$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa File: 4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa (raw, json) Hash identifier: whHFc1DMSlHbKRYf7t37RrPkr0Dh+Zd79pbwdlecXMs= Subject key identifier: 6B:46:FE:29:49:15:BD:32:27:99:59:1B:92:49:F4:3A:A9:D1:6E:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C7297399C68B7A653A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.24.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c7:29:73:99:c6:8b:7a:65:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=31c37e48-7d24-4b4a-ab27-0876bace27d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:79:8e:c2:62:18:e5:91:96:92:f0:3e:32: de:94:1a:5f:40:74:5f:39:33:d2:09:88:9d:b9:90: 08:c5:ed:07:7d:89:27:7e:b4:86:31:2d:fe:56:c2: 27:76:95:fe:8d:83:25:7a:0b:f9:5b:c3:78:58:3c: 1c:0b:16:ee:1a:7f:31:74:3a:ef:55:17:97:fd:73: ab:e6:2d:ad:6e:c1:c2:85:b2:6c:dc:db:81:f1:96: 91:1c:8a:74:1d:4a:32:93:70:78:d7:be:b8:12:05: ff:a7:d9:80:f1:c2:48:4a:5a:64:3f:ab:23:8d:60: ca:03:d9:77:9c:0e:0f:ba:4b:2a:ab:d1:91:20:89: 61:5c:a2:10:97:9f:14:72:db:af:1f:b9:30:e2:c6: 3a:b6:c2:8d:4f:7f:70:5f:22:38:2a:ce:ac:13:b0: f0:cf:58:49:38:ea:ce:a5:62:98:0c:f4:49:f8:3c: b2:37:30:ef:18:9b:d5:08:b8:07:0c:87:6a:4f:f3: a8:3e:0f:88:5f:5e:24:88:1c:13:35:16:63:a9:0a: a1:1c:98:61:b1:a5:df:20:d5:b4:02:62:1d:08:41: d6:4f:13:2b:bc:6d:04:8d:74:cf:1b:b9:f2:21:c6: c6:8c:b4:64:00:31:4d:68:bf:dc:68:02:4c:37:5c: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:46:FE:29:49:15:BD:32:27:99:59:1B:92:49:F4:3A:A9:D1:6E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6f5f04-63d4-33ab-82c2-8e8b029bff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:43:6f:b3:51:4d:76:90:4c:78:33:e3:fa:c6:3a:71:e8:1d: 5e:f1:d5:cb:53:31:f0:f1:0b:b9:76:42:22:3e:0d:bd:b3:07: c2:fb:2e:7a:9c:66:da:85:d4:03:aa:d3:89:59:d1:12:3f:b2: 26:1e:74:1d:93:f4:43:da:7f:2e:3c:98:0a:39:34:56:00:e6: 5b:ff:a0:ce:b2:fa:bb:81:66:14:c1:a4:8d:8a:0d:57:89:a6: 69:76:db:55:a3:1a:59:ed:ce:69:ff:28:cd:79:0e:ab:59:80: 41:01:c1:b0:1d:fc:39:56:c3:dc:bc:fd:bb:d6:b2:dc:4c:71: 9b:c6:19:ce:1f:d0:dc:2e:50:7b:aa:c7:a0:da:09:19:31:ce: d4:ee:90:4f:3b:21:9f:52:ec:2c:4d:95:4e:1b:11:cd:95:46: 76:92:15:ac:6d:71:d7:9d:34:06:3c:db:11:5d:e7:37:ba:a0: 1d:5e:61:3e:ef:65:5f:56:10:a9:6b:93:38:39:07:d3:ef:dd: 6d:ce:1a:60:a8:4a:3b:97:e4:26:c4:e6:6f:f8:b1:46:22:81: 0f:98:bd:aa:a3:02:5a:6e:7d:a5:dc:a3:72:76:12:81:91:31: 4f:6f:7e:72:14:34:3f:b7:54:f4:12:3b:d5:3a:5e:90:70:40: a9:f5:99:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtscpc5nGi3plOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MzFjMzdlNDgtN2QyNC00YjRhLWFiMjctMDg3NmJhY2UyN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsZ5jsJiGOWRlpLwPjLelBpfQHRfOTPSCYid uZAIxe0HfYknfrSGMS3+VsIndpX+jYMlegv5W8N4WDwcCxbuGn8xdDrvVReX/XOr 5i2tbsHChbJs3NuB8ZaRHIp0HUoyk3B41764EgX/p9mA8cJISlpkP6sjjWDKA9l3 nA4Puksqq9GRIIlhXKIQl58UctuvH7kw4sY6tsKNT39wXyI4Ks6sE7Dwz1hJOOrO pWKYDPRJ+DyyNzDvGJvVCLgHDIdqT/OoPg+IX14kiBwTNRZjqQqhHJhhsaXfINW0 AmIdCEHWTxMrvG0EjXTPG7nyIcbGjLRkADFNaL/caAJMN1wolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtG/ilJFb0yJ5lZG5JJ9Dqp0W6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGE2ZjVmMDQtNjNkNC0z M2FiLTgyYzItOGU4YjAyOWJmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFDb7NRTXaQTHgz4/rGOnHoHV7x1ctTMfDxC7l2QiI+Db2zB8L7Lnqc ZtqF1AOq04lZ0RI/siYedB2T9EPafy48mAo5NFYA5lv/oM6y+ruBZhTBpI2KDVeJ pml221WjGlntzmn/KM15DqtZgEEBwbAd/DlWw9y8/bvWstxMcZvGGc4f0NwuUHuq x6DaCRkxztTukE87IZ9S7CxNlU4bEc2VRnaSFaxtcdedNAY82xFd5ze6oB1eYT7v ZV9WEKlrkzg5B9Pv3W3OGmCoSjuX5CbE5m/4sUYigQ+YvaqjAlpufaXco3J2EoGR MU9vfnIUND+3VPQSO9U6XpBwQKn1mSE= -----END CERTIFICATE-----Generated at Sat Apr 5 09:59:35 2025 by rpki-client