$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa File: 4d40595a-41f2-3ac1-9657-ddc78350cd29.roa (raw, json) Hash identifier: xfZr5u3MPVMTnPIrz8FHtNN3PcTRJMkZDn2jc/aUk1o= Subject key identifier: CA:CA:6B:96:BA:79:EE:48:66:E4:DF:7B:B6:81:4F:5C:46:C6:AE:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C41E788E1A14CD6C1A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.19.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c4:1e:78:8e:1a:14:cd:6c:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=67738237-fc38-4202-81df-a4b645ab6494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:ff:69:06:f6:12:53:e1:53:c2:e9:29:01: 82:52:10:0f:b8:fb:d2:7c:36:32:9a:0d:86:2e:23: d9:bc:a0:d8:e9:4f:4b:71:7a:81:b1:e3:44:47:b5: f4:a4:8c:07:53:93:ed:3e:66:9c:b6:8c:b0:5e:7a: 40:d0:25:21:a8:52:1e:11:ba:06:71:cd:ac:ec:d9: 3e:33:d2:2a:71:99:ae:8e:2b:0d:5d:e3:c1:be:f3: a3:c2:0b:62:ec:bc:6d:cc:30:da:86:22:57:f2:52: 65:96:b1:cf:82:f2:bc:32:36:4f:e4:82:f2:b7:56: 18:93:c9:90:96:cf:1c:cf:ff:c8:97:df:df:64:0e: 9a:d2:a6:6f:4a:c1:7b:a4:88:c6:e5:9b:ba:01:2f: 3b:0a:b1:ac:cf:3a:b3:98:bb:0f:fe:0f:d4:ae:28: ce:d8:01:0a:d5:74:30:4f:56:68:ba:ae:15:87:8b: 92:b2:dd:0e:4a:da:8d:fd:13:44:e1:a9:ac:20:9d: ec:58:6d:ac:e9:2b:c0:40:60:31:cf:f0:5a:2a:a6: 86:7b:95:c1:89:61:e5:cb:aa:e5:e2:db:14:c6:fd: 58:7e:15:aa:ad:b0:c4:52:bd:fc:7f:92:37:46:d1: 8a:a4:03:d2:c5:a1:9a:a4:f2:bb:56:aa:ae:9c:21: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:6B:96:BA:79:EE:48:66:E4:DF:7B:B6:81:4F:5C:46:C6:AE:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ee:43:3f:58:5e:2a:ed:54:a4:f2:03:5d:97:ee:3f:0b:15: 8d:26:97:0c:fb:7f:f1:23:59:2c:bb:50:ed:46:bc:ea:2e:32: 88:88:37:bf:df:26:c4:1d:6a:7f:b8:7e:b6:d4:7e:79:87:3e: bb:76:58:61:c5:87:96:86:d4:ca:be:01:d8:31:ec:a8:c5:b5: c2:c6:a0:19:fa:38:9a:25:a4:1b:b7:ec:e5:70:c8:5c:e5:ca: 7b:52:68:6e:66:55:3c:8c:9f:fa:c2:3d:2d:f4:9f:a6:32:ed: 5a:15:69:e4:d0:86:74:d9:03:b6:39:be:b2:e9:fc:43:1e:de: de:c1:f3:0d:a2:4c:0b:a6:5b:bf:25:2a:05:f0:df:0c:d2:42: d6:cb:0c:a9:69:3b:74:cb:b4:a5:df:8f:2f:d5:16:17:c5:94: f7:ce:33:3c:ee:84:dc:f5:cd:ad:bd:c2:3c:0d:4b:2d:5f:a5: 32:0b:13:db:b1:23:21:29:a7:ae:fc:4d:40:59:8e:5b:30:1c: 85:9c:73:e8:d0:76:19:9a:79:19:42:12:0d:34:7c:81:96:c7: 01:b4:3b:5b:a1:51:61:b9:fa:2c:d6:af:db:d5:3f:a3:8e:ce: 56:32:e1:31:d1:43:3d:6a:9c:07:2a:b0:a6:17:4d:d5:b4:39: 33:34:9b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsQeeI4aFM1sGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk Njc3MzgyMzctZmMzOC00MjAyLTgxZGYtYTRiNjQ1YWI2NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcX/aQb2ElPhU8LpKQGCUhAPuPvSfDYymg2G LiPZvKDY6U9LcXqBseNER7X0pIwHU5PtPmactoywXnpA0CUhqFIeEboGcc2s7Nk+ M9IqcZmujisNXePBvvOjwgti7LxtzDDahiJX8lJllrHPgvK8MjZP5ILyt1YYk8mQ ls8cz//Il9/fZA6a0qZvSsF7pIjG5Zu6AS87CrGszzqzmLsP/g/UrijO2AEK1XQw T1Zouq4Vh4uSst0OStqN/RNE4amsIJ3sWG2s6SvAQGAxz/BaKqaGe5XBiWHly6rl 4tsUxv1YfhWqrbDEUr38f5I3RtGKpAPSxaGapPK7VqqunCHj2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrKa5a6ee5IZuTfe7aBT1xGxq7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGQ0MDU5NWEtNDFmMi0z YWMxLTk2NTctZGRjNzgzNTBjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfuQz9YXirtVKTyA12X7j8LFY0mlwz7f/EjWSy7UO1GvOouMoiIN7/f JsQdan+4frbUfnmHPrt2WGHFh5aG1Mq+Adgx7KjFtcLGoBn6OJolpBu37OVwyFzl yntSaG5mVTyMn/rCPS30n6Yy7VoVaeTQhnTZA7Y5vrLp/EMe3t7B8w2iTAumW78l KgXw3wzSQtbLDKlpO3TLtKXfjy/VFhfFlPfOMzzuhNz1za29wjwNSy1fpTILE9ux IyEpp678TUBZjlswHIWcc+jQdhmaeRlCEg00fIGWxwG0O1uhUWG5+izWr9vVP6OO zlYy4THRQz1qnAcqsKYXTdW0OTM0m78= -----END CERTIFICATE-----Generated at Sat Apr 5 09:59:39 2025 by rpki-client