$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa File: 94302007-379c-3d0e-b144-b33108e8a99d.roa (raw, json) Hash identifier: V2HS65Qbjt4CYxFQTiUEzu1d0aslFckDJO+vmF7L/+U= Subject key identifier: 49:95:88:3A:16:37:B3:CD:28:87:42:22:18:BD:02:7C:17:FE:23:33 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C021F4F6ED894C9172C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:02:1f:4f:6e:d8:94:c9:17:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=3b2b25a2-6d98-4567-a204-747510fe63bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:68:fb:be:ae:57:6c:d5:a3:88:12:8e:a7:cc: c5:3c:eb:62:f1:e9:ce:1b:ec:bb:4d:63:b9:af:98: 10:41:18:74:7e:30:25:57:5a:64:09:3f:3a:07:53: bf:28:bb:7a:82:5a:12:f4:e1:db:39:c4:21:52:5c: b4:49:c1:f7:c7:78:81:da:10:05:a1:e8:52:4f:52: a4:27:cb:2b:6b:a7:25:ba:b6:82:78:ae:96:80:5f: 33:7c:cd:0a:cd:8d:56:7c:3e:ea:7e:ed:20:00:57: 3c:a3:e8:ac:72:ac:9c:d2:d7:0f:6a:4f:32:fe:bf: ec:fe:aa:f7:57:3b:a1:15:76:a5:f6:e4:4b:ea:9f: a7:41:fe:f3:7d:4a:8f:32:00:30:8e:8f:83:1a:7b: 10:4c:00:06:b0:92:96:7e:ba:cf:44:17:f4:ed:7d: 1d:cf:35:f0:93:11:ef:9d:1c:22:ce:b7:4c:a1:6b: b3:17:0f:6e:89:63:35:7b:16:3e:f6:7a:c4:75:b5: fc:2c:a6:0f:d9:1c:5c:38:2e:e7:33:d2:68:10:16: 6d:ba:65:94:64:3a:82:d2:01:56:9d:55:d7:5e:51: 50:b4:dd:14:d0:df:93:ee:bf:b7:b6:e3:d0:c1:5d: 5b:94:ad:8e:10:d1:71:29:25:a9:d7:d6:8b:e1:47: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:95:88:3A:16:37:B3:CD:28:87:42:22:18:BD:02:7C:17:FE:23:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d5:34:d3:6e:ad:45:79:80:9c:7e:b7:08:47:eb:53:b4:87: 39:10:8e:5c:8d:cd:ab:ac:25:d7:96:e5:05:92:58:5b:b4:f0: 4f:24:72:51:de:a4:63:55:0a:cc:c5:bb:3b:66:95:78:1e:bb: 5c:54:f2:e1:6a:20:72:d6:50:84:1a:37:66:c1:24:6c:70:b6: 35:c0:9c:9f:32:84:63:8b:2b:6d:65:3e:a5:ea:eb:ec:21:1a: a7:cf:2d:2f:b9:07:39:b4:ea:92:47:29:5e:1a:6b:10:43:02: f0:86:38:e3:c5:7a:bf:2a:23:cf:cb:c1:7d:02:d9:4c:b3:06: f2:de:c1:a0:0a:bb:49:44:35:dc:9a:3c:9a:01:d7:2b:06:00: 4c:83:5b:4d:3e:b9:f2:5e:56:8f:8c:28:88:78:9e:dc:66:ab: df:5f:db:9a:b9:e9:33:4f:12:b5:ec:02:74:79:a3:f0:ae:c3: 74:d5:25:8c:98:9d:40:4a:08:3a:52:da:f5:73:33:29:5d:da: f9:db:bb:70:b9:df:9d:f0:2d:f5:1f:58:b1:2b:1b:e5:ab:7e: 25:24:4b:aa:77:d8:5d:2b:eb:2f:44:81:01:7f:0b:95:c7:8e: 22:d8:2a:f4:3a:bf:f7:a2:fe:5c:44:fb:f6:3c:13:61:ed:7e: 34:8b:35:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAIfT27YlMkXLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk M2IyYjI1YTItNmQ5OC00NTY3LWEyMDQtNzQ3NTEwZmU2M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWj7vq5XbNWjiBKOp8zFPOti8enOG+y7TWO5 r5gQQRh0fjAlV1pkCT86B1O/KLt6gloS9OHbOcQhUly0ScH3x3iB2hAFoehST1Kk J8sra6cluraCeK6WgF8zfM0KzY1WfD7qfu0gAFc8o+iscqyc0tcPak8y/r/s/qr3 VzuhFXal9uRL6p+nQf7zfUqPMgAwjo+DGnsQTAAGsJKWfrrPRBf07X0dzzXwkxHv nRwizrdMoWuzFw9uiWM1exY+9nrEdbX8LKYP2RxcOC7nM9JoEBZtumWUZDqC0gFW nVXXXlFQtN0U0N+T7r+3tuPQwV1blK2OENFxKSWp19aL4UcR9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmViDoWN7PNKIdCIhi9AnwX/iMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTQzMDIwMDctMzc5Yy0z ZDBlLWIxNDQtYjMzMTA4ZThhOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHVNNNurUV5gJx+twhH61O0hzkQjlyNzausJdeW5QWSWFu08E8kclHe pGNVCszFuztmlXgeu1xU8uFqIHLWUIQaN2bBJGxwtjXAnJ8yhGOLK21lPqXq6+wh GqfPLS+5Bzm06pJHKV4aaxBDAvCGOOPFer8qI8/LwX0C2UyzBvLewaAKu0lENdya PJoB1ysGAEyDW00+ufJeVo+MKIh4ntxmq99f25q56TNPErXsAnR5o/Cuw3TVJYyY nUBKCDpS2vVzMyld2vnbu3C5353wLfUfWLErG+WrfiUkS6p32F0r6y9EgQF/C5XH jiLYKvQ6v/ei/lxE+/Y8E2HtfjSLNUc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:42 2025 by rpki-client