$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46817e25-b911-3130-9927-4d87f6034750.roa File: 46817e25-b911-3130-9927-4d87f6034750.roa (raw, json) Hash identifier: KZ854IsSqKu4QbF8PTHYJB/4VL6PQG0T13AkTeDd2es= Subject key identifier: 37:3C:4C:63:E7:23:96:56:EE:CC:79:3A:B4:09:2F:56:D0:A4:82:3E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C5B361CF630C83199180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46817e25-b911-3130-9927-4d87f6034750.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.21.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:b3:61:cf:63:0c:83:19:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=c8a275a9-c7f7-405e-a2c1-5bb4e9859bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:67:75:17:1f:4a:cb:81:73:ef:57:e8:f2: 30:b7:34:c3:e9:da:88:d0:ae:b7:39:28:2f:fb:b4: 16:cd:e8:67:32:75:81:ce:af:37:c6:7f:d5:a4:48: d1:db:f1:b0:1a:2a:10:9d:0a:53:b0:cb:20:dc:63: 23:5e:44:6a:f9:a9:dc:e5:1c:d8:ef:66:d3:ee:db: 83:79:f4:a7:55:78:fb:f3:4f:70:7d:3c:50:cb:cc: ea:68:05:2b:9b:3c:ac:bc:83:67:8b:dc:8b:9d:16: 02:9c:76:0b:1d:21:e9:7b:a9:33:8b:99:c7:7d:b8: 85:d0:9d:7d:25:7a:74:bd:cd:6d:12:96:a1:45:eb: 7c:3d:fa:8b:bc:87:b6:b7:16:64:a6:ba:4e:10:74: 6d:8c:fe:d2:bb:5f:41:bf:be:b5:ad:14:43:33:4b: bd:0e:05:8c:4d:75:b8:00:a4:ea:04:4b:e5:e8:08: 3f:c5:b4:46:f2:f3:63:36:2c:f7:da:0f:b8:98:89: c2:a9:50:8a:e8:7c:d2:9e:3c:b2:e6:38:dd:09:ca: 4d:6c:2a:5c:1c:70:64:d6:90:ac:ab:b1:8a:16:29: d1:91:bd:f7:d0:a2:be:4f:07:00:00:7a:5e:df:43: e5:ba:bf:cc:c3:8e:60:97:3b:66:99:b0:ec:6d:85: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3C:4C:63:E7:23:96:56:EE:CC:79:3A:B4:09:2F:56:D0:A4:82:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46817e25-b911-3130-9927-4d87f6034750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:5c:b5:cf:ec:fb:30:f1:bf:56:68:e2:dc:9e:9e:9f:83:a7: 79:15:6d:dc:67:07:b7:37:6e:77:e8:e5:85:05:cf:68:9d:b7: aa:d2:ee:27:60:7e:14:c4:12:89:1d:24:88:a9:1d:00:a1:ac: 51:e1:08:fb:5c:f4:60:ca:2b:14:c1:11:3e:fb:eb:d2:e4:cb: 9a:51:7d:76:a8:2d:0e:97:c1:c0:45:53:4f:73:72:00:d6:26: 97:bd:1c:de:7a:f5:30:ed:d0:e3:dd:f7:49:ed:02:96:a8:8d: a2:51:f4:45:fd:2f:28:40:4d:2b:2c:dd:ea:44:7d:88:b1:7f: 30:7a:b7:5b:21:3f:4c:8c:fe:b0:cc:65:10:5b:78:01:38:4f: f4:7c:1b:bd:0c:b7:0d:2e:df:f5:c6:54:3f:9b:c4:19:5c:eb: 0d:4b:63:68:fc:a0:82:36:19:be:a7:77:ed:48:58:57:c9:77: e4:0d:13:8b:cb:73:9f:43:c2:5d:d8:e3:b2:e3:d6:0d:2f:ba: 1f:e2:e1:6b:4c:b0:77:a9:22:08:0e:cd:a2:bd:7d:a1:bc:36: 44:c7:34:ad:82:c4:aa:37:bc:3e:a0:07:9d:98:9d:24:6a:bf: a2:4a:1c:50:09:d2:4d:ab:5b:fb:6a:cc:d6:4f:b4:c4:c8:23: ae:27:15:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsWzYc9jDIMZkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YzhhMjc1YTktYzdmNy00MDVlLWEyYzEtNWJiNGU5ODU5YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuztndRcfSsuBc+9X6PIwtzTD6dqI0K63OSgv +7QWzehnMnWBzq83xn/VpEjR2/GwGioQnQpTsMsg3GMjXkRq+anc5RzY72bT7tuD efSnVXj7809wfTxQy8zqaAUrmzysvINni9yLnRYCnHYLHSHpe6kzi5nHfbiF0J19 JXp0vc1tEpahRet8PfqLvIe2txZkprpOEHRtjP7Su19Bv761rRRDM0u9DgWMTXW4 AKTqBEvl6Ag/xbRG8vNjNiz32g+4mInCqVCK6HzSnjyy5jjdCcpNbCpcHHBk1pCs q7GKFinRkb330KK+TwcAAHpe30Plur/Mw45glztmmbDsbYXjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDc8TGPnI5ZW7sx5OrQJL1bQpII+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDY4MTdlMjUtYjkxMS0z MTMwLTk5MjctNGQ4N2Y2MDM0NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBctc/s+zDxv1Zo4tyenp+Dp3kVbdxnB7c3bnfo5YUFz2idt6rS7idg fhTEEokdJIipHQChrFHhCPtc9GDKKxTBET7769Lky5pRfXaoLQ6XwcBFU09zcgDW Jpe9HN569TDt0OPd90ntApaojaJR9EX9LyhATSss3epEfYixfzB6t1shP0yM/rDM ZRBbeAE4T/R8G70Mtw0u3/XGVD+bxBlc6w1LY2j8oII2Gb6nd+1IWFfJd+QNE4vL c59Dwl3Y47Lj1g0vuh/i4WtMsHepIggOzaK9faG8NkTHNK2CxKo3vD6gB52YnSRq v6JKHFAJ0k2rW/tqzNZPtMTII64nFYQ= -----END CERTIFICATE-----Generated at Sat Apr 5 08:15:29 2025 by rpki-client