$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa File: 2b3279f2-fad4-3ca8-b7db-21db2208a819.roa (raw, json) Hash identifier: Oqxlk4SxE59+BZThaSaoE3WMhfiNiMEtpzCEVGrl7ME= Subject key identifier: 88:2F:E5:95:E3:00:F9:72:45:FE:D0:7D:58:36:96:A7:99:13:F7:1F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C4D6CA73D14261E19080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.20.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c4:d6:ca:73:d1:42:61:e1:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=8fb2b0ec-ee8d-4084-8620-1c2f2992ff39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:15:33:3e:df:ec:e8:aa:fa:9b:f8:37:e7:8c: 90:a0:59:18:81:e9:c1:79:79:60:b8:3d:35:43:27: 7d:9a:ab:ac:99:70:00:f8:df:d4:07:1b:63:30:ee: db:c3:98:6c:af:ef:59:f9:3f:cf:4c:01:2a:c2:9d: ca:6d:42:e3:07:10:f2:0c:7e:6e:b7:ea:a8:58:65: 91:a0:6e:50:fc:55:dd:8d:1b:83:49:3e:b9:6b:df: a8:88:0a:34:f8:5a:f2:de:0a:47:d6:e9:c0:c1:d0: 4e:1b:3f:90:7c:7f:de:49:b4:93:67:7a:bc:30:e3: cf:80:d3:af:65:c6:00:95:64:5b:51:f6:5d:ee:04: 5d:5b:d8:60:30:6f:3c:85:0c:f7:f1:4c:fa:2c:24: bd:97:6a:5f:0b:35:95:84:1c:1e:c3:61:6e:2c:b0: 5f:51:84:35:41:0b:19:19:ef:84:35:80:c2:4f:b9: fd:36:e6:7a:a4:f8:f8:db:ef:84:f0:64:9e:a4:0c: 33:05:f4:ab:5e:07:02:25:8c:84:08:99:36:db:72: ac:ac:18:5d:7b:10:ee:9c:c7:f9:18:89:06:02:b7: 01:16:98:09:1e:a1:88:e4:b4:22:93:81:80:36:95: 31:5b:15:52:cc:61:6d:f9:62:1f:d0:eb:11:6e:03: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:E5:95:E3:00:F9:72:45:FE:D0:7D:58:36:96:A7:99:13:F7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:68:9c:9d:15:f2:0e:ca:81:00:bf:c6:5b:81:98:5f:98:b4: 0a:ae:98:52:ea:9c:f6:41:f7:f7:da:31:e4:63:39:22:94:4c: b8:7e:93:c1:bc:36:09:fd:9e:5d:14:1a:a8:93:8d:a4:05:ec: 21:de:6c:e8:b7:34:42:c4:f7:d9:bb:9b:24:d6:4c:aa:ad:7f: d2:cb:6f:87:52:c8:62:e3:d0:46:3f:7f:12:35:98:7e:0b:34: 76:9e:2e:76:df:e4:25:55:1d:69:63:65:cd:03:39:69:53:f7: 49:37:62:60:73:7a:42:b1:59:2c:a2:8b:cd:94:02:bb:73:a6: c4:fb:db:7a:e6:38:ee:f8:5e:ad:70:d3:9b:16:f7:35:4e:a1: 62:5b:c9:88:fc:36:c7:89:93:2f:85:d4:75:f8:4b:44:2b:d0: 36:5f:90:25:0d:03:1c:89:b0:78:48:23:f3:a3:48:a2:8e:91: e2:74:47:22:2d:c3:c5:a9:c8:f4:0f:2d:8f:cf:51:bf:0e:50: ab:14:77:e9:ae:f1:e1:fc:20:d5:d0:f3:04:8a:9e:c4:61:75: fd:de:ad:8e:62:6d:a6:61:79:92:ea:55:b4:b7:b3:e0:02:22: a8:0e:33:14:7a:10:2f:93:83:06:47:b4:49:a5:0f:70:f7:fd: 3f:8a:71:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsTWynPRQmHhkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OGZiMmIwZWMtZWU4ZC00MDg0LTg2MjAtMWMyZjI5OTJmZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RUzPt/s6Kr6m/g354yQoFkYgenBeXlguD01 Qyd9mqusmXAA+N/UBxtjMO7bw5hsr+9Z+T/PTAEqwp3KbULjBxDyDH5ut+qoWGWR oG5Q/FXdjRuDST65a9+oiAo0+Fry3gpH1unAwdBOGz+QfH/eSbSTZ3q8MOPPgNOv ZcYAlWRbUfZd7gRdW9hgMG88hQz38Uz6LCS9l2pfCzWVhBwew2FuLLBfUYQ1QQsZ Ge+ENYDCT7n9NuZ6pPj42++E8GSepAwzBfSrXgcCJYyECJk223KsrBhdexDunMf5 GIkGArcBFpgJHqGI5LQik4GANpUxWxVSzGFt+WIf0OsRbgNhRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgv5ZXjAPlyRf7QfVg2lqeZE/cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIzMjc5ZjItZmFkNC0z Y2E4LWI3ZGItMjFkYjIyMDhhODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1onJ0V8g7KgQC/xluBmF+YtAqumFLqnPZB9/faMeRjOSKUTLh+k8G8 Ngn9nl0UGqiTjaQF7CHebOi3NELE99m7myTWTKqtf9LLb4dSyGLj0EY/fxI1mH4L NHaeLnbf5CVVHWljZc0DOWlT90k3YmBzekKxWSyii82UArtzpsT723rmOO74Xq1w 05sW9zVOoWJbyYj8NseJky+F1HX4S0Qr0DZfkCUNAxyJsHhII/OjSKKOkeJ0RyIt w8WpyPQPLY/PUb8OUKsUd+mu8eH8INXQ8wSKnsRhdf3erY5ibaZheZLqVbS3s+AC IqgOMxR6EC+TgwZHtEmlD3D3/T+Kce8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:52 2025 by rpki-client