$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa File: 1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa (raw, json) Hash identifier: F9f7RxqiiVv92k6w9yphNp6+2tfxRrPQbl2rvzU7k3U= Subject key identifier: 40:48:FA:91:06:5C:32:96:DE:8D:54:FF:84:78:11:0D:F8:DA:DD:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BF0E4B197774E3C44800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.18.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bf:0e:4b:19:77:74:e3:c4:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=4a91c750-f5f6-457a-b87a-4605a8bcaaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:b1:d7:9b:c6:48:fb:da:6c:f5:27:d3:89: 57:4a:92:60:42:9e:99:fa:5a:79:f5:5b:20:62:d5: 59:83:f0:c4:47:2b:9f:6e:f6:d9:47:ac:a5:5b:60: ba:83:bd:b2:45:5b:4b:b1:6a:84:b8:ec:ac:fc:b2: 3a:82:af:50:72:df:c4:35:bf:d3:81:8d:bb:17:90: 4f:cb:8a:cd:10:d8:2a:2d:c2:42:76:e2:a8:39:f9: 17:71:8c:0d:41:76:a9:26:b3:3a:54:2f:8c:c3:10: fb:d7:a3:39:9c:3a:e9:cb:57:4e:1f:9d:03:1c:31: 5c:79:34:d7:2f:bd:c5:5a:ca:1d:42:08:5a:f1:91: 6a:92:0d:97:09:8c:38:f9:71:15:e0:3b:61:8e:30: b5:e9:f1:aa:fa:45:a2:53:60:c5:e0:4c:84:9d:ab: d4:09:3c:6b:95:46:87:63:2f:28:99:bb:01:cf:ab: 5b:98:96:2c:e4:1a:6b:dc:10:f6:8e:ec:90:54:56: c6:a8:e4:cf:4b:f6:da:80:8a:d0:41:17:e3:60:6c: 76:7b:dc:9f:46:b7:28:7f:13:bc:80:0f:d6:77:8a: e8:a0:6b:da:96:e0:28:37:01:96:1c:43:0f:97:bd: 60:f8:36:74:7b:86:32:af:72:dd:96:a3:c4:66:f5: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:FA:91:06:5C:32:96:DE:8D:54:FF:84:78:11:0D:F8:DA:DD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe5b58c-5e0e-3c0e-a63d-d2d716b8d40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:83:cc:b2:f6:0f:76:57:a9:eb:97:5e:bb:0e:1c:74:cf:ca: 3d:75:e8:49:4b:25:5f:15:a9:0c:95:47:3c:69:1b:ed:9e:bf: 40:4e:30:c5:c9:c4:b5:25:fc:e7:45:0b:6c:6d:0a:3e:76:8c: e2:b1:17:c6:ce:8d:d0:86:17:c6:a3:66:b3:79:3b:1e:da:27: 72:4c:17:20:24:a2:a0:a1:1e:a3:e9:d4:bd:7d:4c:05:eb:01: 62:8c:cb:a5:ba:7c:f8:ae:61:19:5a:56:c0:f0:ae:a1:7a:f4: 65:61:d8:6d:f1:cc:9d:df:b3:1c:9d:51:04:f3:1c:90:73:dd: ed:3f:78:26:fc:cb:82:a5:65:ce:a4:1d:17:49:77:b7:1b:7a: e6:d3:07:af:12:0b:c0:e3:9d:82:34:ef:0e:7e:17:12:9d:82: 26:e2:b2:be:20:7a:03:f8:75:10:c9:79:66:0b:84:68:f3:a6: 02:28:e0:aa:df:d7:e0:60:e4:ed:79:32:f3:e8:e0:8b:79:95: 60:40:15:1b:e5:5e:a9:8e:ae:a3:8f:82:6b:6d:69:bb:11:c5: b5:5f:6d:f2:06:e5:0f:1d:29:c7:36:10:d5:0a:c7:81:5d:2f: 85:a7:aa:4f:9d:6e:19:c1:2a:f9:26:8e:32:05:2e:ac:0d:f5: f0:b1:36:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtr8OSxl3dOPESAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NGE5MWM3NTAtZjVmNi00NTdhLWI4N2EtNDYwNWE4YmNhYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibOx15vGSPvabPUn04lXSpJgQp6Z+lp59Vsg YtVZg/DERyufbvbZR6ylW2C6g72yRVtLsWqEuOys/LI6gq9Qct/ENb/TgY27F5BP y4rNENgqLcJCduKoOfkXcYwNQXapJrM6VC+MwxD716M5nDrpy1dOH50DHDFceTTX L73FWsodQgha8ZFqkg2XCYw4+XEV4DthjjC16fGq+kWiU2DF4EyEnavUCTxrlUaH Yy8ombsBz6tbmJYs5Bpr3BD2juyQVFbGqOTPS/bagIrQQRfjYGx2e9yfRrcofxO8 gA/Wd4rooGvaluAoNwGWHEMPl71g+DZ0e4Yyr3LdlqPEZvWcTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBI+pEGXDKW3o1U/4R4EQ342t0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWZlNWI1OGMtNWUwZS0z YzBlLWE2M2QtZDJkNzE2YjhkNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaDzLL2D3ZXqeuXXrsOHHTPyj116ElLJV8VqQyVRzxpG+2ev0BOMMXJ xLUl/OdFC2xtCj52jOKxF8bOjdCGF8ajZrN5Ox7aJ3JMFyAkoqChHqPp1L19TAXr AWKMy6W6fPiuYRlaVsDwrqF69GVh2G3xzJ3fsxydUQTzHJBz3e0/eCb8y4KlZc6k HRdJd7cbeubTB68SC8DjnYI07w5+FxKdgibisr4gegP4dRDJeWYLhGjzpgIo4Krf 1+Bg5O15MvPo4It5lWBAFRvlXqmOrqOPgmttabsRxbVfbfIG5Q8dKcc2ENUKx4Fd L4Wnqk+dbhnBKvkmjjIFLqwN9fCxNsE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:55 2025 by rpki-client