$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa File: f036f6d8-d97e-3966-b183-31069d2e0590.roa (raw, json) Hash identifier: uzBoFT+EbIPnbOcEE+9oZc3C2lr0EFNgqhCfDmIN9YI= Subject key identifier: 3A:CF:01:34:C2:CB:3A:7A:38:98:BA:19:68:0F:C8:6A:C4:FC:E1:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C020E7BF801F8E98822C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.31.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:02:0e:7b:f8:01:f8:e9:88:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=b61a06ae-112d-4ceb-98e9-1ed8245139e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:d6:c3:77:a8:04:c6:e9:b2:6d:8b:d7:6b: 63:15:2e:83:5c:78:fe:3c:15:9c:b0:1c:86:57:8a: ef:12:64:8a:9b:74:05:83:b4:03:1c:d7:d9:29:b4: 03:b7:48:4a:70:04:9c:4b:1b:14:ad:17:08:54:1d: 3d:9e:61:57:21:30:0f:16:5e:7c:d8:fa:41:02:a4: 61:de:1e:1e:2f:04:72:b0:66:ef:46:b4:de:9f:97: 8a:96:2a:f0:de:f4:84:02:40:c5:07:8f:47:e0:e3: bf:89:d9:2e:a4:8b:b7:73:a6:87:08:19:ed:49:e9: 1f:13:b5:2a:8e:89:72:16:6a:57:e2:85:91:46:27: 53:6e:96:ab:3e:db:31:62:74:db:80:d0:13:e3:19: fa:05:de:10:a4:da:66:7c:f5:98:72:b0:a4:ec:b1: 7f:66:d3:f8:11:6b:4e:f2:05:78:49:6d:90:41:4a: 27:dd:fd:c2:1f:20:6c:e9:c9:e8:3e:c6:8d:46:00: 82:36:ea:e4:b1:4e:21:e1:b1:00:1a:5e:bf:3b:9f: 15:d3:f7:9c:eb:48:8a:3c:41:3a:5c:8d:d3:c2:44: 9f:11:2d:74:d4:30:c9:82:bc:a5:61:34:8e:84:93: 0d:bc:42:95:ad:e1:5f:f1:11:37:a0:5f:50:c1:18: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CF:01:34:C2:CB:3A:7A:38:98:BA:19:68:0F:C8:6A:C4:FC:E1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5b:af:20:14:b9:54:b6:31:19:9d:81:08:c3:2f:b3:63:dd: 43:17:73:fc:76:9e:71:cd:37:1e:58:1a:b7:65:a1:3b:2b:f6: c2:63:b6:bf:6d:19:a3:3c:7f:7a:2c:76:fe:d2:02:04:91:6d: 3d:72:95:df:2c:c4:b9:cc:b7:83:b3:6e:a8:d1:80:16:62:66: 2d:3b:23:3a:b0:fd:52:01:db:13:12:ce:cb:ac:b9:b1:4e:32: e8:f7:a1:a1:75:d8:4d:14:1e:56:1f:43:25:8d:59:3e:9d:b3: b7:be:f3:7b:be:ec:4e:57:35:a9:02:2f:60:80:47:9e:e7:cd: a3:df:cd:63:04:fc:71:1f:6e:b2:3d:c5:ce:9f:01:7e:15:c8: 42:c1:c2:8b:33:6a:e1:86:25:a7:a1:09:c1:09:a3:3a:08:f8: ad:79:91:3a:57:4d:0d:ff:bb:3d:79:ef:ad:22:4b:95:78:34: cf:89:f7:4c:a5:00:61:df:5d:3d:69:96:61:82:f4:ee:0a:9a: c1:30:43:ea:65:b7:03:a3:ff:25:19:53:e3:c1:ac:8c:54:1a: 26:af:3d:e9:36:35:d6:c2:90:f4:20:43:e6:2c:c8:75:ee:b2: d1:4d:32:39:e9:d3:69:37:c0:74:80:c1:50:55:08:a0:9e:87: 16:d7:d6:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAIOe/gB+OmIIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YjYxYTA2YWUtMTEyZC00Y2ViLTk4ZTktMWVkODI0NTEzOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwvWw3eoBMbpsm2L12tjFS6DXHj+PBWcsByG V4rvEmSKm3QFg7QDHNfZKbQDt0hKcAScSxsUrRcIVB09nmFXITAPFl582PpBAqRh 3h4eLwRysGbvRrTen5eKlirw3vSEAkDFB49H4OO/idkupIu3c6aHCBntSekfE7Uq jolyFmpX4oWRRidTbparPtsxYnTbgNAT4xn6Bd4QpNpmfPWYcrCk7LF/ZtP4EWtO 8gV4SW2QQUon3f3CHyBs6cnoPsaNRgCCNurksU4h4bEAGl6/O58V0/ec60iKPEE6 XI3TwkSfES101DDJgrylYTSOhJMNvEKVreFf8RE3oF9QwRi4EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrPATTCyzp6OJi6GWgPyGrE/OG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjAzNmY2ZDgtZDk3ZS0z OTY2LWIxODMtMzEwNjlkMmUwNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARbryAUuVS2MRmdgQjDL7Nj3UMXc/x2nnHNNx5YGrdloTsr9sJjtr9t GaM8f3osdv7SAgSRbT1yld8sxLnMt4OzbqjRgBZiZi07Izqw/VIB2xMSzsusubFO Muj3oaF12E0UHlYfQyWNWT6ds7e+83u+7E5XNakCL2CAR57nzaPfzWME/HEfbrI9 xc6fAX4VyELBwoszauGGJaehCcEJozoI+K15kTpXTQ3/uz15760iS5V4NM+J90yl AGHfXT1plmGC9O4KmsEwQ+pltwOj/yUZU+PBrIxUGiavPek2NdbCkPQgQ+YsyHXu stFNMjnp02k3wHSAwVBVCKCehxbX1hA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:19 2025 by rpki-client