$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa File: 2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa (raw, json) Hash identifier: g+7RZrGUx/he22N42AW8Atw5I6ATrg0Y8aLH8stLqYA= Subject key identifier: 42:88:A0:7A:EA:87:52:A1:49:C4:68:E8:44:1F:E2:74:06:09:D7:A9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C90003CA0C3A32C35380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.27.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c9:00:03:ca:0c:3a:32:c3:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=c831322a-e8e1-4048-b157-4be6c42ef870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:0d:a9:87:35:da:df:c2:02:48:bb:94:e2: 58:19:34:15:1b:f6:0f:5a:8c:34:87:18:eb:a6:0d: 43:a2:ed:8f:ed:2b:b6:70:1d:cd:f5:f6:92:6e:24: 94:eb:fe:f2:e6:f1:a7:cf:e3:df:90:96:ad:e1:b5: 3e:09:6a:5b:b3:cf:d7:90:8a:44:a3:c4:05:e9:d0: fe:47:db:56:95:cd:55:17:89:b3:d0:fe:bc:5b:3b: a8:01:6c:0f:dd:e7:04:35:33:fa:89:9d:ae:92:d2: b0:ee:29:83:7c:cc:b1:c3:7c:df:d4:c8:2b:c6:33: a9:35:af:72:f2:7b:b1:c7:ac:71:c3:6f:b3:eb:20: 9a:92:3a:43:a6:0d:5a:50:40:f5:55:a4:4b:12:82: 4d:19:2c:ed:f1:f8:ae:4a:e2:40:74:34:8d:05:44: fc:7b:3e:00:cc:36:13:f5:f1:10:b9:c9:4d:c6:f1: 97:ff:3a:8e:32:90:6c:5f:b1:00:84:b6:32:bc:b3: ed:ae:25:c7:44:43:6c:e7:f2:ca:6d:71:d2:6b:48: 78:9c:3b:fc:93:18:1f:ed:06:ab:3e:96:90:74:ce: 7f:4f:42:3a:a1:05:76:12:03:94:fe:16:0a:37:10: aa:e2:1a:53:d4:55:76:59:22:59:4f:43:2c:80:16: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:88:A0:7A:EA:87:52:A1:49:C4:68:E8:44:1F:E2:74:06:09:D7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e97a0d2-fc18-3f05-959e-15b9480d5e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2e:36:62:0a:f3:42:bc:81:52:d2:14:3f:85:52:f8:bd:50: 10:df:1c:cd:b6:6d:7d:79:56:96:9e:d6:51:f2:76:2e:5a:cf: c4:e8:60:32:eb:bb:52:26:31:7f:9e:63:18:43:cc:e6:95:06: 25:cd:44:16:26:40:69:45:79:11:35:49:a6:a9:0e:9c:ec:8a: 6f:07:29:44:83:fb:4f:a8:30:0b:ee:c5:0f:b0:e6:2b:d6:a5: 29:4c:86:8d:77:a1:09:03:fd:d2:8b:78:0d:d5:53:8e:33:ab: e9:9d:63:19:81:7c:69:f4:0b:91:31:da:7f:c3:1a:00:e7:19: ad:5a:c5:18:24:1f:51:10:89:99:b5:87:16:54:0f:e8:3c:f1: 77:c4:10:51:49:a2:83:7a:4f:8e:34:82:03:f5:f9:05:23:f2: 77:46:89:b9:94:9c:a3:64:24:2d:dd:04:81:79:dd:8f:52:38: 8c:b1:5f:e4:33:40:6f:e5:b8:cc:4f:97:21:22:32:fc:ad:ce: da:cc:73:79:00:e8:80:9a:d8:53:c8:93:e2:7f:cb:4f:d4:6b: 57:cb:6f:92:91:a3:18:a0:7b:5a:11:27:0a:72:7b:1c:61:e4: 82:cf:a0:eb:18:f8:76:46:04:16:1c:7b:a0:05:75:98:51:7d: bd:b1:0a:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtskAA8oMOjLDU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YzgzMTMyMmEtZThlMS00MDQ4LWIxNTctNGJlNmM0MmVmODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUkNqYc12t/CAki7lOJYGTQVG/YPWow0hxjr pg1Dou2P7Su2cB3N9faSbiSU6/7y5vGnz+PfkJat4bU+CWpbs8/XkIpEo8QF6dD+ R9tWlc1VF4mz0P68WzuoAWwP3ecENTP6iZ2uktKw7imDfMyxw3zf1MgrxjOpNa9y 8nuxx6xxw2+z6yCakjpDpg1aUED1VaRLEoJNGSzt8fiuSuJAdDSNBUT8ez4AzDYT 9fEQuclNxvGX/zqOMpBsX7EAhLYyvLPtriXHRENs5/LKbXHSa0h4nDv8kxgf7Qar PpaQdM5/T0I6oQV2EgOU/hYKNxCq4hpT1FV2WSJZT0MsgBYqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKIoHrqh1KhScRo6EQf4nQGCdepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU5N2EwZDItZmMxOC0z ZjA1LTk1OWUtMTViOTQ4MGQ1ZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcuNmIK80K8gVLSFD+FUvi9UBDfHM22bX15Vpae1lHydi5az8ToYDLr u1ImMX+eYxhDzOaVBiXNRBYmQGlFeRE1SaapDpzsim8HKUSD+0+oMAvuxQ+w5ivW pSlMho13oQkD/dKLeA3VU44zq+mdYxmBfGn0C5Ex2n/DGgDnGa1axRgkH1EQiZm1 hxZUD+g88XfEEFFJooN6T440ggP1+QUj8ndGibmUnKNkJC3dBIF53Y9SOIyxX+Qz QG/luMxPlyEiMvytztrMc3kA6ICa2FPIk+J/y0/Ua1fLb5KRoxige1oRJwpyexxh 5ILPoOsY+HZGBBYce6AFdZhRfb2xCsY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:29 2025 by rpki-client