$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4120c196-671b-3417-bd57-d35e410acc80.roa File: 4120c196-671b-3417-bd57-d35e410acc80.roa (raw, json) Hash identifier: qJchuBrsqCjarnt2Yqq5BIujL1bNoJLHezR2beGWgbY= Subject key identifier: 76:D4:04:C7:E9:8A:DA:B2:DB:1A:EF:5A:0A:47:B6:19:6A:5F:F2:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD584C62A83C0CAB536A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4120c196-671b-3417-bd57-d35e410acc80.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.21.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d5:84:c6:2a:83:c0:ca:b5:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=2143b6f0-e565-4a69-8c9c-0c4ca775385b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:31:49:45:5c:32:3a:8c:9e:48:be:e9:14: f9:80:11:ed:fc:c0:81:79:2b:92:8d:ae:1d:d9:e3: fb:44:ee:30:28:51:87:d1:27:23:3f:3f:94:18:6f: 8d:3f:03:d3:97:a1:06:6a:07:69:8c:4b:81:f8:68: 76:c9:ea:ed:85:9a:55:ef:8f:51:23:13:50:f4:ac: 1b:10:9e:e4:8e:a3:61:b0:36:2f:81:6c:96:fd:94: a7:23:30:1e:e5:33:9b:30:34:24:a6:1a:2d:d5:eb: 48:f0:d7:ed:c7:44:dd:1f:e0:e7:05:fe:ff:14:b5: 71:f3:00:93:65:35:2e:4c:a3:6f:3f:7a:ca:24:85: e2:26:aa:f5:1b:32:4b:81:69:58:39:e2:4f:b3:9a: 07:a2:71:b7:a1:38:e5:9b:57:0e:eb:fc:45:48:9a: 7e:1b:49:28:fb:49:77:9d:4a:32:61:39:08:07:a1: 28:cc:a3:95:47:d1:f2:48:36:fa:4f:25:47:37:b0: 03:24:e5:42:6c:0d:50:a5:7f:f5:43:a9:3b:ed:53: 1f:f5:50:cf:29:b6:25:bf:3e:e2:66:2c:26:0a:77: b9:5c:2c:64:72:59:52:19:1b:99:fd:b2:e1:c1:5d: 97:31:95:85:bd:b7:cf:ad:3e:9c:34:73:0d:97:12: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D4:04:C7:E9:8A:DA:B2:DB:1A:EF:5A:0A:47:B6:19:6A:5F:F2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4120c196-671b-3417-bd57-d35e410acc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ff:12:5b:95:eb:af:f2:92:44:d0:8c:43:bd:d4:92:a3:28: ab:ca:4d:35:9f:49:03:38:f1:a9:61:86:b2:bd:0c:7d:27:bf: d6:31:c2:64:73:a7:ec:6d:fe:1e:a6:2d:a0:e4:e3:bf:c5:66: 18:38:f7:15:d3:c0:47:03:01:7d:60:5e:d3:b9:dc:55:2d:ab: 27:c1:9f:49:78:cc:7a:5a:f3:ea:54:73:08:0d:60:2b:03:d6: 54:63:0a:34:11:bf:75:c5:0d:b3:3a:56:44:e0:c3:b9:f5:fc: b3:22:75:32:f0:ed:c8:2a:10:47:7e:91:23:d7:3d:4f:d0:3a: b5:42:5c:83:90:37:ac:e2:a7:57:41:bc:fc:a5:11:fd:4b:39: 13:11:c6:cf:e8:58:a4:d1:7a:10:df:a4:6d:8f:63:15:49:7c: b5:dc:52:36:86:74:d7:83:f3:cf:3c:f3:1d:54:0c:0b:ef:d5: 91:e1:4e:b8:54:19:0b:b7:18:d2:6f:71:b7:a3:e6:f8:57:e1: 2a:12:95:fe:cf:2a:bd:d8:4d:ec:b1:bc:11:2e:9e:7c:95:95: 50:58:81:fe:ba:ac:7f:25:53:05:2f:75:47:cc:01:73:03:1d: 46:5b:8b:89:60:57:c9:92:ae:06:67:4c:b1:35:70:18:38:9e: 37:73:36:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79WExiqDwMq1NqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MjE0M2I2ZjAtZTU2NS00YTY5LThjOWMtMGM0Y2E3NzUzODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFoxSUVcMjqMnki+6RT5gBHt/MCBeSuSja4d 2eP7RO4wKFGH0ScjPz+UGG+NPwPTl6EGagdpjEuB+Gh2yerthZpV749RIxNQ9Kwb EJ7kjqNhsDYvgWyW/ZSnIzAe5TObMDQkphot1etI8Nftx0TdH+DnBf7/FLVx8wCT ZTUuTKNvP3rKJIXiJqr1GzJLgWlYOeJPs5oHonG3oTjlm1cO6/xFSJp+G0ko+0l3 nUoyYTkIB6EozKOVR9HySDb6TyVHN7ADJOVCbA1QpX/1Q6k77VMf9VDPKbYlvz7i ZiwmCne5XCxkcllSGRuZ/bLhwV2XMZWFvbfPrT6cNHMNlxKuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbUBMfpitqy2xrvWgpHthlqX/LwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDEyMGMxOTYtNjcxYi0z NDE3LWJkNTctZDM1ZTQxMGFjYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn/EluV66/ykkTQjEO91JKjKKvKTTWfSQM48alhhrK9DH0nv9YxwmRz p+xt/h6mLaDk47/FZhg49xXTwEcDAX1gXtO53FUtqyfBn0l4zHpa8+pUcwgNYCsD 1lRjCjQRv3XFDbM6VkTgw7n1/LMidTLw7cgqEEd+kSPXPU/QOrVCXIOQN6zip1dB vPylEf1LORMRxs/oWKTRehDfpG2PYxVJfLXcUjaGdNeD88888x1UDAvv1ZHhTrhU GQu3GNJvcbej5vhX4SoSlf7PKr3YTeyxvBEunnyVlVBYgf66rH8lUwUvdUfMAXMD HUZbi4lgV8mSrgZnTLE1cBg4njdzNog= -----END CERTIFICATE-----Generated at Sat Jun 7 12:29:51 2025 by rpki-client