$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa File: 3b01818f-feec-3c22-884b-12db49054558.roa (raw, json) Hash identifier: P1KgZB3OkyG6ppEKrLl02DOTaZXDHTLuXifSHZ6Z4Kk= Subject key identifier: 85:E7:72:D4:2B:C5:05:9D:C2:18:37:15:71:21:93:79:B5:FF:33:4D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCBE3E2AF8CA4A044A900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.21.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cb:e3:e2:af:8c:a4:a0:44:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=c2310fdb-5931-41c2-b2bf-8919b6fe4e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:c9:83:25:11:8f:b5:86:a3:58:0b:3f:08: 5f:d5:70:f6:f5:36:ae:11:24:e6:49:54:58:33:01: d6:df:17:e4:da:1c:c1:53:e6:ab:cd:c9:78:c1:56: e4:4c:f1:07:90:c7:0f:df:43:cd:93:bb:b0:ed:48: 5d:c3:e4:c9:34:d2:24:1a:86:f1:00:d9:84:0f:b7: 5c:83:ed:43:3f:52:bd:6b:38:a3:5d:40:eb:9d:90: 60:0c:e6:ec:93:29:8e:cc:35:64:73:0b:bc:7f:35: 7c:1d:d7:72:e1:bd:47:eb:9e:53:5e:ab:ba:e2:fd: e0:1e:92:ab:1f:b2:26:fd:5f:02:5f:83:80:08:ef: 02:ce:21:75:50:4f:9b:73:26:e8:f1:92:7f:51:23: 3b:a5:53:ee:5b:01:e3:02:d1:7a:1d:ec:84:2c:4c: 21:03:97:44:48:b3:5f:ff:23:ca:ac:84:85:e9:91: 27:75:28:ee:ae:84:a0:54:41:a0:f3:08:f5:95:53: 7a:9e:6a:eb:f2:01:55:e7:18:ad:bd:e2:bb:8d:07: 23:b9:ee:6c:ef:ec:e4:b1:27:2e:39:19:de:fb:e6: 8a:15:e8:6b:74:b8:e1:49:ca:15:e3:36:ee:c9:33: d3:4d:52:0b:ed:b6:c2:2b:f9:ab:bc:1c:0b:3b:bc: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E7:72:D4:2B:C5:05:9D:C2:18:37:15:71:21:93:79:B5:FF:33:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:96:e5:31:56:ea:8d:48:1e:a0:3e:11:2a:86:46:37:36:f8: 8a:c8:b0:b6:17:cb:29:fd:46:37:0f:72:39:e4:b3:48:e4:32: f0:56:b2:39:ba:39:c8:3e:8f:fc:5c:f3:2f:19:e5:41:c8:af: 65:5c:d6:26:3e:46:27:c6:97:89:c3:bb:a7:af:76:e5:f9:5b: 68:d2:66:c2:9a:30:82:ba:25:70:8f:aa:90:62:33:f0:62:17: 24:f3:98:92:4d:cb:36:15:ec:b1:ff:ae:44:45:d2:f4:20:3a: c4:22:51:fd:c2:ab:aa:7d:f1:01:32:27:7b:c8:c3:3a:1a:df: 8f:d6:23:92:7e:fb:1e:a6:a6:91:56:a4:ab:23:33:fa:b5:e9: a1:2d:7a:ff:24:8e:c8:10:4c:06:c5:77:96:92:26:3a:8e:b2: 3c:e0:6f:3e:54:1c:2f:6d:3d:1d:1a:5e:21:ca:17:d2:d4:5d: c1:64:89:1c:4e:82:4e:fd:cf:d6:de:aa:25:c7:63:b0:c6:58: 2c:6e:6f:78:4f:1d:e1:6e:eb:ef:fe:9c:e6:ae:11:38:70:56: c9:94:0c:05:b8:d3:7a:2a:62:f3:f5:15:08:00:0f:36:c0:00: 5f:4a:80:cf:37:e0:16:a8:f6:c1:ae:b9:32:b7:ca:b2:fe:c2: 8f:3d:5c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78vj4q+MpKBEqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YzIzMTBmZGItNTkzMS00MWMyLWIyYmYtODkxOWI2ZmU0ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyPJgyURj7WGo1gLPwhf1XD29TauESTmSVRY MwHW3xfk2hzBU+arzcl4wVbkTPEHkMcP30PNk7uw7Uhdw+TJNNIkGobxANmED7dc g+1DP1K9azijXUDrnZBgDObskymOzDVkcwu8fzV8Hddy4b1H655TXqu64v3gHpKr H7Im/V8CX4OACO8CziF1UE+bcybo8ZJ/USM7pVPuWwHjAtF6HeyELEwhA5dESLNf /yPKrISF6ZEndSjuroSgVEGg8wj1lVN6nmrr8gFV5xitveK7jQcjue5s7+zksScu ORne++aKFehrdLjhScoV4zbuyTPTTVIL7bbCK/mrvBwLO7zA5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXnctQrxQWdwhg3FXEhk3m1/zNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2IwMTgxOGYtZmVlYy0z YzIyLTg4NGItMTJkYjQ5MDU0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSW5TFW6o1IHqA+ESqGRjc2+IrIsLYXyyn9RjcPcjnks0jkMvBWsjm6 Ocg+j/xc8y8Z5UHIr2Vc1iY+RifGl4nDu6evduX5W2jSZsKaMIK6JXCPqpBiM/Bi FyTzmJJNyzYV7LH/rkRF0vQgOsQiUf3Cq6p98QEyJ3vIwzoa34/WI5J++x6mppFW pKsjM/q16aEtev8kjsgQTAbFd5aSJjqOsjzgbz5UHC9tPR0aXiHKF9LUXcFkiRxO gk79z9beqiXHY7DGWCxub3hPHeFu6+/+nOauEThwVsmUDAW403oqYvP1FQgADzbA AF9KgM834Bao9sGuuTK3yrL+wo89XJE= -----END CERTIFICATE-----Generated at Sat Jun 7 12:29:05 2025 by rpki-client