$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa File: 891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa (raw, json) Hash identifier: 6ha8o9vqKFx98tM3dvPT3qu1Qjl0EwFdloPWQKK1M3U= Subject key identifier: 1F:E2:72:BD:A8:B9:D1:E8:4C:4D:BA:53:B4:19:F4:61:07:22:F2:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C016C6D3C1C181D46B100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.31.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:01:6c:6d:3c:1c:18:1d:46:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=67563739-8a6d-417d-8f38-2573102df759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:2c:62:12:f8:82:21:b1:89:37:75:bd:53: a1:bb:67:fd:a6:3b:91:63:f6:24:38:5f:25:47:78: b3:7a:af:48:b9:95:78:6f:cd:78:77:47:eb:a3:65: 39:f8:0c:27:0e:29:30:2d:1e:c2:92:35:c9:50:08: 74:8e:30:2e:16:d9:31:c7:ff:29:6a:56:51:2f:23: 85:f2:b2:e1:38:11:df:bf:2b:05:69:20:19:1c:84: 18:ed:cb:54:43:2d:65:e4:16:32:a5:96:93:54:41: 78:8e:4b:5c:50:01:02:0f:f1:db:73:b6:e6:f4:a3: 97:85:6e:af:e6:c9:d6:29:f8:4a:e7:46:07:21:99: 98:3a:75:70:c7:75:f1:9d:74:8e:40:9d:c0:bf:aa: 8e:5b:21:2e:f9:ec:0c:16:2e:25:8e:10:09:e4:03: 2e:66:9d:c0:f7:2f:c8:92:d1:a4:15:7d:2b:60:a2: 90:6a:6b:a6:e3:18:2d:76:c3:dc:9a:d3:47:34:04: 0c:c0:5c:5a:67:a3:e1:6c:e6:af:97:be:a8:97:09: 3f:83:b1:bb:ec:dc:4b:19:45:68:2f:1a:ec:55:44: 61:27:8e:e0:b9:f2:51:c6:ae:81:5f:ec:e7:bf:d0: 6d:1f:c0:de:bf:8b:f0:59:1c:dc:95:b1:06:2b:6d: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E2:72:BD:A8:B9:D1:E8:4C:4D:BA:53:B4:19:F4:61:07:22:F2:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:22:af:b9:8b:34:1b:c4:1d:1c:4b:9e:e1:4c:46:4e:47:73: 89:ea:1d:3e:bb:d8:26:be:93:22:7e:2b:28:f9:a2:73:5a:65: 49:4a:3a:a3:aa:cf:16:5d:3c:2a:78:d8:d8:cd:24:ea:ba:06: 36:c3:ff:e1:7b:23:62:6e:92:a6:32:ea:05:cc:73:81:46:d6: e9:6e:d3:80:7a:b3:18:33:52:d2:bc:6c:f9:60:d6:cd:ef:f7: a9:ec:dd:e5:9b:a1:d8:0b:6b:d3:d1:05:2f:7d:60:b8:65:85: 99:a5:25:fc:21:14:29:19:ea:22:f7:80:aa:9d:d7:ed:01:c3: 87:d7:c7:ae:13:b8:e5:d6:f6:e2:7c:6a:da:e1:15:10:27:b3: e7:f1:82:2e:c3:39:2c:58:1c:af:62:52:a6:cb:61:14:96:48: a2:8f:dd:2b:2c:ab:48:c5:93:c9:c1:bd:9a:a2:34:df:14:01: be:86:af:b9:d4:10:33:2e:9f:97:7a:12:a2:b5:fb:88:0b:b3: e7:73:73:db:a0:b0:d0:f3:e7:31:46:6e:9d:67:33:5b:92:76: e7:78:f5:9f:a5:86:49:8a:27:6e:0d:06:95:2b:56:1b:f9:e8: fc:16:b7:fb:96:32:e4:ee:a2:9f:f8:fd:ba:10:4c:08:09:f3: 7b:ad:45:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAFsbTwcGB1GsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk Njc1NjM3MzktOGE2ZC00MTdkLThmMzgtMjU3MzEwMmRmNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHosYhL4giGxiTd1vVOhu2f9pjuRY/YkOF8l R3izeq9IuZV4b814d0fro2U5+AwnDikwLR7CkjXJUAh0jjAuFtkxx/8palZRLyOF 8rLhOBHfvysFaSAZHIQY7ctUQy1l5BYypZaTVEF4jktcUAECD/Hbc7bm9KOXhW6v 5snWKfhK50YHIZmYOnVwx3XxnXSOQJ3Av6qOWyEu+ewMFi4ljhAJ5AMuZp3A9y/I ktGkFX0rYKKQamum4xgtdsPcmtNHNAQMwFxaZ6PhbOavl76olwk/g7G77NxLGUVo LxrsVURhJ47gufJRxq6BX+znv9BtH8Dev4vwWRzclbEGK23jHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/icr2oudHoTE26U7QZ9GEHIvIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODkxNTI3YmItYjAxNC0z MmNjLTg0YjMtZDhiM2NlMDZjY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUir7mLNBvEHRxLnuFMRk5Hc4nqHT672Ca+kyJ+Kyj5onNaZUlKOqOq zxZdPCp42NjNJOq6BjbD/+F7I2JukqYy6gXMc4FG1ulu04B6sxgzUtK8bPlg1s3v 96ns3eWbodgLa9PRBS99YLhlhZmlJfwhFCkZ6iL3gKqd1+0Bw4fXx64TuOXW9uJ8 atrhFRAns+fxgi7DOSxYHK9iUqbLYRSWSKKP3Sssq0jFk8nBvZqiNN8UAb6Gr7nU EDMun5d6EqK1+4gLs+dzc9ugsNDz5zFGbp1nM1uSdud49Z+lhkmKJ24NBpUrVhv5 6PwWt/uWMuTuop/4/boQTAgJ83utRYE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:11 2025 by rpki-client