$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa File: 2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa (raw, json) Hash identifier: 5ISZg6REFjgx/2/vcmtCGqK6koCA1gFP1GUZRdeWB/E= Subject key identifier: 82:98:B2:61:5D:47:DE:64:C4:09:32:C6:2E:18:ED:03:9C:61:24:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BBE350A46ABB059C8E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.16.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bb:e3:50:a4:6a:bb:05:9c:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=7621d3ba-c2ce-46c4-8e82-8ffd428d2956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:8a:13:01:5c:8b:bf:f5:0d:43:a4:67:14: 7c:5d:d6:6e:99:6f:e4:87:1b:70:99:fb:92:e5:af: bd:23:3c:9a:1e:63:b6:42:2c:6e:fa:52:50:c6:de: d3:7d:1d:df:d4:2b:a7:5f:83:3e:5a:6a:72:c0:7f: 2b:c2:f9:dc:80:24:d1:13:d3:33:d3:55:3c:03:1d: 5a:a4:0b:46:f7:53:21:30:af:77:b1:f0:e8:8e:91: eb:a8:4c:f1:b8:44:ce:90:cb:f6:67:3a:4b:28:81: 2e:24:08:5f:57:f7:fe:a1:23:02:b8:49:2b:b7:4e: 82:a4:bb:29:a3:dd:de:a8:b0:b5:18:11:dd:2e:18: 0c:65:51:67:61:f0:54:9f:e8:ff:64:5f:f5:66:7e: 6c:da:2e:83:e3:c2:40:aa:22:92:a8:f4:e1:ca:a3: cb:05:07:0a:ef:85:90:9f:e0:c0:60:9c:3e:8d:19: 1b:86:11:d0:af:88:9c:66:c4:c2:45:8d:a9:3d:2b: ed:86:45:54:67:84:5c:fb:4e:c6:71:8d:c8:c4:c3: 66:d7:c7:62:ae:0b:df:58:11:8b:67:51:16:c4:4c: 9a:00:b3:89:13:34:86:13:e5:1a:9e:13:56:8c:6e: 30:a2:53:23:84:71:77:d2:8e:6f:75:29:3c:76:68: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:98:B2:61:5D:47:DE:64:C4:09:32:C6:2E:18:ED:03:9C:61:24:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f3dc17e-62b5-3fe6-a9f0-4ca879e06667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1c:bc:fc:bd:3e:3f:81:49:36:5d:e8:23:d8:42:3d:45:9f: 48:c6:70:c1:37:b2:a9:2c:4b:76:3b:ec:59:da:95:83:57:dc: 16:af:8b:e4:57:2f:47:fb:0c:d8:fd:82:c0:29:ce:6c:4b:69: 7d:21:72:d3:de:b6:1e:87:e7:31:e3:18:40:f0:56:36:1f:df: 1f:65:fa:5d:6f:07:74:c9:9e:ca:59:06:62:9f:58:eb:c4:50: f3:24:26:4b:9e:07:09:ae:b5:26:16:eb:7d:3d:a3:76:02:6c: 27:9b:b4:ad:8f:8c:8a:bb:35:ca:c0:1c:b6:04:0c:18:af:37: 60:5a:95:93:ad:35:d9:ea:95:2c:44:eb:33:77:0a:f4:dc:de: ad:9d:9f:0f:35:83:99:b1:6b:c5:d1:63:31:ae:7c:7f:16:e5: fd:82:6a:d2:07:73:cd:eb:9d:e2:38:1b:8c:88:b4:d7:9f:19: e1:c6:80:15:95:da:9d:02:84:52:5e:f6:d0:39:59:8d:d6:4c: 15:17:78:4e:54:ab:d0:a8:9b:07:24:d6:28:65:af:fc:f9:0d: 53:65:a6:d5:c8:a7:5f:c3:12:3f:62:f2:1e:4a:28:30:ee:00: 2a:8b:3f:c9:0d:ae:82:1c:64:2a:1b:1f:e8:61:e8:14:f9:80: ac:58:6b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrvjUKRquwWcjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NzYyMWQzYmEtYzJjZS00NmM0LThlODItOGZmZDQyOGQyOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7aKEwFci7/1DUOkZxR8XdZumW/khxtwmfuS 5a+9IzyaHmO2Qixu+lJQxt7TfR3f1CunX4M+WmpywH8rwvncgCTRE9Mz01U8Ax1a pAtG91MhMK93sfDojpHrqEzxuETOkMv2ZzpLKIEuJAhfV/f+oSMCuEkrt06CpLsp o93eqLC1GBHdLhgMZVFnYfBUn+j/ZF/1Zn5s2i6D48JAqiKSqPThyqPLBQcK74WQ n+DAYJw+jRkbhhHQr4icZsTCRY2pPSvthkVUZ4Rc+07GcY3IxMNm18dirgvfWBGL Z1EWxEyaALOJEzSGE+UanhNWjG4wolMjhHF30o5vdSk8dmjFXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKYsmFdR95kxAkyxi4Y7QOcYSTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmYzZGMxN2UtNjJiNS0z ZmU2LWE5ZjAtNGNhODc5ZTA2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEcvPy9Pj+BSTZd6CPYQj1Fn0jGcME3sqksS3Y77FnalYNX3Bavi+RX L0f7DNj9gsApzmxLaX0hctPeth6H5zHjGEDwVjYf3x9l+l1vB3TJnspZBmKfWOvE UPMkJkueBwmutSYW6309o3YCbCebtK2PjIq7NcrAHLYEDBivN2BalZOtNdnqlSxE 6zN3CvTc3q2dnw81g5mxa8XRYzGufH8W5f2CatIHc83rneI4G4yItNefGeHGgBWV 2p0ChFJe9tA5WY3WTBUXeE5Uq9Comwck1ihlr/z5DVNlptXIp1/DEj9i8h5KKDDu ACqLP8kNroIcZCobH+hh6BT5gKxYa6k= -----END CERTIFICATE-----Generated at Sun Apr 6 11:54:51 2025 by rpki-client