$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5b2e0a-0242-3601-a87a-843b34889ec3.roa File: 3d5b2e0a-0242-3601-a87a-843b34889ec3.roa (raw, json) Hash identifier: U+RGGyTqQ8439LFFqa1iBy69RoHQzA2+0Ha+0emkBKE= Subject key identifier: C5:DC:33:71:E8:3E:71:55:93:F0:1F:5F:30:9A:6F:7D:F8:FF:08:E6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCD18509E50F399C26640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5b2e0a-0242-3601-a87a-843b34889ec3.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.27.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cd:18:50:9e:50:f3:99:c2:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=dc1e2577-1b87-4fb2-bf98-ac60d7764f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:cd:b8:74:ae:2b:f1:b6:ae:dd:e2:14:af: 3c:ae:83:91:3b:e9:39:1e:32:37:22:ae:82:eb:d6: f5:cd:5e:49:02:95:fc:a8:1b:01:70:fa:11:b5:cd: 11:5c:6d:7b:b3:95:47:f5:a1:e2:66:3e:0d:54:e7: 3b:15:6f:ac:e2:79:75:40:73:16:f4:fa:5c:89:a6: 07:79:ce:05:58:5e:02:27:d8:49:97:93:3d:d3:42: 41:22:4d:c2:9d:19:3a:a9:41:71:05:ab:ed:ef:70: e2:49:76:6f:4b:12:2b:3e:f5:3c:ea:c7:b1:67:a4: 7f:3c:dd:ab:ba:0c:a4:7f:98:5f:62:06:99:a5:ff: 0b:35:fd:1b:39:cd:b9:a1:1f:29:fd:17:64:3c:77: 1c:8a:b7:1f:63:af:5b:5a:54:f0:b4:a1:85:81:e3: ec:54:ad:ce:16:8e:ee:12:cf:76:d2:73:43:94:b5: 78:68:d4:c3:c3:66:df:3f:67:26:d2:34:af:40:b7: f7:5d:de:9a:2b:ef:6e:7c:41:b9:c6:21:80:b4:a6: 49:d0:50:92:06:8c:38:65:ea:a6:89:b8:c0:2e:b7: fd:bd:1c:36:5b:10:a8:40:09:ab:af:6f:43:29:7d: c3:75:34:e9:23:d6:37:a2:10:9d:22:a5:df:5b:2a: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DC:33:71:E8:3E:71:55:93:F0:1F:5F:30:9A:6F:7D:F8:FF:08:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5b2e0a-0242-3601-a87a-843b34889ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:7a:8e:bb:82:d8:10:d2:7a:3c:66:2d:61:81:fa:33:e9:e5: 39:7b:5f:16:3e:e9:90:da:d4:26:36:79:0c:67:d2:4c:4f:8c: 72:3f:ac:79:44:06:e9:c5:21:8a:bf:f2:11:b9:c4:1e:4c:31: 71:b6:79:6a:07:f2:1f:27:28:5e:74:e4:c6:d7:f0:63:cd:72: af:86:cc:d7:fa:a4:9b:c0:07:a5:82:0f:69:da:de:b4:10:1d: a2:97:55:e4:e0:81:c9:a3:82:eb:fc:73:1f:9a:48:01:21:1b: a6:02:c4:1e:ef:bf:6a:4a:c7:27:5c:2f:24:a6:b6:dd:ce:1f: cd:de:13:34:1e:65:2c:7b:92:b5:79:87:52:3c:e6:cd:d9:1a: 42:4b:96:88:82:6b:13:9c:21:38:a7:f8:5d:26:55:92:1b:d5: 0d:61:3c:e9:2f:07:f2:d1:94:b0:e2:79:90:63:f5:96:0e:de: 33:d4:f0:bf:0b:d5:54:6b:0b:05:73:71:f1:b9:b3:16:f3:0a: 65:56:5c:72:9e:c5:27:e3:a5:56:53:98:83:c2:21:f8:db:29: 1f:e7:79:d8:8e:50:8e:db:2b:0b:d5:10:4c:a9:23:3c:35:47: 7b:de:0f:3e:c0:6a:83:c0:bf:a8:45:4f:67:25:22:d2:35:6d: 14:6f:59:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk780YUJ5Q85nCZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZGMxZTI1NzctMWI4Ny00ZmIyLWJmOTgtYWM2MGQ3NzY0Zjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXrNuHSuK/G2rt3iFK88roORO+k5HjI3Iq6C 69b1zV5JApX8qBsBcPoRtc0RXG17s5VH9aHiZj4NVOc7FW+s4nl1QHMW9PpciaYH ec4FWF4CJ9hJl5M900JBIk3CnRk6qUFxBavt73DiSXZvSxIrPvU86sexZ6R/PN2r ugykf5hfYgaZpf8LNf0bOc25oR8p/RdkPHccircfY69bWlTwtKGFgePsVK3OFo7u Es920nNDlLV4aNTDw2bfP2cm0jSvQLf3Xd6aK+9ufEG5xiGAtKZJ0FCSBow4Zeqm ibjALrf9vRw2WxCoQAmrr29DKX3DdTTpI9Y3ohCdIqXfWypciwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXcM3HoPnFVk/AfXzCab334/wjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2Q1YjJlMGEtMDI0Mi0z NjAxLWE4N2EtODQzYjM0ODg5ZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB6jruC2BDSejxmLWGB+jPp5Tl7XxY+6ZDa1CY2eQxn0kxPjHI/rHlE BunFIYq/8hG5xB5MMXG2eWoH8h8nKF505MbX8GPNcq+GzNf6pJvAB6WCD2na3rQQ HaKXVeTggcmjguv8cx+aSAEhG6YCxB7vv2pKxydcLySmtt3OH83eEzQeZSx7krV5 h1I85s3ZGkJLloiCaxOcITin+F0mVZIb1Q1hPOkvB/LRlLDieZBj9ZYO3jPU8L8L 1VRrCwVzcfG5sxbzCmVWXHKexSfjpVZTmIPCIfjbKR/nediOUI7bKwvVEEypIzw1 R3veDz7AaoPAv6hFT2clItI1bRRvWS0= -----END CERTIFICATE-----Generated at Sat Jun 7 12:29:59 2025 by rpki-client