$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa File: 3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa (raw, json) Hash identifier: 2MEv0uOMQlAZIqfh7Ewn176HvW8cqvHl3qBTX9BIMGA= Subject key identifier: 5B:92:EF:27:81:CB:F8:B6:A3:FC:A9:74:D7:56:E7:F1:EA:63:82:CA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD73D00F6FC75292B6B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.27.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d7:3d:00:f6:fc:75:29:2b:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=131db18b-3a82-4858-a100-12c4f51cabec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:f1:16:4a:de:89:24:f2:de:95:df:58:5a: f4:4a:43:48:59:54:66:e8:ac:6b:e7:f4:82:26:9c: f2:e3:f3:fe:a0:c5:ad:c2:a9:80:0c:6f:88:45:5b: a3:0d:4b:11:0b:fb:d8:01:ba:6f:33:8d:37:a5:09: e0:07:06:d7:b7:43:08:a5:a8:45:2d:50:17:a9:e0: 2b:f7:05:49:bf:7f:73:ea:ef:66:fd:33:68:03:21: cc:af:ed:35:d8:fa:82:85:e9:5c:c6:01:ab:0e:63: b4:a5:1e:73:c2:43:25:38:4e:f4:05:33:16:b0:2c: c1:a2:5e:12:ce:75:6e:67:09:24:f0:0e:ab:31:60: 3c:b5:57:36:60:27:97:73:b6:9b:0b:38:53:79:71: 25:80:88:97:b3:0d:93:f0:a6:9b:48:79:84:0f:e8: 3a:f8:c1:d5:1f:b3:79:e8:b3:1c:74:0d:e8:f2:af: 12:54:37:c5:d8:63:12:6e:d5:c9:80:2c:88:03:65: 22:fa:16:d6:e1:52:33:09:75:d5:d2:38:4a:61:4e: 6a:f7:86:6c:32:d8:aa:d5:80:16:8e:b9:9d:de:67: 15:58:b3:33:ee:c2:7b:5a:93:dc:b1:5c:d2:15:eb: c2:2b:9b:28:77:ac:9c:a3:bb:75:12:d5:60:71:bc: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:92:EF:27:81:CB:F8:B6:A3:FC:A9:74:D7:56:E7:F1:EA:63:82:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e682714-5e1a-3f8a-ba24-3d13109df8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.27.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:94:6a:54:90:f8:78:98:df:08:47:ca:e1:55:61:04:ff:4b: af:c1:99:f8:37:ee:b5:9a:d2:89:dd:e7:45:27:0a:6b:b7:e1: 3e:81:c8:f5:64:ff:3f:2d:4d:c7:33:4e:fc:99:fa:95:aa:0a: bc:74:b4:a8:80:fa:bd:35:df:52:1b:4a:3b:fe:9e:0a:ff:0c: 48:3d:7f:da:62:23:03:9e:ea:81:aa:10:75:82:64:bd:98:de: e3:c2:d7:66:7a:55:6e:08:0d:dc:40:81:a6:f2:85:d2:1e:2b: d0:07:b8:33:7d:66:40:9b:31:33:93:02:4f:21:76:50:90:c1: 1c:16:7b:f0:47:17:e4:cb:22:ab:78:05:45:79:de:d8:d1:aa: 17:d3:52:92:3e:3c:d4:dc:b6:7a:ed:63:01:fc:35:a9:b7:5c: 80:a5:1b:fc:e9:36:c6:40:d2:ec:f0:8d:58:04:8d:3f:52:74: 42:7d:2a:40:c1:d9:58:44:f4:ea:b7:c4:1d:c0:58:de:01:3f: 83:d7:03:73:4d:6f:f3:52:15:4f:85:5f:e9:03:15:56:9d:b5: 53:26:fe:c7:96:dd:f9:69:de:1a:af:10:b2:b8:37:6d:98:2c: fd:af:a1:b0:aa:60:68:1f:4c:03:9f:70:86:5c:e6:30:22:23: 2f:cf:4d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79c9APb8dSkrawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MTMxZGIxOGItM2E4Mi00ODU4LWExMDAtMTJjNGY1MWNhYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qHxFkreiSTy3pXfWFr0SkNIWVRm6Kxr5/SC Jpzy4/P+oMWtwqmADG+IRVujDUsRC/vYAbpvM403pQngBwbXt0MIpahFLVAXqeAr 9wVJv39z6u9m/TNoAyHMr+012PqChelcxgGrDmO0pR5zwkMlOE70BTMWsCzBol4S znVuZwkk8A6rMWA8tVc2YCeXc7abCzhTeXElgIiXsw2T8KabSHmED+g6+MHVH7N5 6LMcdA3o8q8SVDfF2GMSbtXJgCyIA2Ui+hbW4VIzCXXV0jhKYU5q94ZsMtiq1YAW jrmd3mcVWLMz7sJ7WpPcsVzSFevCK5sod6yco7t1EtVgcbynDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuS7yeBy/i2o/ypdNdW5/HqY4LKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2U2ODI3MTQtNWUxYS0z ZjhhLWJhMjQtM2QxMzEwOWRmOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSUalSQ+HiY3whHyuFVYQT/S6/Bmfg37rWa0ond50UnCmu34T6ByPVk /z8tTcczTvyZ+pWqCrx0tKiA+r0131IbSjv+ngr/DEg9f9piIwOe6oGqEHWCZL2Y 3uPC12Z6VW4IDdxAgabyhdIeK9AHuDN9ZkCbMTOTAk8hdlCQwRwWe/BHF+TLIqt4 BUV53tjRqhfTUpI+PNTctnrtYwH8Nam3XIClG/zpNsZA0uzwjVgEjT9SdEJ9KkDB 2VhE9Oq3xB3AWN4BP4PXA3NNb/NSFU+FX+kDFVadtVMm/seW3flp3hqvELK4N22Y LP2vobCqYGgfTAOfcIZc5jAiIy/PTXs= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:54 2025 by rpki-client