$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa File: 3b01818f-feec-3c22-884b-12db49054558.roa (raw, json) Hash identifier: K5RmdOzwqIgM+aayzhbWekGVKcyDmPHGVbrDImzmOhI= Subject key identifier: 81:C2:3A:45:56:0F:5F:C0:CD:78:C1:48:14:08:D5:24:79:64:74:53 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C5F60E376262BBD068A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.21.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:f6:0e:37:62:62:bb:d0:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=613c64f3-4134-4351-ba74-986d4e6dee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:32:cd:84:d3:3d:be:3b:2e:bb:dc:ab:f0:b0: 8c:c0:39:22:51:6d:eb:de:da:e8:18:cc:ed:5b:af: c6:e2:6f:35:15:af:4b:df:53:7c:33:bb:0c:e0:6c: ce:c4:39:60:3f:3b:8b:e5:17:aa:ac:0e:7a:db:26: 12:1a:cd:6b:f6:74:3e:ed:aa:94:4e:cc:c7:c6:c4: 7d:06:26:c1:3a:da:62:f2:5b:6d:5c:c6:39:3c:f4: 9d:94:5c:2c:ef:2d:af:62:02:dc:35:5c:ce:59:d2: ff:f4:fe:8a:4e:52:c2:f3:4f:7c:9c:74:da:8e:6a: 4b:a5:9e:a8:32:75:bf:1f:ca:fc:58:57:7c:c7:ca: 3c:e5:cc:f4:3c:e6:25:79:46:f5:68:a6:b3:57:b2: 43:af:40:ae:12:db:dc:b9:18:a6:de:01:10:57:84: 27:f3:87:cb:3a:96:9a:9b:0e:75:c7:e2:31:56:89: 34:d4:f3:1c:d1:f5:ab:6b:a6:be:8f:fd:66:df:c0: d4:cd:75:3b:bf:1a:c8:c2:02:46:09:58:69:19:8c: ba:8f:48:28:5c:ae:6e:98:73:06:b5:f3:74:96:aa: c2:b0:43:68:fa:65:42:82:61:3c:ae:94:69:b7:b0: a2:34:92:86:4b:d4:3d:e2:6e:ea:ce:ad:b1:8c:bc: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C2:3A:45:56:0F:5F:C0:CD:78:C1:48:14:08:D5:24:79:64:74:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b7:9e:87:91:b0:5c:b1:ec:2d:75:27:70:6e:ca:c0:be:e8: 5a:42:bb:ae:a4:7d:83:ce:01:51:95:b5:6e:6c:1e:79:d0:09: 3f:96:52:6a:94:53:b9:b6:57:bc:f7:f9:bf:8f:eb:16:7c:fc: 96:d1:f0:c7:00:a2:41:17:04:61:87:81:f1:c5:d1:fa:d8:3b: be:9f:f2:9e:9d:52:17:d8:c4:31:c3:02:86:2a:bc:34:b6:a4: b7:68:01:57:20:36:52:9b:79:ff:2f:5d:08:5f:a4:2f:db:c5: e6:91:6e:1d:94:70:be:6e:a1:7c:0d:1b:f7:e2:1d:b2:d8:49: 07:03:66:a2:35:63:33:dd:3b:47:99:a3:92:e2:3f:c4:1b:bf: 57:bf:33:2c:3b:37:ae:48:c4:88:23:38:c8:d2:a9:8f:d0:01: 00:42:e7:35:45:cf:d5:33:c4:bc:65:52:e6:72:e4:05:59:4a: 40:3d:44:32:4a:c4:6e:7a:a4:28:a8:f3:df:3a:8a:82:d6:21: 72:7f:60:f9:26:6a:ff:ab:ea:1e:69:b9:ae:7a:31:b3:56:90: bb:c7:5e:0c:0e:8f:15:96:a2:26:87:9c:75:f7:ad:1d:9a:48: a9:2d:42:85:12:d5:90:b8:61:ce:05:76:c4:0c:a0:f8:e7:bf: 1a:05:b5:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsX2DjdiYrvQaKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NjEzYzY0ZjMtNDEzNC00MzUxLWJhNzQtOTg2ZDRlNmRlZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zLNhNM9vjsuu9yr8LCMwDkiUW3r3troGMzt W6/G4m81Fa9L31N8M7sM4GzOxDlgPzuL5ReqrA562yYSGs1r9nQ+7aqUTszHxsR9 BibBOtpi8lttXMY5PPSdlFws7y2vYgLcNVzOWdL/9P6KTlLC8098nHTajmpLpZ6o MnW/H8r8WFd8x8o85cz0POYleUb1aKazV7JDr0CuEtvcuRim3gEQV4Qn84fLOpaa mw51x+IxVok01PMc0fWra6a+j/1m38DUzXU7vxrIwgJGCVhpGYy6j0goXK5umHMG tfN0lqrCsENo+mVCgmE8rpRpt7CiNJKGS9Q94m7qzq2xjLz7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHCOkVWD1/AzXjBSBQI1SR5ZHRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2IwMTgxOGYtZmVlYy0z YzIyLTg4NGItMTJkYjQ5MDU0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC3noeRsFyx7C11J3BuysC+6FpCu66kfYPOAVGVtW5sHnnQCT+WUmqU U7m2V7z3+b+P6xZ8/JbR8McAokEXBGGHgfHF0frYO76f8p6dUhfYxDHDAoYqvDS2 pLdoAVcgNlKbef8vXQhfpC/bxeaRbh2UcL5uoXwNG/fiHbLYSQcDZqI1YzPdO0eZ o5LiP8Qbv1e/Myw7N65IxIgjOMjSqY/QAQBC5zVFz9UzxLxlUuZy5AVZSkA9RDJK xG56pCio8986ioLWIXJ/YPkmav+r6h5pua56MbNWkLvHXgwOjxWWoiaHnHX3rR2a SKktQoUS1ZC4Yc4FdsQMoPjnvxoFtaw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:43 2025 by rpki-client