$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa File: 811e6a88-0d78-38d1-8165-7cff3dcc8978.roa (raw, json) Hash identifier: gBODM05rxzioYvNvC8Tw1uijsP+oFaHyFzPs+w4j010= Subject key identifier: C2:84:24:80:ED:BB:1E:8D:CA:D1:0D:DA:70:A8:0E:3F:75:D1:C2:11 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C549B53D1DEF85DAE200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.21.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:49:b5:3d:1d:ef:85:da:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=74622db4-36b1-469a-bf54-d93118a87ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:b8:cc:ea:b6:a0:ef:16:3b:d4:67:1d:c8: 8e:c7:73:3a:c0:ec:7c:d8:70:b7:d2:05:d4:48:9f: 2a:10:2b:02:96:73:68:3b:f9:da:69:70:3d:31:0b: af:d7:3f:58:85:c7:46:f2:92:e4:c6:22:17:62:68: 98:38:eb:33:be:cd:90:63:71:69:bf:8b:6b:dc:29: 1f:cb:a7:b4:9c:dc:ea:9f:f1:09:ce:8b:0b:35:13: 06:85:b1:ea:5e:ad:99:c4:94:9b:01:6e:c1:ce:88: 55:57:c9:66:66:b0:fe:b8:82:3c:f0:25:b8:d2:4a: 8b:f5:cb:70:81:7a:ea:8a:1c:00:b3:66:6a:36:d2: 68:d4:e0:d5:a8:39:03:bd:15:8a:f9:80:c7:92:37: 9a:7d:9d:23:f6:fc:fa:2a:97:61:a6:2a:8e:0c:22: fb:cc:67:a0:4c:fd:e4:63:cb:87:08:c6:6e:12:86: c3:00:a5:83:09:33:61:9d:f2:fb:ac:fc:a0:9f:d3: 9b:e2:93:a7:0f:5d:68:6a:ba:dc:15:01:77:d4:a5: 06:58:3b:f8:44:2f:df:d7:34:6c:f5:86:4e:f9:16: 28:66:91:50:79:6a:9e:e8:8b:59:63:b3:29:b2:a6: c7:46:5b:a7:87:ee:34:0b:d7:85:59:f3:77:61:7d: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:84:24:80:ED:BB:1E:8D:CA:D1:0D:DA:70:A8:0E:3F:75:D1:C2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4b:f2:4c:74:c0:2b:23:36:e4:e1:90:77:7c:e2:41:92:65: 4b:0c:42:d2:2a:27:bf:b5:cf:70:65:ac:0a:c5:a4:7a:36:e4: ef:54:d1:20:eb:79:1e:be:54:23:04:86:40:8e:9f:26:d2:3f: 4f:a5:2d:58:af:61:8d:e1:61:27:de:b8:74:09:2a:b2:fc:59: 0e:91:60:74:e8:f2:9f:20:1a:9f:d4:93:1a:e4:5a:a9:c7:86: 9d:a3:0a:4a:5f:ce:5d:de:9b:37:68:1e:b2:d3:09:fc:ca:75: 31:c7:46:6e:9e:90:bd:37:98:c3:95:97:d0:41:b7:1b:62:7d: 51:9c:55:d2:92:e2:8f:a5:27:96:37:6c:dc:60:fd:2a:f7:26: 3c:d9:39:fa:b9:16:6e:fd:0a:50:0f:5d:7d:e7:3a:a9:d2:3d: 6c:03:3a:0d:ef:34:6c:0d:b6:b1:64:02:65:14:f0:02:d3:27: 91:89:d4:7c:5b:25:86:2b:10:f1:ef:96:33:e6:4f:97:74:05: 76:be:28:04:18:02:42:24:86:22:fe:a1:43:74:a4:fd:60:3c: f5:fe:65:e8:4c:36:b7:b2:99:a9:91:92:4b:2f:71:f2:0b:4b: 35:61:81:bc:8c:f2:17:69:10:7a:0f:28:8b:fc:96:e6:dc:b5: 67:ad:48:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsVJtT0d74Xa4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NzQ2MjJkYjQtMzZiMS00NjlhLWJmNTQtZDkzMTE4YTg3YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8a4zOq2oO8WO9RnHciOx3M6wOx82HC30gXU SJ8qECsClnNoO/naaXA9MQuv1z9YhcdG8pLkxiIXYmiYOOszvs2QY3Fpv4tr3Ckf y6e0nNzqn/EJzosLNRMGhbHqXq2ZxJSbAW7BzohVV8lmZrD+uII88CW40kqL9ctw gXrqihwAs2ZqNtJo1ODVqDkDvRWK+YDHkjeafZ0j9vz6KpdhpiqODCL7zGegTP3k Y8uHCMZuEobDAKWDCTNhnfL7rPygn9Ob4pOnD11oarrcFQF31KUGWDv4RC/f1zRs 9YZO+RYoZpFQeWqe6ItZY7MpsqbHRlunh+40C9eFWfN3YX0yPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKEJIDtux6NytEN2nCoDj910cIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODExZTZhODgtMGQ3OC0z OGQxLTgxNjUtN2NmZjNkY2M4OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNL8kx0wCsjNuThkHd84kGSZUsMQtIqJ7+1z3BlrArFpHo25O9U0SDr eR6+VCMEhkCOnybSP0+lLVivYY3hYSfeuHQJKrL8WQ6RYHTo8p8gGp/UkxrkWqnH hp2jCkpfzl3emzdoHrLTCfzKdTHHRm6ekL03mMOVl9BBtxtifVGcVdKS4o+lJ5Y3 bNxg/Sr3JjzZOfq5Fm79ClAPXX3nOqnSPWwDOg3vNGwNtrFkAmUU8ALTJ5GJ1Hxb JYYrEPHvljPmT5d0BXa+KAQYAkIkhiL+oUN0pP1gPPX+ZehMNreymamRkksvcfIL SzVhgbyM8hdpEHoPKIv8lubctWetSA8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:41 2025 by rpki-client