$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/345d25b6-9527-3620-9eab-867194445d57.roa File: 345d25b6-9527-3620-9eab-867194445d57.roa (raw, json) Hash identifier: EiJ81o+wvbYxvG/mEQ5z8nnG3ePxRjvpCaqkJhO10v8= Subject key identifier: 91:68:0A:02:2B:94:E9:EA:90:18:F4:78:D9:38:E8:71:8C:C3:CE:2C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C378005753A4F50E5220 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/345d25b6-9527-3620-9eab-867194445d57.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.19.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c3:78:00:57:53:a4:f5:0e:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=8ca237f5-7a00-4d2c-b333-11de25999701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:78:ce:10:6a:63:1f:20:84:00:a7:a8:7e: 42:3f:bb:a9:13:aa:2e:5c:15:bc:ed:ca:79:c4:10: 1c:04:ec:1f:91:57:8f:78:43:78:c1:d1:ef:f5:55: 82:35:bb:10:d2:b2:5d:6e:33:49:28:22:1e:3f:fc: 24:4f:9d:d5:f0:af:3a:eb:e6:fd:0c:3f:27:87:42: 18:d0:7e:d7:de:94:87:08:37:20:c2:75:3d:ae:aa: ef:97:f9:0f:5b:95:e3:fd:fe:90:f6:3d:34:c1:ab: 28:16:eb:c6:9d:e7:0a:e5:13:dd:85:b1:ee:33:67: 8a:17:f1:31:1b:81:0a:67:6f:a2:56:79:8b:a4:dd: 45:e2:67:24:99:fd:0a:b6:82:19:02:d1:06:af:02: c6:37:d4:4e:46:a7:6b:e7:33:10:a6:b0:dc:94:08: e7:4a:a1:18:84:61:e0:e3:5f:a2:06:3e:4b:8c:a0: a0:0d:49:00:b7:fa:9b:0e:8d:28:73:fe:8f:b9:2c: 81:2e:e7:ee:d1:72:ae:df:23:21:22:2d:02:36:53: 31:eb:ce:2e:91:28:7e:fe:40:95:c3:0f:06:14:69: 2f:78:8a:05:0a:99:2b:5f:56:88:20:31:19:10:0e: af:6e:1f:ac:cf:f5:e9:1d:18:ed:f1:ba:5d:ae:d4: 22:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:68:0A:02:2B:94:E9:EA:90:18:F4:78:D9:38:E8:71:8C:C3:CE:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/345d25b6-9527-3620-9eab-867194445d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:64:dc:d5:ee:42:59:cb:ac:66:92:73:67:c6:65:08:93:dd: 26:6c:95:1b:1c:5e:98:d1:6f:95:57:b1:27:20:02:93:e5:d7: 42:4b:09:d8:6d:68:5b:2e:3f:57:f3:41:dd:81:d8:ed:d0:9b: 56:d4:f2:14:b7:e3:3a:ce:68:f6:4a:76:ab:31:58:e6:f2:6e: 48:2f:41:3d:80:37:c7:e1:af:90:9c:f1:e8:ba:50:8c:e4:e8: ed:99:3d:37:00:27:93:7c:31:16:20:1b:27:91:66:ea:65:95: c9:3b:e9:82:36:53:7d:74:6b:98:f7:ef:d4:ad:77:1e:c8:ef: 9b:c8:0c:e9:30:e0:6c:06:ff:06:a1:6d:7a:82:63:15:1c:c9: a2:8c:e1:84:cf:f5:72:8d:5d:de:0b:80:98:4e:c1:29:f1:43: 87:79:bd:46:4c:23:f5:9c:1f:38:3d:eb:15:cf:25:13:cf:b2: b4:cc:4f:c8:a8:48:ea:d1:c8:ed:f3:e4:2a:a6:9e:8b:cd:a5: d6:6c:52:54:1e:47:29:e0:d6:3b:43:dc:85:2e:a9:ef:73:1b: 82:94:88:a1:72:97:27:49:97:73:88:b9:5f:62:48:57:a2:c6: 34:9b:84:43:da:bd:b7:03:77:d7:6a:b0:71:06:7f:30:6f:1f: 11:d5:72:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsN4AFdTpPUOUiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OGNhMjM3ZjUtN2EwMC00ZDJjLWIzMzMtMTFkZTI1OTk5NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrh4zhBqYx8ghACnqH5CP7upE6ouXBW87cp5 xBAcBOwfkVePeEN4wdHv9VWCNbsQ0rJdbjNJKCIeP/wkT53V8K866+b9DD8nh0IY 0H7X3pSHCDcgwnU9rqrvl/kPW5Xj/f6Q9j00wasoFuvGnecK5RPdhbHuM2eKF/Ex G4EKZ2+iVnmLpN1F4mckmf0KtoIZAtEGrwLGN9RORqdr5zMQprDclAjnSqEYhGHg 41+iBj5LjKCgDUkAt/qbDo0oc/6PuSyBLufu0XKu3yMhIi0CNlMx684ukSh+/kCV ww8GFGkveIoFCpkrX1aIIDEZEA6vbh+sz/XpHRjt8bpdrtQiiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFoCgIrlOnqkBj0eNk46HGMw84sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzQ1ZDI1YjYtOTUyNy0z NjIwLTllYWItODY3MTk0NDQ1ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNk3NXuQlnLrGaSc2fGZQiT3SZslRscXpjRb5VXsScgApPl10JLCdht aFsuP1fzQd2B2O3Qm1bU8hS34zrOaPZKdqsxWObybkgvQT2AN8fhr5Cc8ei6UIzk 6O2ZPTcAJ5N8MRYgGyeRZupllck76YI2U310a5j379Stdx7I75vIDOkw4GwG/wah bXqCYxUcyaKM4YTP9XKNXd4LgJhOwSnxQ4d5vUZMI/WcHzg96xXPJRPPsrTMT8io SOrRyO3z5CqmnovNpdZsUlQeRyng1jtD3IUuqe9zG4KUiKFylydJl3OIuV9iSFei xjSbhEPavbcDd9dqsHEGfzBvHxHVcuk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:30:20 2025 by rpki-client