$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa File: 211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa (raw, json) Hash identifier: 2OQr0iUBEgOwTbAW9ZPZz9kAwYlb6lB1OKwLCNPtT44= Subject key identifier: 9F:2A:2F:70:24:0D:45:C3:46:7A:72:39:34:FD:F8:79:1F:B4:6D:EF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD50678F5F0F9A0EF3B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.20.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d5:06:78:f5:f0:f9:a0:ef:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=7a1f5a99-d48e-4bc2-b438-e4ff5b055956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:fd:ef:19:4e:35:8a:b9:4f:18:95:19:41: d0:04:db:d6:de:70:a5:fa:e7:f4:4d:5a:c4:55:1c: 1a:5a:30:b2:cd:ab:e3:53:f3:d2:28:be:ef:a0:c5: fd:92:9b:11:2f:37:c7:34:58:4c:08:db:3e:16:e7: 5c:0b:86:31:7b:2e:e8:25:3f:8c:f6:95:02:53:9f: 5d:90:14:25:5b:8e:67:81:21:7b:40:e0:d3:88:d2: 78:99:80:db:a8:04:83:9a:d6:7a:c3:a4:8c:f0:92: 75:6c:cf:6a:ef:4a:10:ce:fb:23:12:8e:92:1e:c6: 96:b2:9e:65:13:e5:44:c2:70:ac:4d:aa:5d:82:37: 72:0e:2f:32:b0:eb:65:3c:f5:b0:b5:ce:0f:a1:d6: f1:fd:48:0f:67:17:24:83:48:10:97:bf:99:3c:b8: d9:7a:f7:ab:33:d4:be:71:aa:91:03:f8:c3:fa:28: b1:24:9a:58:6b:8f:07:8b:73:37:30:c7:dc:fd:27: 93:48:76:7f:83:9f:44:bc:a5:6f:3c:a8:97:1a:21: 03:c7:0f:c2:36:59:f1:37:af:48:dd:b8:48:83:02: 47:95:1c:09:77:28:df:0a:aa:93:01:0c:19:ea:0b: ca:bf:d6:1b:e1:22:0f:cc:8a:b8:38:19:f3:23:a6: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:2F:70:24:0D:45:C3:46:7A:72:39:34:FD:F8:79:1F:B4:6D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5e:d6:13:b0:e4:c9:ab:cc:5b:54:3f:6a:13:15:b5:28:79: c6:82:ac:7a:4b:52:0f:44:1b:8a:d9:8d:09:23:94:72:49:fe: ab:3a:03:71:a4:84:14:23:90:50:eb:98:9b:0f:30:c5:64:91: a7:70:5a:0f:a3:cb:cb:46:b9:ed:62:06:5b:eb:d0:ad:7c:e5: 0e:8f:7a:0e:be:25:26:6e:e1:43:0d:22:af:91:40:31:a8:4d: c0:99:ec:12:da:fc:22:4b:f5:dd:c2:0d:5a:e0:1e:d5:50:4a: 9b:4a:5e:b2:7f:7f:d1:20:90:f8:66:79:d2:06:07:cc:69:96: bb:05:2d:bb:9d:c5:8d:36:d6:b7:23:ba:f2:1b:bf:43:f9:d7: 89:98:65:7f:4c:cc:2e:c6:86:73:80:7f:a7:96:d0:52:fd:29: f5:e7:b7:4d:af:4f:e3:f9:e1:71:5c:cb:d7:53:f3:b6:ac:bd: 80:45:fa:f5:60:51:7f:79:29:b5:ac:bb:7c:fe:c8:0d:39:ad: 70:a3:8b:7f:67:bc:f7:a1:91:b4:7e:ff:a2:76:92:d4:96:d8: d2:7b:a6:d7:ae:c6:3c:82:7b:e6:d4:f2:5f:68:6c:e5:0e:ae: bd:70:a2:6a:0b:e6:e2:ad:0d:09:aa:89:03:b2:cf:f8:5b:cb: 10:ee:5c:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79UGePXw+aDvOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk N2ExZjVhOTktZDQ4ZS00YmMyLWI0MzgtZTRmZjViMDU1OTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzr97xlONYq5TxiVGUHQBNvW3nCl+uf0TVrE VRwaWjCyzavjU/PSKL7voMX9kpsRLzfHNFhMCNs+FudcC4Yxey7oJT+M9pUCU59d kBQlW45ngSF7QODTiNJ4mYDbqASDmtZ6w6SM8JJ1bM9q70oQzvsjEo6SHsaWsp5l E+VEwnCsTapdgjdyDi8ysOtlPPWwtc4Podbx/UgPZxckg0gQl7+ZPLjZeverM9S+ caqRA/jD+iixJJpYa48Hi3M3MMfc/SeTSHZ/g59EvKVvPKiXGiEDxw/CNlnxN69I 3bhIgwJHlRwJdyjfCqqTAQwZ6gvKv9Yb4SIPzIq4OBnzI6Z25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8qL3AkDUXDRnpyOTT9+HkftG3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjExZmEzZGEtY2RmYS0z MDRjLWE4ZmItYzBlZDgzMjUxYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJe1hOw5MmrzFtUP2oTFbUoecaCrHpLUg9EG4rZjQkjlHJJ/qs6A3Gk hBQjkFDrmJsPMMVkkadwWg+jy8tGue1iBlvr0K185Q6Peg6+JSZu4UMNIq+RQDGo TcCZ7BLa/CJL9d3CDVrgHtVQSptKXrJ/f9EgkPhmedIGB8xplrsFLbudxY021rcj uvIbv0P514mYZX9MzC7GhnOAf6eW0FL9KfXnt02vT+P54XFcy9dT87asvYBF+vVg UX95KbWsu3z+yA05rXCji39nvPehkbR+/6J2ktSW2NJ7pteuxjyCe+bU8l9obOUO rr1womoL5uKtDQmqiQOyz/hbyxDuXDU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:35 2025 by rpki-client