$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa File: 3db74c7f-b12e-365d-bcb7-4530665d4a02.roa (raw, json) Hash identifier: MuA4ScczYvM6swZxEHnBJoY0XgkSv4fp86p45OkGzQ8= Subject key identifier: D9:53:B6:CF:F1:CB:08:64:5F:59:64:53:0D:5A:EC:22:48:CC:D9:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550FCC15820D097AD2C300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 104.31.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0f:cc:15:82:0d:09:7a:d2:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=1d616ac9-619d-406a-b913-c6d128c8ef4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:47:94:ef:a0:38:8a:0e:a6:80:36:69:72: 1b:ee:99:1a:c5:e9:eb:ac:d5:fb:11:eb:15:bf:11: 4c:c7:e9:6c:27:72:49:72:15:66:2a:a3:97:48:0e: 01:44:ae:7f:f9:43:fb:e0:91:a8:19:9f:cf:32:a4: 5d:33:51:a0:50:42:7e:34:50:b6:87:3c:e8:06:53: fa:94:00:21:a9:1f:e6:74:5d:90:f1:f7:54:74:c4: e3:bb:0c:24:9f:a8:e8:50:b1:74:e9:d5:b2:07:e2: 8d:47:35:9e:a3:42:73:ab:58:fc:b0:40:d1:1e:fc: bf:73:0b:39:db:8c:05:0f:d5:17:cf:f9:f4:21:e3: b2:e1:32:15:6c:32:a0:6d:f3:c7:ed:b7:0a:13:6e: be:e0:2d:6f:da:1b:75:f2:03:e2:ec:97:c0:f9:09: 94:52:80:d8:1d:72:7c:fb:e7:01:6d:ca:77:f2:b8: d3:37:f6:49:f1:d3:66:80:9f:4b:38:26:6d:1a:80: a6:49:3d:27:05:c9:fa:2a:25:b9:a7:c1:7b:49:53: 78:b6:26:3d:ee:c2:0d:bb:e2:ce:83:c3:af:08:5c: 24:9f:c8:36:0d:47:8c:8c:9c:77:97:61:68:e7:5e: fe:2f:8b:e8:07:39:35:b9:0a:68:00:c1:6e:fd:1e: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:53:B6:CF:F1:CB:08:64:5F:59:64:53:0D:5A:EC:22:48:CC:D9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ad:91:2e:1a:73:09:83:32:a1:7d:00:a5:bf:0f:d1:0d:2f: 36:81:3e:d2:3d:1c:cf:76:5d:fd:46:d7:f4:98:9c:52:f8:fc: 0f:fb:d3:7a:77:a0:45:84:71:b7:cd:ca:6c:e9:a8:07:f8:a4: 03:19:8d:c3:5d:55:35:51:83:49:2f:53:d1:b1:ce:92:bd:ee: 27:2a:52:51:71:57:3d:c0:94:be:3f:55:69:96:54:aa:db:53: 43:f8:d3:10:09:53:24:ac:6d:06:10:92:0b:fd:0f:44:c8:17: e3:70:8c:10:92:1c:2c:eb:ce:86:45:86:0a:c3:f2:48:5c:ca: db:e6:17:a4:02:84:8c:5e:bd:f0:92:ba:af:05:e0:26:a1:80: 42:36:2b:c0:71:11:26:e2:22:b5:1a:81:62:92:b6:22:31:e8: a4:a5:38:a2:fe:93:da:79:7d:c4:8f:72:8a:6a:78:83:c7:5a: d8:bf:17:91:c8:a4:06:4f:fe:ee:8f:b7:78:71:32:80:cd:f1: 1d:5b:60:74:df:35:28:c8:01:b0:fd:2e:9f:9c:63:73:d4:5d: 48:b5:06:0e:75:98:9c:94:c2:0e:07:4b:e5:45:19:94:bf:9f: 3c:19:c4:08:c9:3f:3c:67:79:94:24:d9:d8:b9:83:fe:91:bf: cf:80:38:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ/MFYINCXrSwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MWQ2MTZhYzktNjE5ZC00MDZhLWI5MTMtYzZkMTI4YzhlZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyBHlO+gOIoOpoA2aXIb7pkaxenrrNX7EesV vxFMx+lsJ3JJchVmKqOXSA4BRK5/+UP74JGoGZ/PMqRdM1GgUEJ+NFC2hzzoBlP6 lAAhqR/mdF2Q8fdUdMTjuwwkn6joULF06dWyB+KNRzWeo0Jzq1j8sEDRHvy/cws5 24wFD9UXz/n0IeOy4TIVbDKgbfPH7bcKE26+4C1v2ht18gPi7JfA+QmUUoDYHXJ8 ++cBbcp38rjTN/ZJ8dNmgJ9LOCZtGoCmST0nBcn6KiW5p8F7SVN4tiY97sINu+LO g8OvCFwkn8g2DUeMjJx3l2Fo517+L4voBzk1uQpoAMFu/R7cEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlTts/xywhkX1lkUw1a7CJIzNmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RiNzRjN2YtYjEyZS0z NjVkLWJjYjctNDUzMDY2NWQ0YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmtkS4acwmDMqF9AKW/D9ENLzaBPtI9HM92Xf1G1/SYnFL4/A/703p3 oEWEcbfNymzpqAf4pAMZjcNdVTVRg0kvU9GxzpK97icqUlFxVz3AlL4/VWmWVKrb U0P40xAJUySsbQYQkgv9D0TIF+NwjBCSHCzrzoZFhgrD8khcytvmF6QChIxevfCS uq8F4CahgEI2K8BxESbiIrUagWKStiIx6KSlOKL+k9p5fcSPcopqeIPHWti/F5HI pAZP/u6Pt3hxMoDN8R1bYHTfNSjIAbD9Lp+cY3PUXUi1Bg51mJyUwg4HS+VFGZS/ nzwZxAjJPzxneZQk2di5g/6Rv8+AOO8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:21 2025 by rpki-client