$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa File: 2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa (raw, json) Hash identifier: im6vnMYIbeV3JNHKmr35IC1VQWhgLfJKcz49V3rJllE= Subject key identifier: E8:D1:A5:A9:3E:8E:C0:FF:82:26:CC:88:B3:A4:85:A2:26:61:F4:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD3E2442BCB1D16A24BF0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.18.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d3:e2:44:2b:cb:1d:16:a2:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=ae78a516-6196-470c-8bf5-a9800103db78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:9b:12:fe:81:af:11:26:a3:f5:1f:98:5c: bf:b8:19:5a:d6:93:fe:4a:fc:83:92:d0:ad:b1:7c: ec:88:de:00:7e:a6:17:bf:89:d2:a1:4f:13:ac:d2: a1:59:ad:8d:50:36:5c:9d:23:3d:e7:42:72:e8:d4: 7f:8f:85:3a:f9:a3:f4:70:25:df:57:6f:a6:95:bd: 5e:d8:f5:83:e6:bd:b9:ea:fe:a4:f7:be:00:a2:c5: 8d:8c:fe:ef:ca:4b:14:10:54:ad:9d:68:7c:db:15: 88:f8:b5:9a:da:90:3e:28:cc:68:a8:9d:7c:a1:11: 4e:29:c3:40:28:0b:ac:a1:55:d6:73:45:3b:f2:2b: 55:5c:17:a2:42:df:e8:c4:63:ef:2a:ff:83:ab:c7: 39:f6:45:32:92:85:dc:c9:20:3a:b6:4e:ce:a4:6f: 79:b6:eb:4f:f3:29:4b:c1:91:25:d0:de:24:2c:cf: 64:b9:87:9e:ce:00:7c:17:2e:e5:f8:2b:26:47:3f: 1b:eb:92:84:9b:5f:64:50:3d:a6:3f:8d:db:7b:68: ba:c2:e3:37:66:a7:08:d9:74:73:7b:65:42:e1:84: f8:b6:31:68:49:71:4e:74:ed:80:4d:1c:14:82:e5: 14:dc:84:dd:b2:52:2d:9a:d3:dd:6f:f6:fb:a2:22: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D1:A5:A9:3E:8E:C0:FF:82:26:CC:88:B3:A4:85:A2:26:61:F4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:0f:87:4a:fb:fb:31:36:8b:24:68:76:f2:36:78:db:ac:00: 06:ee:e1:cd:70:32:eb:18:31:4c:f0:f4:14:1e:73:21:8e:33: cc:51:81:55:5b:95:1b:11:64:cb:93:49:b9:20:0f:2b:42:9c: d8:4e:7a:08:e3:ef:7f:1a:69:ee:89:a9:4c:98:9b:a4:a1:9d: 86:9f:a9:a6:62:2e:76:1f:12:a6:ae:e8:b2:17:9f:52:9c:fa: 86:d3:a9:07:ed:f0:ef:7d:b5:d1:31:a5:a2:25:ef:03:7c:c4: e3:35:35:c0:37:05:99:58:d8:2f:59:11:95:40:5a:ab:2f:d9: 58:ba:9b:10:ab:81:f1:5d:52:03:2a:7a:c3:09:fb:8c:3f:18: 0e:0b:b4:d4:dd:35:5d:5f:c9:1c:12:88:2b:1c:b0:c3:4c:83: 5f:d4:65:a6:22:41:cb:d0:b2:1a:c0:ca:c4:7d:71:80:84:7d: 92:4b:90:9a:2f:77:da:df:91:af:07:b9:24:70:7c:85:b4:48: 2e:e2:aa:5c:f0:4b:9e:d8:68:ab:51:ec:3c:13:f1:53:67:a3: d6:35:c7:0c:22:fe:a4:08:93:66:69:a5:c5:ff:01:c1:1b:05: cf:04:7c:68:c7:21:8c:1a:9f:6d:9c:20:13:bd:fd:35:03:27: 84:b6:a6:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79PiRCvLHRaiS/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YWU3OGE1MTYtNjE5Ni00NzBjLThiZjUtYTk4MDAxMDNkYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud2bEv6BrxEmo/UfmFy/uBla1pP+SvyDktCt sXzsiN4AfqYXv4nSoU8TrNKhWa2NUDZcnSM950Jy6NR/j4U6+aP0cCXfV2+mlb1e 2PWD5r256v6k974AosWNjP7vyksUEFStnWh82xWI+LWa2pA+KMxoqJ18oRFOKcNA KAusoVXWc0U78itVXBeiQt/oxGPvKv+Dq8c59kUykoXcySA6tk7OpG95tutP8ylL wZEl0N4kLM9kuYeezgB8Fy7l+CsmRz8b65KEm19kUD2mP43be2i6wuM3ZqcI2XRz e2VC4YT4tjFoSXFOdO2ATRwUguUU3ITdslItmtPdb/b7oiJpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjRpak+jsD/gibMiLOkhaImYfRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM3ZTBiMjktODY0OC0z MWNjLTllNTAtY2U5NzJjMmFiMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8Ph0r7+zE2iyRodvI2eNusAAbu4c1wMusYMUzw9BQecyGOM8xRgVVb lRsRZMuTSbkgDytCnNhOegjj738aae6JqUyYm6ShnYafqaZiLnYfEqau6LIXn1Kc +obTqQft8O99tdExpaIl7wN8xOM1NcA3BZlY2C9ZEZVAWqsv2Vi6mxCrgfFdUgMq esMJ+4w/GA4LtNTdNV1fyRwSiCscsMNMg1/UZaYiQcvQshrAysR9cYCEfZJLkJov d9rfka8HuSRwfIW0SC7iqlzwS57YaKtR7DwT8VNno9Y1xwwi/qQIk2ZppcX/AcEb Bc8EfGjHIYwan22cIBO9/TUDJ4S2plc= -----END CERTIFICATE-----Generated at Sun Jun 8 23:26:53 2025 by rpki-client