:13:65:4e:35:0f:3d:ec:0c: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BF:4D:9C:64:58:A5:E3:1F:5C:8D:00:50:EE:54:10:C5:33:E5:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200ff806-7d55-3b0c-a669-b108a93a32ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:19:f4:db:76:a4:6c:29:7d:93:1b:ed:67:2e:1b:ea:23:f0: a7:75:e6:38:2a:09:cd:9e:4c:80:1b:2a:13:a6:70:9b:72:d4: 27:ca:14:28:5d:3f:22:19:c5:1d:da:b4:ad:52:b4:7f:ef:8c: d0:03:26:28:e4:41:3b:2a:b1:63:6e:0f:f8:79:77:5a:01:6d: a7:b1:fb:b4:a1:f9:e3:f5:7a:02:ef:1f:40:5e:7f:f2:8a:16: 64:d4:01:e2:f0:f6:fb:19:86:c0:42:de:5f:ca:fb:a7:1a:7e: da:5a:c0:1a:bf:b1:88:9b:af:55:8d:9d:43:d0:9e:39:d4:a2: 2e:6f:5b:a1:b7:da:71:ca:f7:bc:d1:d3:a7:a0:d5:cf:7c:08: 91:f8:41:0b:9e:31:0d:89:0b:ec:0b:fc:d9:6b:1e:31:b0:d7: 92:4b:2c:49:07:52:88:ea:5b:b0:ea:9c:21:18:e6:0a:11:b9: 57:6a:e6:6a:0e:f2:92:24:ef:89:4f:22:68:51:3c:fb:ff:fc: 49:43:f9:4d:e5:91:df:28:f3:df:db:27:3a:db:b5:00:ae:be: 47:a1:a7:2f:19:93:37:5a:97:94:f1:27:27:12:4e:a7:0a:b1: e8:5b:83:88:04:14:44:8e:20:24:19:33:39:ed:47:98:03:de: 20:be:47:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh7z+R84mhALbs2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MGIzMjFmMGQtOGM4MS00N2NiLTg2ZjctYjk0ZTNmMjFkYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowWgUHlEceXEKedmzM5vLHi/bbq5GDkdTsM9 NNdlo+499PpHNYsaqP6EyPufcIXI6QpByU76APZk21zysBvrdPG+YloLKkJUUUGM gP9SJDO5Te36FcvEGEpmWQ8CZRapA6W9GNTW6d6hvh7AFHRQEl2auHinOp/NsZjT M20zMKeOmLV7YuzHSuWbD/SG5onnqpe715qDKKqk7w7f0FW3GFiDFiRhnTbPHU1m m+XL74tUraFOUwsSvXvRk6kApoyJqW5fr5TXcpsVbNJzaFK8ibdFIF9kOPrZMiHy 13E22D6OJx4U6mEOekai8tOgxKOawGuHMA/oE2VONQ897AydaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq/TZxkWKXjH1yNAFDuVBDFM+VIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjAwZmY4MDYtN2Q1NS0z YjBjLWE2NjktYjEwOGE5M2EzMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBeiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcZ9Nt2pGwpfZMb7WcuG+oj8Kd15jgqCc2eTIAbKhOmcJty1CfKFChd PyIZxR3atK1StH/vjNADJijkQTsqsWNuD/h5d1oBbaex+7Sh+eP1egLvH0Bef/KK FmTUAeLw9vsZhsBC3l/K+6caftpawBq/sYibr1WNnUPQnjnUoi5vW6G32nHK97zR 06eg1c98CJH4QQueMQ2JC+wL/NlrHjGw15JLLEkHUojqW7DqnCEY5goRuVdq5moO 8pIk74lPImhRPPv//ElD+U3lkd8o89/bJzrbtQCuvkehpy8Zkzdal5TxJycSTqcK sehbg4gEFESOICQZMzntR5gD3iC+R9Y= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:35 2025 by rpki-client