$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea531581-8c50-3d46-ab67-9ccc9a438885.roa File: ea531581-8c50-3d46-ab67-9ccc9a438885.roa (raw, json) Hash identifier: JbwXKv2NMMyLLI/RXiIm93fA7+H6zXgYB1Kscq9uZVs= Subject key identifier: 8A:E3:E7:3C:6F:E5:10:4C:1B:5F:7F:86:8B:52:DE:47:11:C5:7B:CA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584989D4A98CA536E3E73435ABC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea531581-8c50-3d46-ab67-9ccc9a438885.roa Signing time: Tue 15 Apr 2025 21:48:03 +0000 ROA not before: Tue 15 Apr 2025 21:48:03 +0000 ROA not after: Mon 14 Jul 2025 21:48:03 +0000 asID: 13335 IP address blocks: 104.23.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:d4:a9:8c:a5:36:e3:e7:34:35:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 15 21:48:03 2025 GMT Not After : Jul 14 21:48:03 2025 GMT Subject: CN=1fca64ff-5846-4883-b4cd-821bf733ee41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c1:e7:a5:ad:0e:97:fb:e1:85:cf:9a:e8:4c: 41:12:4b:19:c5:ee:68:60:c1:81:90:6d:e0:eb:93: 89:bd:a3:6c:1a:09:80:6c:3e:9e:18:f2:1e:c7:f2: 07:0a:ef:6c:f9:f2:5a:c3:39:f4:19:8c:15:b3:22: 08:c2:3d:78:b8:7b:68:57:6b:e7:7c:c0:e6:34:04: dc:a2:f9:14:53:6f:08:b6:75:26:24:7c:9a:63:c4: ff:92:cd:d8:7a:84:9e:d7:5e:32:27:70:7e:1e:64: 88:22:14:b9:6a:27:50:27:35:8c:fe:2d:27:84:c9: 29:58:0e:62:82:6b:78:cd:02:29:89:52:f2:4e:43: 57:d7:66:0e:26:6c:92:72:4e:f9:5a:b9:d9:0f:22: bb:ec:21:23:7a:cb:02:95:83:cc:44:24:45:8a:c7: 72:0f:54:1a:fd:ca:56:ca:60:74:52:9a:03:f3:51: e4:93:77:f4:26:b0:d4:b4:8a:9f:2e:f8:fc:0c:62: b8:9f:26:3f:33:c2:e0:69:48:52:3b:bf:2c:c3:7f: 73:76:86:09:e7:9e:24:7b:08:be:b1:59:93:82:d1: 56:75:06:66:94:f3:77:5f:11:22:2b:22:d8:7b:22: 5f:ce:16:54:b4:56:b0:8a:de:69:b9:ad:2c:df:32: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E3:E7:3C:6F:E5:10:4C:1B:5F:7F:86:8B:52:DE:47:11:C5:7B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea531581-8c50-3d46-ab67-9ccc9a438885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ed:b3:24:d1:4b:7f:8d:3f:2a:be:25:c6:99:6e:9b:b6:de: 21:0b:98:f0:33:c2:28:e3:c7:0d:46:f3:00:92:fe:2f:f2:b6: 16:f3:91:af:0e:85:5b:6f:18:d8:91:77:f4:72:17:eb:ab:c0: 27:c1:6b:74:22:14:23:90:c5:54:04:09:3f:19:52:8f:5e:0e: 58:00:81:8c:f9:7c:c5:88:1d:ea:39:03:ff:fb:72:b7:5c:98: a8:b7:c9:3e:3d:70:90:bc:e9:f7:1f:3a:69:0b:98:a3:3a:9f: 1d:ad:8b:1c:15:66:86:67:fd:ce:aa:31:1b:e7:ea:7b:ce:ca: 9a:b1:fe:3c:d6:c1:71:36:54:09:e1:e9:d0:99:25:13:59:cd: 8a:10:b9:b1:8b:69:d2:49:a5:cb:dc:db:54:02:31:8a:97:e7: 53:46:84:15:1e:a2:f1:22:47:28:5f:df:ad:bb:94:bc:95:f2: 4d:00:0b:74:83:66:94:6b:1a:9f:92:85:94:55:e0:b8:f4:76: a3:dd:06:6b:f4:29:6b:7a:56:e1:aa:bd:b1:ef:4d:b1:ea:ae: 20:5b:0e:7b:bc:78:10:a1:ef:a0:ee:6c:9b:4f:b7:75:cf:f4: b0:c4:b0:c3:1e:b5:83:41:7c:a0:29:61:04:60:63:ae:60:9f: f6:33:48:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJ1KmMpTbj5zQ1q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxNTIxNDgwM1oXDTI1MDcxNDIxNDgwM1owLzEtMCsGA1UEAxMk MWZjYTY0ZmYtNTg0Ni00ODgzLWI0Y2QtODIxYmY3MzNlZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcHnpa0Ol/vhhc+a6ExBEksZxe5oYMGBkG3g 65OJvaNsGgmAbD6eGPIex/IHCu9s+fJawzn0GYwVsyIIwj14uHtoV2vnfMDmNATc ovkUU28ItnUmJHyaY8T/ks3YeoSe114yJ3B+HmSIIhS5aidQJzWM/i0nhMkpWA5i gmt4zQIpiVLyTkNX12YOJmySck75WrnZDyK77CEjessClYPMRCRFisdyD1Qa/cpW ymB0UpoD81Hkk3f0JrDUtIqfLvj8DGK4nyY/M8LgaUhSO78sw39zdoYJ554kewi+ sVmTgtFWdQZmlPN3XxEiKyLYeyJfzhZUtFawit5pua0s3zLrWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrj5zxv5RBMG19/hotS3kcRxXvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWE1MzE1ODEtOGM1MC0z ZDQ2LWFiNjctOWNjYzlhNDM4ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTtsyTRS3+NPyq+JcaZbpu23iELmPAzwijjxw1G8wCS/i/ythbzka8O hVtvGNiRd/RyF+urwCfBa3QiFCOQxVQECT8ZUo9eDlgAgYz5fMWIHeo5A//7crdc mKi3yT49cJC86fcfOmkLmKM6nx2tixwVZoZn/c6qMRvn6nvOypqx/jzWwXE2VAnh 6dCZJRNZzYoQubGLadJJpcvc21QCMYqX51NGhBUeovEiRyhf3627lLyV8k0AC3SD ZpRrGp+ShZRV4Lj0dqPdBmv0KWt6VuGqvbHvTbHqriBbDnu8eBCh76DubJtPt3XP 9LDEsMMetYNBfKApYQRgY65gn/YzSEE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:08 2025 by rpki-client