$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4660bf32-579d-36d2-a5fd-2ad42325bedb.roa File: 4660bf32-579d-36d2-a5fd-2ad42325bedb.roa (raw, json) Hash identifier: G1hVa6Mge5z3Fgudu0+dOY+gq9pVCLv3JKWtzNAJIIY= Subject key identifier: 66:48:EC:78:AA:D7:25:DD:4C:5A:87:0A:CE:75:43:40:F6:3D:20:B7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD41A253ED0125AA5B700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4660bf32-579d-36d2-a5fd-2ad42325bedb.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.18.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d4:1a:25:3e:d0:12:5a:a5:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=64a3b74c-1cae-4c5d-b1d0-78c2034cecf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:88:d1:19:0b:5a:fb:14:59:9a:eb:00:c8: b7:dd:df:a9:05:ec:16:58:85:64:a3:70:4c:76:1b: d9:9c:de:15:79:2b:72:af:49:d6:19:a5:44:ce:f6: d2:7b:d0:21:a9:b4:74:74:a0:fd:f7:9c:0f:71:47: 9b:47:7b:e2:0c:c0:23:b2:7d:ce:73:04:48:af:0b: 0c:4a:24:53:c8:00:11:f6:b5:04:4f:de:a8:af:e1: 29:37:9e:22:53:b9:59:00:94:d4:96:ba:d7:99:5b: f3:90:ab:3b:4f:59:8b:aa:87:c5:30:1b:8e:56:a7: c9:db:46:62:80:2f:da:28:51:99:a4:9b:42:b1:16: 3d:8a:9d:cf:72:41:b8:d4:b6:23:77:93:39:af:55: f7:e2:58:0c:b6:15:e3:d8:6a:29:bb:4e:ef:77:17: 07:6c:b2:8f:6b:1d:fa:c0:19:9c:dc:a7:1d:cc:8d: 63:89:c7:f2:2d:aa:a3:61:22:83:83:c5:84:9c:89: da:70:6e:c7:dc:5f:c8:e1:c5:da:a0:bf:a8:dc:0d: 26:7b:68:1e:82:69:35:b1:d0:40:94:01:da:3c:3c: 89:a9:e4:f0:b3:0e:05:01:18:8a:bd:d0:f9:66:09: 8b:7a:19:b1:32:35:18:73:27:d5:a0:04:8e:df:c3: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:48:EC:78:AA:D7:25:DD:4C:5A:87:0A:CE:75:43:40:F6:3D:20:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4660bf32-579d-36d2-a5fd-2ad42325bedb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:63:aa:cf:5c:93:04:76:a8:9e:c2:77:bb:cf:8b:cc:ec:3a: 19:c5:18:c8:2e:99:95:dc:78:68:2e:91:49:e2:9b:0c:a4:86: 38:b7:9f:0c:4c:01:6b:ac:71:6c:ee:c0:00:d6:a4:43:8b:8c: f1:48:da:1a:37:54:03:6a:8d:25:0b:57:43:c6:8f:3e:3e:48: 88:6e:8f:36:86:5f:53:51:0a:49:67:1a:c7:1c:8b:c5:a3:de: 6c:b3:ae:5d:17:ae:31:4a:39:9d:ab:68:de:12:ac:9d:c2:f8: 73:0f:43:ed:b4:ed:56:04:59:01:f6:57:d3:72:99:b6:b0:6a: 53:26:60:b5:8a:27:fc:65:bc:df:e3:cd:24:61:64:55:c3:0f: c7:96:0b:47:97:7e:0e:ff:5a:b4:10:ff:00:5b:db:a0:d5:ed: d5:e4:f3:44:99:63:9b:fa:09:cd:48:19:a9:1d:74:94:2b:92: b6:1e:a8:b7:1d:67:4f:75:67:68:48:79:7b:70:45:4c:00:f5: 74:3c:c1:35:2c:2e:1d:9f:2f:a9:86:0e:d8:d1:0a:6d:7b:ea: d4:f5:31:04:b7:33:25:93:3c:55:35:eb:d3:d5:91:55:53:6e: 16:ca:b4:01:6c:1f:ef:ca:90:93:94:32:17:17:7c:bb:8f:73: 81:2a:28:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79QaJT7QElqltwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NjRhM2I3NGMtMWNhZS00YzVkLWIxZDAtNzhjMjAzNGNlY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTmI0RkLWvsUWZrrAMi33d+pBewWWIVko3BM dhvZnN4VeStyr0nWGaVEzvbSe9AhqbR0dKD995wPcUebR3viDMAjsn3OcwRIrwsM SiRTyAAR9rUET96or+EpN54iU7lZAJTUlrrXmVvzkKs7T1mLqofFMBuOVqfJ20Zi gC/aKFGZpJtCsRY9ip3PckG41LYjd5M5r1X34lgMthXj2Gopu07vdxcHbLKPax36 wBmc3KcdzI1jicfyLaqjYSKDg8WEnInacG7H3F/I4cXaoL+o3A0me2gegmk1sdBA lAHaPDyJqeTwsw4FARiKvdD5ZgmLehmxMjUYcyfVoASO38MqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZI7Hiq1yXdTFqHCs51Q0D2PSC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDY2MGJmMzItNTc5ZC0z NmQyLWE1ZmQtMmFkNDIzMjViZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFjqs9ckwR2qJ7Cd7vPi8zsOhnFGMgumZXceGgukUnimwykhji3nwxM AWuscWzuwADWpEOLjPFI2ho3VANqjSULV0PGjz4+SIhujzaGX1NRCklnGscci8Wj 3myzrl0XrjFKOZ2raN4SrJ3C+HMPQ+207VYEWQH2V9NymbawalMmYLWKJ/xlvN/j zSRhZFXDD8eWC0eXfg7/WrQQ/wBb26DV7dXk80SZY5v6Cc1IGakddJQrkrYeqLcd Z091Z2hIeXtwRUwA9XQ8wTUsLh2fL6mGDtjRCm176tT1MQS3MyWTPFU169PVkVVT bhbKtAFsH+/KkJOUMhcXfLuPc4EqKMU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:56:24 2025 by rpki-client