$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa File: 6443b9d0-16ce-3791-bb89-ce585f607c9d.roa (raw, json) Hash identifier: HQOsTpgyLXJukO1rx3UhaJnLW3MtE0sBT1o2yBhPtjI= Subject key identifier: C8:F9:A0:7E:74:6F:D1:63:DC:E5:A4:C6:B9:40:27:DC:4D:B1:AA:76 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E65502BB4C5F3D89B3E21130 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 104.31.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:02:bb:4c:5f:3d:89:b3:e2:11:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=3a0a2e0a-54a0-49c3-8b6d-37298f259c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:16:9f:78:5f:52:01:dd:4d:07:5c:ec:d1: 54:f0:1c:4f:3b:2f:eb:ab:8f:6c:b6:db:c4:03:4e: 29:54:b3:e7:3b:01:3c:55:dd:05:32:56:36:53:d9: e9:64:bf:b0:20:6c:9c:cc:85:85:09:83:e3:f4:f8: d2:c4:46:b7:3c:07:ed:98:56:f8:93:57:76:71:f6: 92:39:36:c7:69:79:9b:38:b4:7c:aa:99:cf:c8:fd: 26:e7:12:55:7e:ca:03:52:94:01:e7:9f:90:cf:7b: 80:d6:e2:51:73:4e:80:1e:d3:52:ac:32:35:a8:bf: a4:0d:ff:fc:29:7f:ab:51:04:c8:5e:dd:1e:7e:3f: 71:d9:a8:c1:bc:82:e0:4d:57:a8:51:d0:5c:87:51: 93:84:29:7e:55:3f:1b:c3:03:ec:8f:f3:99:7f:76: d8:f1:29:22:8b:fc:8e:e7:aa:58:b6:7b:a8:69:ed: 43:6c:54:24:65:ff:2a:1a:8c:df:e9:43:a2:d6:b4: 0c:c0:f1:61:67:48:3c:13:31:85:d8:cd:5a:f1:9a: f9:a6:d8:d4:9a:85:ca:a4:d6:8a:84:a3:3e:48:9c: ef:0f:f9:9d:61:6e:fa:bb:e6:5f:50:bd:7e:17:1f: 14:74:26:ad:b9:e6:bb:12:48:35:64:28:bb:53:f7: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F9:A0:7E:74:6F:D1:63:DC:E5:A4:C6:B9:40:27:DC:4D:B1:AA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:87:58:89:8d:90:77:46:fc:39:38:5b:47:94:fc:47:a8:e3: 29:f2:aa:03:9d:cf:b8:01:dc:4b:0c:16:5c:a8:8e:f0:e6:f5: 3f:24:13:ee:30:f5:55:c2:05:a0:0e:79:32:d1:a1:45:63:3a: 6f:7d:91:92:63:67:7a:eb:0c:ab:58:ed:78:94:9b:09:c8:0b: e8:b5:40:d6:a7:4d:5c:27:a1:65:2c:da:0b:79:d3:c8:b3:18: bc:9f:5e:9e:40:ef:2f:44:87:f3:8d:7d:06:9e:15:e6:ac:89: 26:57:7a:e3:50:82:44:b5:07:9d:04:ca:5d:83:07:16:b9:fa: 9a:60:aa:9c:19:44:12:a5:88:f6:a9:e1:4e:46:c4:6e:27:fa: 1f:04:5b:77:96:b9:e2:04:2c:0e:40:3f:af:6a:58:78:4b:69: 0a:f3:5b:60:d0:4e:ff:fa:2a:ed:f8:df:65:97:e8:4f:7d:98: d6:3f:8b:2a:39:f6:73:2f:c7:cf:be:47:53:6f:4e:eb:46:30: 37:94:bb:03:e3:b0:0a:49:56:dc:d9:9f:0c:52:e3:8e:e1:04: 5e:c5:cb:1f:64:e6:e9:35:bd:fc:22:40:0e:74:26:49:7c:d5: 0e:39:bc:3b:74:71:fd:9e:c2:96:de:8a:37:78:41:ab:ff:6d: cc:bc:96:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQK7TF89ibPiETAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk M2EwYTJlMGEtNTRhMC00OWMzLThiNmQtMzcyOThmMjU5YzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhkWn3hfUgHdTQdc7NFU8BxPOy/rq49sttvE A04pVLPnOwE8Vd0FMlY2U9npZL+wIGyczIWFCYPj9PjSxEa3PAftmFb4k1d2cfaS OTbHaXmbOLR8qpnPyP0m5xJVfsoDUpQB55+Qz3uA1uJRc06AHtNSrDI1qL+kDf/8 KX+rUQTIXt0efj9x2ajBvILgTVeoUdBch1GThCl+VT8bwwPsj/OZf3bY8Skii/yO 56pYtnuoae1DbFQkZf8qGozf6UOi1rQMwPFhZ0g8EzGF2M1a8Zr5ptjUmoXKpNaK hKM+SJzvD/mdYW76u+ZfUL1+Fx8UdCatuea7Ekg1ZCi7U/eJJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj5oH50b9Fj3OWkxrlAJ9xNsap2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjQ0M2I5ZDAtMTZjZS0z NzkxLWJiODktY2U1ODVmNjA3YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECHWImNkHdG/Dk4W0eU/Eeo4ynyqgOdz7gB3EsMFlyojvDm9T8kE+4w 9VXCBaAOeTLRoUVjOm99kZJjZ3rrDKtY7XiUmwnIC+i1QNanTVwnoWUs2gt508iz GLyfXp5A7y9Eh/ONfQaeFeasiSZXeuNQgkS1B50Eyl2DBxa5+ppgqpwZRBKliPap 4U5GxG4n+h8EW3eWueIELA5AP69qWHhLaQrzW2DQTv/6Ku3432WX6E99mNY/iyo5 9nMvx8++R1NvTutGMDeUuwPjsApJVtzZnwxS447hBF7Fyx9k5uk1vfwiQA50Jkl8 1Q45vDt0cf2ewpbeijd4Qav/bcy8lh0= -----END CERTIFICATE-----Generated at Wed Jun 18 08:25:16 2025 by rpki-client