$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4377dda0-3502-3636-a004-b041e8caea62.roa File: 4377dda0-3502-3636-a004-b041e8caea62.roa (raw, json) Hash identifier: liDsiKttVW+0NceBWwomaKxn6p32eYu10IXH8g18R3g= Subject key identifier: 68:2E:D9:B3:40:84:2D:4E:F6:EB:F3:95:6E:A4:15:9C:84:46:DB:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C9A185D0944BBAA9A720 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4377dda0-3502-3636-a004-b041e8caea62.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c9:a1:85:d0:94:4b:ba:a9:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=da8253db-d8bc-43f4-aa90-3fa33b39a344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:18:ec:21:e1:0c:9f:4e:2c:78:d6:29:dc: 5c:ae:04:04:c2:4a:a8:aa:15:3a:f1:ef:f9:5b:ff: 7f:a0:44:ec:b9:5a:0f:ae:39:68:15:ff:84:e5:f0: 60:0b:7a:28:f6:91:32:57:de:b6:c9:a5:fb:35:3b: 6e:e3:b6:4c:ca:76:40:19:8e:7e:b9:2c:fa:3c:60: d8:f9:9d:be:bd:1a:b3:6d:43:9f:59:78:5e:72:b5: 44:24:96:13:2d:8f:ca:ab:ba:3b:a2:c6:85:3c:d3: 2b:11:74:46:23:26:88:de:36:7b:00:3e:8c:d0:ed: 91:48:06:2b:ba:2a:bf:83:ec:27:92:8e:a7:38:bc: ae:3f:32:fd:57:92:ce:65:1a:7b:22:da:f1:58:84: e1:e8:21:a6:55:87:70:3d:02:8d:fe:ff:90:d4:11: fa:06:10:6c:9b:26:6c:2c:73:23:d4:a3:9b:d0:a1: 7d:3a:c7:91:c3:3d:63:61:cb:6b:e0:68:2c:48:8d: 2b:15:64:be:b1:73:bc:62:43:6e:7f:6a:29:2b:06: 74:c3:b1:1d:38:3b:b8:48:98:11:9c:29:83:df:2a: a7:d6:57:ae:bb:32:87:09:45:9d:70:4a:94:60:81: ba:da:7c:d8:d1:40:c0:b4:9e:46:68:7f:5d:b1:4c: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2E:D9:B3:40:84:2D:4E:F6:EB:F3:95:6E:A4:15:9C:84:46:DB:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4377dda0-3502-3636-a004-b041e8caea62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:23:12:ba:82:18:30:80:0f:fa:bb:3c:bf:a0:14:d1:6d:b5: 89:24:98:2c:bf:bf:a3:9b:61:d1:05:b5:e8:67:04:98:6f:f5: a3:2c:e5:69:e5:bf:48:b7:67:ce:15:d1:2d:61:54:59:db:b7: 09:1d:54:e4:9c:c7:be:c5:bc:c4:ac:79:bb:b0:22:02:be:13: 02:67:86:12:da:b9:6e:a0:f3:65:4a:70:a7:d3:80:75:34:5a: 4e:e7:7b:ec:69:69:22:c4:ab:56:40:de:46:1c:f7:2c:42:f0: 56:13:b5:04:a7:dc:7c:b9:6f:57:ce:c5:cd:e6:24:80:6c:a6: d5:43:20:01:21:c3:fc:40:ef:40:89:76:04:37:c7:eb:f4:09: c4:e2:11:51:18:9e:25:f5:f2:2e:8e:a7:05:ad:6d:5d:11:94: 5f:67:25:6d:90:0b:c9:0b:9b:73:c2:78:e3:5a:3f:3d:3e:3c: fc:78:35:96:b7:10:27:a5:40:8d:53:ea:3a:8e:82:a5:49:b7: d8:f5:45:98:75:ab:23:00:de:ba:ac:6d:b1:73:7c:e5:28:25: b2:00:06:81:f5:39:87:9f:b2:dd:06:f3:33:d7:dd:7b:c2:70: 84:f1:45:b6:57:94:18:19:2e:34:74:57:d8:03:65:2e:67:85: e5:38:1c:a4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkFtsmhhdCUS7qppyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ZGE4MjUzZGItZDhiYy00M2Y0LWFhOTAtM2ZhMzNiMzlhMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBAY7CHhDJ9OLHjWKdxcrgQEwkqoqhU68e/5 W/9/oETsuVoPrjloFf+E5fBgC3oo9pEyV962yaX7NTtu47ZMynZAGY5+uSz6PGDY +Z2+vRqzbUOfWXhecrVEJJYTLY/Kq7o7osaFPNMrEXRGIyaI3jZ7AD6M0O2RSAYr uiq/g+wnko6nOLyuPzL9V5LOZRp7ItrxWITh6CGmVYdwPQKN/v+Q1BH6BhBsmyZs LHMj1KOb0KF9OseRwz1jYctr4GgsSI0rFWS+sXO8YkNuf2opKwZ0w7EdODu4SJgR nCmD3yqn1leuuzKHCUWdcEqUYIG62nzY0UDAtJ5GaH9dsUwHUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGgu2bNAhC1O9uvzlW6kFZyERtucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDM3N2RkYTAtMzUwMi0z NjM2LWEwMDQtYjA0MWU4Y2FlYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaBwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAuSMSuoIYMIAP+rs8v6AU0W21iSSYLL+/o5th0QW16GcEmG/1oyzlaeW/ SLdnzhXRLWFUWdu3CR1U5JzHvsW8xKx5u7AiAr4TAmeGEtq5bqDzZUpwp9OAdTRa Tud77GlpIsSrVkDeRhz3LELwVhO1BKfcfLlvV87FzeYkgGym1UMgASHD/EDvQIl2 BDfH6/QJxOIRURieJfXyLo6nBa1tXRGUX2clbZALyQubc8J441o/PT48/Hg1lrcQ J6VAjVPqOo6CpUm32PVFmHWrIwDeuqxtsXN85SglsgAGgfU5h5+y3QbzM9fde8Jw hPFFtleUGBkuNHRX2ANlLmeF5TgcpA== -----END CERTIFICATE-----Generated at Sat Apr 5 05:04:17 2025 by rpki-client