$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d787e6c-dba8-337d-919f-239950734e98.roa File: 2d787e6c-dba8-337d-919f-239950734e98.roa (raw, json) Hash identifier: U+aQVGnFTYXKfwt9SfglmCo8g5VQhffUnJ53KINQSzA= Subject key identifier: 14:F0:29:8F:FF:B2:EA:8B:3C:90:BE:82:4C:D4:54:52:C6:C7:42:4A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC7635C04AAB33184D180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d787e6c-dba8-337d-919f-239950734e98.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.16.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c7:63:5c:04:aa:b3:31:84:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=fa717789-579e-4c02-9a41-4aec8c3d747b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:09:41:0e:82:1f:00:67:43:4b:89:16:bc: 85:9f:59:8d:ac:8e:10:b8:b3:95:a7:26:4f:a6:ab: b7:f0:a4:3d:ff:23:dd:17:e1:88:9c:7e:4f:2a:92: fd:02:68:df:e8:02:30:df:a5:87:0d:ec:90:3c:2c: 92:d2:e0:3f:fe:a4:ea:cd:ea:8d:dc:c9:96:6c:eb: 55:16:2f:fa:91:bb:05:95:c1:73:07:2e:19:af:e5: c2:e4:c9:cc:50:6c:2d:dd:52:e4:06:f0:a2:8a:f0: 4e:b0:88:e0:d3:22:fa:25:69:32:04:74:e2:98:35: 5d:f8:25:ac:ca:7a:4a:8b:70:a8:f1:f0:47:a1:47: 2b:c8:f9:a2:51:c7:a8:a3:5e:48:e3:64:a1:66:26: c2:53:2e:21:c8:7b:0d:d8:30:68:1e:d8:4f:4a:f0: 77:36:7f:0f:50:65:b4:36:59:65:0c:b0:05:94:60: 3f:0e:b6:68:ea:25:ff:1d:52:23:5c:94:ce:84:e5: 5e:54:5b:ee:3b:2b:43:3f:fc:08:a1:17:17:8c:77: 5f:64:ef:d5:45:6c:5c:24:09:94:cf:41:89:61:d7: 4b:9e:3c:25:6d:6b:04:75:fe:ae:d4:b6:aa:b6:68: 26:6e:72:e6:8a:7b:f4:23:e4:10:7f:83:cc:69:95: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:29:8F:FF:B2:EA:8B:3C:90:BE:82:4C:D4:54:52:C6:C7:42:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d787e6c-dba8-337d-919f-239950734e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d0:4d:80:6d:3e:31:99:a2:c7:94:85:1e:b5:3a:d3:c1:be: 37:3b:37:46:3f:4d:40:4f:02:07:a5:ae:1e:20:96:81:84:05: d4:61:49:dc:f4:7a:94:4e:56:83:43:ce:70:7d:1e:e7:cf:49: 70:f7:de:01:0a:81:9c:90:54:1e:36:6a:1d:43:67:37:74:8f: 21:f9:06:2d:df:b1:1f:2e:69:38:d3:5f:4a:d0:4d:a7:97:2e: dc:75:08:d8:cd:8f:94:1d:4d:3d:c5:ab:9f:90:e1:72:6d:65: ea:09:96:fd:05:55:9e:20:14:4f:5b:a1:b2:97:83:d1:be:ab: 24:fa:96:cf:c0:de:55:cd:c6:18:ed:25:cb:fc:a6:8a:93:e0: 80:8e:dd:9f:48:9a:c8:ef:88:9f:e6:35:49:5b:3b:cf:72:53: c2:ce:b6:c4:0d:d3:be:ff:db:3f:5d:42:91:23:bd:bf:55:67: 73:2b:5e:67:be:e4:76:f6:56:5b:c4:84:70:06:6c:bf:68:d8: e3:19:ab:9a:d8:11:47:da:a8:16:20:05:d9:f4:c8:1b:17:a8: 26:12:d6:2a:2e:65:bb:ca:b4:7c:e8:f8:5f:f1:ba:84:4c:e3: 01:c6:56:4d:b8:0f:0e:7e:42:cc:36:04:c3:52:d8:52:f5:9f: 2c:6f:ad:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78djXASqszGE0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZmE3MTc3ODktNTc5ZS00YzAyLTlhNDEtNGFlYzhjM2Q3NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoggJQQ6CHwBnQ0uJFryFn1mNrI4QuLOVpyZP pqu38KQ9/yPdF+GInH5PKpL9Amjf6AIw36WHDeyQPCyS0uA//qTqzeqN3MmWbOtV Fi/6kbsFlcFzBy4Zr+XC5MnMUGwt3VLkBvCiivBOsIjg0yL6JWkyBHTimDVd+CWs ynpKi3Co8fBHoUcryPmiUceoo15I42ShZibCUy4hyHsN2DBoHthPSvB3Nn8PUGW0 NlllDLAFlGA/DrZo6iX/HVIjXJTOhOVeVFvuOytDP/wIoRcXjHdfZO/VRWxcJAmU z0GJYddLnjwlbWsEdf6u1LaqtmgmbnLminv0I+QQf4PMaZUrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTwKY//suqLPJC+gkzUVFLGx0JKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmQ3ODdlNmMtZGJhOC0z MzdkLTkxOWYtMjM5OTUwNzM0ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHQTYBtPjGZoseUhR61OtPBvjc7N0Y/TUBPAgelrh4gloGEBdRhSdz0 epROVoNDznB9HufPSXD33gEKgZyQVB42ah1DZzd0jyH5Bi3fsR8uaTjTX0rQTaeX Ltx1CNjNj5QdTT3Fq5+Q4XJtZeoJlv0FVZ4gFE9bobKXg9G+qyT6ls/A3lXNxhjt Jcv8poqT4ICO3Z9ImsjviJ/mNUlbO89yU8LOtsQN077/2z9dQpEjvb9VZ3MrXme+ 5Hb2VlvEhHAGbL9o2OMZq5rYEUfaqBYgBdn0yBsXqCYS1iouZbvKtHzo+F/xuoRM 4wHGVk24Dw5+Qsw2BMNS2FL1nyxvrQ8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:29 2025 by rpki-client