$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa File: be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa (raw, json) Hash identifier: g86a73O8CF70JG4c1n6QxTVhFMJ6j2UpaHL+HRvfRWs= Subject key identifier: 97:CD:24:51:E1:29:5B:F3:C3:0A:43:48:9B:7D:E2:CA:FA:00:32:E1 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F432858499F249AC88158C9DE5D70E400 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 40342 IP address blocks: 104.200.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9a:c8:81:58:c9:de:5d:70:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=ba6af74e-c934-49da-ba0d-c86f8bf711dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:27:2f:5e:70:3d:8a:5c:c5:74:43:1f:35: f7:c1:39:5c:bc:6c:64:b6:d1:b5:07:ea:43:b8:1a: fa:ff:1d:66:a4:cc:50:af:5b:27:c4:a5:44:34:f6: 2a:e6:ee:df:ec:ee:0a:c2:dd:b8:49:4b:69:1f:1f: 33:23:36:83:04:4c:5f:67:59:82:05:c8:00:a7:08: 5d:a1:a3:67:9e:39:e2:44:0b:d4:3d:c3:14:4c:ec: 16:bb:73:34:d4:36:68:7c:0a:65:18:86:92:23:00: ab:e8:a7:02:2a:b3:4f:91:93:01:4c:4d:a7:e2:08: 5a:62:91:e9:b1:4c:99:f3:e5:c7:91:ae:ec:ea:92: e0:ab:f3:ca:f2:e9:eb:03:39:da:18:70:05:22:9b: 3d:0a:f0:68:88:80:46:c3:49:d7:37:10:18:ed:f3: 90:9b:80:12:f6:78:6b:03:6f:f9:3e:03:a8:3d:fa: b7:90:8c:37:b0:37:65:91:a1:71:ed:8d:23:8e:0b: 79:a6:56:94:3b:fa:8e:69:b1:91:a7:dd:db:c5:e6: 4e:51:69:2f:9a:cb:7f:e9:8b:13:7b:5a:43:a2:8f: 7e:b4:7e:0c:da:cd:3f:4a:0f:df:e0:52:d6:b7:e7: f4:13:24:bd:05:a6:d8:d7:ad:d0:f4:af:65:41:4d: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CD:24:51:E1:29:5B:F3:C3:0A:43:48:9B:7D:E2:CA:FA:00:32:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:96:d9:87:f5:da:95:ac:e4:bc:82:11:cc:fc:2d:fd:61:a8: fc:ec:87:ac:b6:75:38:0b:4b:d9:46:46:3a:a3:e7:32:8e:7f: 6a:7c:d6:76:08:1a:47:f9:2a:e5:e5:a1:ac:72:60:aa:2b:eb: 45:e4:fa:0d:c0:ee:49:e6:63:f5:c5:81:38:c8:86:88:a6:e9: 63:d2:8c:db:eb:b5:fa:c4:e3:d2:3c:60:7b:3c:8d:07:25:89: fd:2d:11:2d:b7:f7:f8:f4:ab:64:83:f6:49:60:9a:0c:36:03: 6f:41:18:87:0e:57:a0:6e:e2:0c:32:73:90:37:cb:fe:94:07: ca:7a:58:3f:f7:56:43:e9:00:17:2e:42:13:3c:2d:ab:71:fe: ac:b9:4f:e5:76:be:d5:ee:67:61:45:4e:66:c1:95:f2:d3:b4: ca:6c:06:9c:8a:48:5b:5e:f0:9d:35:eb:ee:7d:cb:c1:a7:0f: 51:a5:c6:20:99:33:ae:47:c4:31:d2:cb:49:b8:75:93:b0:78: b6:ed:ac:7a:10:87:62:42:04:e8:4d:12:00:46:bb:97:78:9b: 7e:b0:3b:46:c2:b3:c2:22:1f:9f:bc:a3:e8:e2:01:d9:78:04: 93:94:6e:77:14:45:de:aa:1f:db:4a:49:a3:e0:fb:f2:11:1a: b9:35:b1:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJrIgVjJ3l1w5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YmE2YWY3NGUtYzkzNC00OWRhLWJhMGQtYzg2ZjhiZjcxMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+onL15wPYpcxXRDHzX3wTlcvGxkttG1B+pD uBr6/x1mpMxQr1snxKVENPYq5u7f7O4Kwt24SUtpHx8zIzaDBExfZ1mCBcgApwhd oaNnnjniRAvUPcMUTOwWu3M01DZofAplGIaSIwCr6KcCKrNPkZMBTE2n4ghaYpHp sUyZ8+XHka7s6pLgq/PK8unrAznaGHAFIps9CvBoiIBGw0nXNxAY7fOQm4AS9nhr A2/5PgOoPfq3kIw3sDdlkaFx7Y0jjgt5plaUO/qOabGRp93bxeZOUWkvmst/6YsT e1pDoo9+tH4M2s0/Sg/f4FLWt+f0EyS9BabY163Q9K9lQU10LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfNJFHhKVvzwwpDSJt94sr6ADLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvYmUxOGU1OTEtZDI2Yi0z ZjVkLWIzYTktYmQ2MmIwNjk3ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqW2Yf12pWs5LyCEcz8Lf1hqPzsh6y2dTgLS9lGRjqj5zKOf2p81nYI Gkf5KuXloaxyYKor60Xk+g3A7knmY/XFgTjIhoim6WPSjNvrtfrE49I8YHs8jQcl if0tES239/j0q2SD9klgmgw2A29BGIcOV6Bu4gwyc5A3y/6UB8p6WD/3VkPpABcu QhM8Latx/qy5T+V2vtXuZ2FFTmbBlfLTtMpsBpyKSFte8J016+59y8GnD1GlxiCZ M65HxDHSy0m4dZOweLbtrHoQh2JCBOhNEgBGu5d4m36wO0bCs8IiH5+8o+jiAdl4 BJOUbncURd6qH9tKSaPg+/IRGrk1seA= -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:28 2025 by rpki-client