$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4fa0a0e0-dd10-3ac1-bf69-aa528130b86b.roa File: 4fa0a0e0-dd10-3ac1-bf69-aa528130b86b.roa (raw, json) Hash identifier: 9AYRfVkV3BAbALvd5Qfxs1rH1yjlNEJSrSa8242xbvc= Subject key identifier: 1D:1A:DC:4D:8E:9C:31:04:8D:8A:BA:95:6E:12:30:50:4B:D8:A6:A6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCA53C307B512285DFD0E Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4fa0a0e0-dd10-3ac1-bf69-aa528130b86b.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.18.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:ca:53:c3:07:b5:12:28:5d:fd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=d5de10c0-2669-46a5-b864-d8e4f6822e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:5b:a4:77:d0:b6:e3:ba:e9:17:2b:60:07: 56:0b:53:49:ac:7f:a2:e1:8e:d1:7c:a6:c0:b9:8d: bf:04:fa:79:bf:1c:6d:66:b2:ce:a3:d7:de:db:46: 52:66:10:50:3d:25:93:c6:a0:49:18:43:89:db:73: 9e:84:5a:3b:11:7f:19:1b:4b:d8:6d:9a:f4:3a:e3: 18:9f:fa:f4:0c:d5:cd:a8:c6:39:67:ca:30:31:8c: e8:45:a2:87:b9:8f:1f:c4:8b:1a:69:fb:f1:26:2b: 6f:f4:4c:f8:3a:3a:01:fe:32:4d:c0:55:21:7f:4c: 24:25:0e:ee:64:a7:56:34:27:c3:1b:57:ac:70:df: 6d:6e:d7:17:15:86:e2:a1:ac:a1:47:b3:5a:cc:cf: e3:99:df:0c:49:03:a4:6d:2a:79:56:a6:55:09:4b: df:84:50:98:94:20:22:07:f9:dc:3f:da:e8:ba:71: f4:73:37:85:80:50:ef:5f:ed:69:ee:22:07:1b:ea: d9:7d:52:e3:85:51:39:67:e3:23:e3:56:d5:85:51: c0:c6:87:99:47:ca:89:de:ff:03:69:14:41:53:68: 68:55:bf:e6:98:e7:10:2b:61:69:7a:74:30:f0:3d: c3:78:1a:f1:cf:f1:e1:db:83:4c:9a:d3:7e:ee:4d: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:DC:4D:8E:9C:31:04:8D:8A:BA:95:6E:12:30:50:4B:D8:A6:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4fa0a0e0-dd10-3ac1-bf69-aa528130b86b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:6b:78:17:88:e0:7f:fd:e6:53:91:97:31:68:86:1c:cc:29: c2:e5:50:4e:c9:db:62:33:eb:15:f7:5c:8f:8b:e4:94:7b:98: cf:07:25:a7:4d:ae:1c:24:40:06:2b:e7:a9:89:c3:c0:78:1b: 9b:ab:d6:03:0d:9c:b5:c3:47:f3:6e:9b:ad:ba:2e:ba:00:e9: fa:e8:99:a1:5b:92:94:10:fb:d9:2b:e5:d0:35:e0:c4:79:cd: 66:09:78:12:c3:a9:d0:36:f0:98:cf:ed:65:34:a5:83:b5:f0: ab:11:3d:e6:45:fa:32:b5:3e:3f:12:13:53:0e:4a:9a:32:85: 48:98:c8:e8:a3:01:87:1e:3d:a4:e7:e9:33:28:e4:2c:55:41: db:85:a2:97:c8:36:0b:cf:72:7a:58:3c:4e:e2:1c:1e:e5:67: e4:f6:0f:f8:6e:20:6a:f4:c9:7e:68:9a:de:35:28:6c:c2:2a: 08:5a:2f:59:10:4e:34:7a:03:be:56:cf:45:74:97:d3:9b:6a: 10:17:46:be:d0:7f:0d:0a:d8:dc:6e:84:0a:5b:af:0a:75:2f: 2f:b8:2b:34:d3:77:3e:c3:fe:27:e4:75:fb:83:d6:0c:8f:aa: aa:ec:23:c1:bf:c6:69:90:3a:dd:5e:12:5a:c9:6f:12:64:41: 4a:bc:98:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78pTwwe1Eihd/Q4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZDVkZTEwYzAtMjY2OS00NmE1LWI4NjQtZDhlNGY2ODIyZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm5bpHfQtuO66RcrYAdWC1NJrH+i4Y7RfKbA uY2/BPp5vxxtZrLOo9fe20ZSZhBQPSWTxqBJGEOJ23OehFo7EX8ZG0vYbZr0OuMY n/r0DNXNqMY5Z8owMYzoRaKHuY8fxIsaafvxJitv9Ez4OjoB/jJNwFUhf0wkJQ7u ZKdWNCfDG1escN9tbtcXFYbioayhR7NazM/jmd8MSQOkbSp5VqZVCUvfhFCYlCAi B/ncP9rounH0czeFgFDvX+1p7iIHG+rZfVLjhVE5Z+Mj41bVhVHAxoeZR8qJ3v8D aRRBU2hoVb/mmOcQK2FpenQw8D3DeBrxz/Hh24NMmtN+7k2hoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0a3E2OnDEEjYq6lW4SMFBL2KamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGZhMGEwZTAtZGQxMC0z YWMxLWJmNjktYWE1MjgxMzBiODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVreBeI4H/95lORlzFohhzMKcLlUE7J22Iz6xX3XI+L5JR7mM8HJadN rhwkQAYr56mJw8B4G5ur1gMNnLXDR/Num626LroA6fromaFbkpQQ+9kr5dA14MR5 zWYJeBLDqdA28JjP7WU0pYO18KsRPeZF+jK1Pj8SE1MOSpoyhUiYyOijAYcePaTn 6TMo5CxVQduFopfINgvPcnpYPE7iHB7lZ+T2D/huIGr0yX5omt41KGzCKghaL1kQ TjR6A75Wz0V0l9ObahAXRr7Qfw0K2NxuhApbrwp1Ly+4KzTTdz7D/ifkdfuD1gyP qqrsI8G/xmmQOt1eElrJbxJkQUq8mIo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:30 2025 by rpki-client