$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa File: 0073bbbf-0e5a-3e34-a840-8c081704c58a.roa (raw, json) Hash identifier: TbYOzD2lGZUzXKmw3j4zANlDG8mj5Ucv08VrrfFyZn0= Subject key identifier: A9:76:47:E2:89:6E:8C:C8:67:E9:6C:80:32:FA:E3:FF:BA:3B:BA:31 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C023839A39B324EE0DB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.31.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:02:38:39:a3:9b:32:4e:e0:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=d217d64b-3d76-449d-aaf0-d908d59459c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:d3:de:85:87:ba:d3:6e:cf:fe:17:d6:93: 48:bd:fd:1d:d7:42:8e:15:a2:1b:c3:e2:37:90:f8: 0b:cb:dc:c9:c9:b3:a2:96:e4:6d:a1:c0:3b:63:9f: 66:90:d1:1c:15:85:b2:ff:b2:9c:8d:30:ed:ca:8e: 31:9f:41:ba:a5:c7:3b:4f:68:a3:80:44:9a:f6:9c: d7:ab:ca:95:91:7b:83:74:16:b1:70:8e:50:4b:c2: dd:a8:84:ec:fa:95:54:87:e1:6a:7e:a0:36:6c:56: 5a:cd:7c:d4:be:6f:be:45:bd:c9:fe:98:20:54:8d: 0e:c3:3c:cd:0c:13:57:21:d0:cf:0c:a3:29:7b:a3: 38:36:74:6c:b3:3f:f2:0c:4f:0a:68:ce:70:fd:82: ed:bd:3d:f2:78:ab:bf:9a:c8:8c:c2:4f:67:d3:a6: 8e:15:5a:60:49:b6:c6:2f:25:4d:9c:9d:61:e5:b2: 6a:bb:f3:77:65:a5:2e:24:de:bb:3b:86:37:c6:00: d1:13:16:ad:76:81:0f:d4:1e:d1:dd:d3:b7:c2:50: ff:db:49:3d:36:db:15:31:6c:7b:f1:bc:af:9b:80: db:f2:5d:b7:fe:60:c6:a0:fa:dc:28:a1:b0:72:60: 22:ba:0d:ba:5e:de:02:84:20:b8:2f:f1:f4:c9:a1: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:47:E2:89:6E:8C:C8:67:E9:6C:80:32:FA:E3:FF:BA:3B:BA:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0073bbbf-0e5a-3e34-a840-8c081704c58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:86:a4:82:ed:2c:19:da:bc:5e:32:b2:43:d4:6e:3a:51:ad: 1a:02:c4:77:1b:89:c6:24:e6:10:84:75:d5:d5:7c:1e:2c:02: 83:90:a9:7b:72:93:1e:5e:22:99:96:92:63:81:74:88:ab:ef: 0e:c2:cf:a6:ca:e3:dc:0d:56:34:f5:89:5a:83:41:02:9c:f5: 98:24:59:b2:61:d4:de:4a:32:d8:e4:fa:44:ef:73:00:5a:31: 21:c7:ab:70:88:8b:82:2c:6e:75:1b:cb:43:de:c4:f7:86:22: 9a:4b:11:9d:ea:45:39:57:8d:4c:ae:0b:55:08:6b:6b:d2:f2: 20:9f:2f:25:dc:44:35:a4:91:5b:89:57:4e:52:b1:fd:4c:7a: 2b:66:a1:94:db:14:76:d0:72:87:b6:d2:42:de:3a:9a:aa:4e: e9:11:1e:c6:92:db:00:f7:26:85:2c:a9:55:ec:ee:36:c0:04: 2d:55:f3:0c:7b:82:88:90:1b:81:0f:95:5d:20:7b:40:9f:14: d8:63:7d:2e:42:2f:86:4d:b3:a4:a9:61:f4:03:d5:44:c6:22: 26:f3:24:d0:4d:51:29:c7:55:5e:61:57:9e:bd:ba:9c:9b:48: 1d:8d:c2:4d:ae:7e:8e:35:41:e0:6c:15:0a:e2:28:66:76:46: 57:a3:ef:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAI4OaObMk7g24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZDIxN2Q2NGItM2Q3Ni00NDlkLWFhZjAtZDkwOGQ1OTQ1OWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6zT3oWHutNuz/4X1pNIvf0d10KOFaIbw+I3 kPgLy9zJybOiluRtocA7Y59mkNEcFYWy/7KcjTDtyo4xn0G6pcc7T2ijgESa9pzX q8qVkXuDdBaxcI5QS8LdqITs+pVUh+FqfqA2bFZazXzUvm++Rb3J/pggVI0OwzzN DBNXIdDPDKMpe6M4NnRssz/yDE8KaM5w/YLtvT3yeKu/msiMwk9n06aOFVpgSbbG LyVNnJ1h5bJqu/N3ZaUuJN67O4Y3xgDRExatdoEP1B7R3dO3wlD/20k9NtsVMWx7 8byvm4Db8l23/mDGoPrcKKGwcmAiug26Xt4ChCC4L/H0yaGIcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl2R+KJbozIZ+lsgDL64/+6O7oxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDA3M2JiYmYtMGU1YS0z ZTM0LWE4NDAtOGMwODE3MDRjNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2GpILtLBnavF4yskPUbjpRrRoCxHcbicYk5hCEddXVfB4sAoOQqXty kx5eIpmWkmOBdIir7w7Cz6bK49wNVjT1iVqDQQKc9ZgkWbJh1N5KMtjk+kTvcwBa MSHHq3CIi4IsbnUby0PexPeGIppLEZ3qRTlXjUyuC1UIa2vS8iCfLyXcRDWkkVuJ V05Ssf1MeitmoZTbFHbQcoe20kLeOpqqTukRHsaS2wD3JoUsqVXs7jbABC1V8wx7 goiQG4EPlV0ge0CfFNhjfS5CL4ZNs6SpYfQD1UTGIibzJNBNUSnHVV5hV569upyb SB2Nwk2ufo41QeBsFQriKGZ2Rlej70U= -----END CERTIFICATE-----Generated at Sun Apr 6 11:59:46 2025 by rpki-client