$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa File: a0b3d676-8d81-3776-9084-78bd06aa5966.roa (raw, json) Hash identifier: EGtGKGhoYQ5AyfbElRZhoPpjJK4bXS8y0tC5rOutR/Q= Subject key identifier: 41:85:F2:7D:DE:00:9A:71:8A:4C:18:DA:4C:BF:DB:7B:8F:AB:DC:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BBB0E8FF4D8222B45C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.16.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bb:b0:e8:ff:4d:82:22:b4:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=848fa7e8-c5d5-43e3-9ccf-9b9b70058fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:f5:26:6b:50:d7:ec:8e:7a:8b:36:4a:da: a1:85:35:16:d3:53:a5:21:e8:f9:02:c5:2e:dd:95: 7d:a4:ac:c4:9e:0c:76:a9:1c:23:9c:be:48:fd:b9: 75:2e:63:8c:11:5b:34:9f:d4:4f:b0:0c:bd:41:81: 66:8d:7a:49:cd:db:d3:e2:fe:dd:97:f6:b4:af:92: 1a:32:1c:62:b4:41:74:b1:b3:ed:3e:47:22:f1:b9: 7c:53:c2:fd:df:db:b3:5c:35:a8:38:40:5f:b0:4e: 67:8c:ef:3d:7a:5c:bc:5a:a7:8a:2b:b4:13:50:19: da:bf:07:2a:12:66:00:3b:ea:e4:83:ab:95:3c:14: 5b:be:0b:3e:26:97:3a:0c:50:51:d7:95:d8:2b:59: 38:ee:20:46:0a:e0:4b:9d:fd:d6:c3:7e:29:68:bd: e2:1a:38:43:c9:b0:0c:30:4c:73:ed:18:de:10:c2: 9c:66:9a:4d:42:20:49:1c:bb:f9:5a:05:6e:bf:39: 51:fe:8d:b7:ba:da:99:32:dd:ed:27:be:4c:24:1e: 12:f9:73:72:a5:98:1f:5f:97:e1:25:ff:7f:68:d5: 84:aa:e4:7b:82:52:df:0b:66:63:3f:a1:3e:1d:8a: 16:ea:5e:53:fc:20:21:2c:33:6a:f9:63:ed:73:8b: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:F2:7D:DE:00:9A:71:8A:4C:18:DA:4C:BF:DB:7B:8F:AB:DC:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:20:0b:d9:45:b4:91:bf:e6:f8:97:f2:7d:be:03:44:33:91: b4:3c:36:e2:e2:e0:58:0f:91:af:c2:be:22:f1:42:c6:98:3f: ae:c0:31:24:45:d4:21:d6:bc:1f:87:7e:a3:59:03:e6:4c:3d: b7:e1:6e:31:75:b4:d5:57:6f:5f:8c:b9:0a:87:c0:9b:e0:4b: 82:e5:be:6c:48:cd:5f:16:57:0b:d5:1d:4e:96:10:e1:e2:3c: bd:3d:e5:69:76:67:b7:d9:a3:22:de:11:77:2e:7b:af:a2:e8: 76:e4:60:7d:05:f6:f0:04:59:5c:e4:d0:a3:50:ac:35:fc:22: 39:75:8e:49:55:d7:6b:a7:52:5b:4d:56:f5:b8:bc:46:5f:d3: bb:81:8e:93:79:3e:49:34:84:f4:6b:53:be:8d:f0:f6:07:73: a5:ae:b0:d6:4d:ee:03:15:e6:5b:38:ff:86:77:2b:87:09:b7: 91:51:ba:ff:d5:7e:bb:9a:6f:8d:32:d9:3d:82:02:01:be:b5: f3:38:78:66:b3:40:d0:8f:11:6d:b6:82:11:79:e9:41:12:57: 2e:db:a2:96:06:34:b2:fc:6c:11:10:fd:79:a7:6c:c2:eb:41: 1b:ae:4d:08:9a:cd:ea:ab:9c:47:09:20:b5:87:34:81:73:aa: 6b:77:09:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtruw6P9NgiK0XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ODQ4ZmE3ZTgtYzVkNS00M2UzLTljY2YtOWI5YjcwMDU4ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgL1JmtQ1+yOeos2StqhhTUW01OlIej5AsUu 3ZV9pKzEngx2qRwjnL5I/bl1LmOMEVs0n9RPsAy9QYFmjXpJzdvT4v7dl/a0r5Ia MhxitEF0sbPtPkci8bl8U8L939uzXDWoOEBfsE5njO89ely8WqeKK7QTUBnavwcq EmYAO+rkg6uVPBRbvgs+Jpc6DFBR15XYK1k47iBGCuBLnf3Ww34paL3iGjhDybAM MExz7RjeEMKcZppNQiBJHLv5WgVuvzlR/o23utqZMt3tJ75MJB4S+XNypZgfX5fh Jf9/aNWEquR7glLfC2ZjP6E+HYoW6l5T/CAhLDNq+WPtc4tHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGF8n3eAJpxikwY2ky/23uPq9ybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTBiM2Q2NzYtOGQ4MS0z Nzc2LTkwODQtNzhiZDA2YWE1OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4gC9lFtJG/5viX8n2+A0QzkbQ8NuLi4FgPka/CviLxQsaYP67AMSRF 1CHWvB+HfqNZA+ZMPbfhbjF1tNVXb1+MuQqHwJvgS4LlvmxIzV8WVwvVHU6WEOHi PL095Wl2Z7fZoyLeEXcue6+i6HbkYH0F9vAEWVzk0KNQrDX8Ijl1jklV12unUltN VvW4vEZf07uBjpN5Pkk0hPRrU76N8PYHc6WusNZN7gMV5ls4/4Z3K4cJt5FRuv/V fruab40y2T2CAgG+tfM4eGazQNCPEW22ghF56UESVy7bopYGNLL8bBEQ/XmnbMLr QRuuTQiazeqrnEcJILWHNIFzqmt3Ces= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:14 2025 by rpki-client