$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43db48ed-8413-3a9f-937e-d6132a765a4c.roa File: 43db48ed-8413-3a9f-937e-d6132a765a4c.roa (raw, json) Hash identifier: Iy8jZUIChFIURhUhn60MxF79dS6DoVo1BHXp1Yky4LE= Subject key identifier: 8F:5E:53:BC:35:BD:03:EA:DE:EB:F4:06:24:C8:26:54:3C:96:65:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD693521C06CE046E8600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43db48ed-8413-3a9f-937e-d6132a765a4c.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.25.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d6:93:52:1c:06:ce:04:6e:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=34cf6275-e531-4a73-ae1e-db8ce39f5cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9e:f0:ce:20:14:75:c7:db:a9:b6:29:26:c1: f2:09:b8:81:fd:fa:0f:64:31:61:0e:bb:fb:64:0f: 4a:a9:7b:a8:8a:b2:0c:86:d6:f2:de:ee:65:8d:dd: 5b:af:a8:1c:65:c6:c2:6e:dc:42:3c:16:1b:3f:d7: 9f:cc:22:01:d0:59:3a:c1:3d:4b:15:f1:22:77:4d: 46:1f:b8:fc:7e:41:a9:d8:f8:c6:aa:4d:39:2a:fd: d0:a7:94:93:cf:d4:7c:2f:8f:aa:87:75:c2:46:e1: 33:93:04:2b:bd:43:3b:ef:11:9f:c0:11:1a:ac:ba: 53:dc:51:16:ff:a8:3a:49:db:88:a6:75:cd:be:c7: c8:12:73:6d:f8:fd:c9:8a:af:80:85:c4:d1:16:24: 89:b9:e7:f3:4d:d9:08:f2:09:83:9c:a6:7f:a1:0c: 64:67:26:61:26:db:b0:4a:0e:d5:6b:c2:e1:ed:03: eb:cd:b2:02:d7:01:11:e0:5c:f4:49:d5:6b:0c:53: 23:4f:a6:8b:4e:41:6a:9d:66:6c:ff:a4:44:77:fe: 97:57:16:37:70:c2:36:6a:00:5f:83:c3:c0:f9:5d: fc:42:28:4a:23:32:ec:21:44:03:4c:e6:8f:9e:da: 6b:38:c2:52:dc:66:ab:90:77:9c:40:6c:3d:75:1d: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5E:53:BC:35:BD:03:EA:DE:EB:F4:06:24:C8:26:54:3C:96:65:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43db48ed-8413-3a9f-937e-d6132a765a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f2:7f:a4:dd:75:c3:1c:30:4d:25:e4:c6:7d:3a:cd:92:c7: 1d:a0:c0:f2:e2:48:eb:7b:ff:cb:e9:bd:c6:b1:70:cb:42:8c: f2:14:25:1a:14:c3:33:8b:97:71:0b:66:10:55:4d:c8:1f:ad: 30:04:8a:5c:e6:b5:3d:77:0c:4f:1b:13:f6:9f:ab:c1:31:b5: 14:05:28:93:27:c4:86:2d:e3:38:3a:20:04:25:e2:86:46:9b: db:c3:6e:ff:ac:fc:f4:d2:37:d1:90:7a:f0:85:25:c0:58:05: be:98:fd:fb:36:60:0c:0e:99:1e:3e:85:77:39:7c:64:85:99: 0d:b0:50:b7:8e:a4:a3:df:25:a2:4d:09:be:4c:25:9f:56:1b: 46:35:a7:2f:75:17:63:85:37:5d:25:d0:3d:da:bb:bf:fb:aa: c7:41:b0:ad:21:d7:41:64:cf:25:1d:88:87:05:11:45:72:69: 10:85:ac:c4:91:59:00:58:f9:93:69:3b:1c:9a:9a:c7:2c:61: 5b:7d:2d:51:13:9c:60:69:31:3a:72:3a:68:5d:ed:d0:a0:8b: a0:18:2f:9b:33:67:42:6f:41:71:a0:56:03:5b:ea:48:90:40: 04:63:d4:59:b9:1c:1d:73:a5:11:e4:15:d6:7e:c6:3b:6f:e9: ae:60:ab:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79aTUhwGzgRuhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzRjZjYyNzUtZTUzMS00YTczLWFlMWUtZGI4Y2UzOWY1Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ7wziAUdcfbqbYpJsHyCbiB/foPZDFhDrv7 ZA9KqXuoirIMhtby3u5ljd1br6gcZcbCbtxCPBYbP9efzCIB0Fk6wT1LFfEid01G H7j8fkGp2PjGqk05Kv3Qp5STz9R8L4+qh3XCRuEzkwQrvUM77xGfwBEarLpT3FEW /6g6SduIpnXNvsfIEnNt+P3Jiq+AhcTRFiSJuefzTdkI8gmDnKZ/oQxkZyZhJtuw Sg7Va8Lh7QPrzbIC1wER4Fz0SdVrDFMjT6aLTkFqnWZs/6REd/6XVxY3cMI2agBf g8PA+V38QihKIzLsIUQDTOaPntprOMJS3GarkHecQGw9dR26xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9eU7w1vQPq3uv0BiTIJlQ8lmVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDNkYjQ4ZWQtODQxMy0z YTlmLTkzN2UtZDYxMzJhNzY1YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfyf6TddcMcME0l5MZ9Os2Sxx2gwPLiSOt7/8vpvcaxcMtCjPIUJRoU wzOLl3ELZhBVTcgfrTAEilzmtT13DE8bE/afq8ExtRQFKJMnxIYt4zg6IAQl4oZG m9vDbv+s/PTSN9GQevCFJcBYBb6Y/fs2YAwOmR4+hXc5fGSFmQ2wULeOpKPfJaJN Cb5MJZ9WG0Y1py91F2OFN10l0D3au7/7qsdBsK0h10FkzyUdiIcFEUVyaRCFrMSR WQBY+ZNpOxyamscsYVt9LVETnGBpMTpyOmhd7dCgi6AYL5szZ0JvQXGgVgNb6kiQ QARj1Fm5HB1zpRHkFdZ+xjtv6a5gq9M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:44:31 2025 by rpki-client