$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa File: 523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa (raw, json) Hash identifier: kxnfRqO1pgv9a8BU20ASKgHKfMOo6VBQcn36YDbH0cA= Subject key identifier: E2:E9:F8:C4:0F:4F:9F:72:6B:42:0C:7C:E1:F4:61:F6:66:80:62:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC868156BFB3EB8C1E940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.18.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c8:68:15:6b:fb:3e:b8:c1:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=4cdf81a1-08e9-4052-9f94-7f531442e234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:50:e0:d1:16:fe:7b:d4:08:50:2b:fc:d7: 8f:06:97:6c:4d:2d:50:82:e0:4c:b9:a6:3d:2c:41: 29:9c:b5:a5:0b:4e:b9:f7:07:6c:3e:95:5a:7a:95: d3:16:ea:90:f2:01:86:f7:5f:53:1d:2c:63:df:be: fb:29:b2:d2:c7:40:ad:4c:41:35:c9:69:38:c1:ea: f6:9c:66:5f:01:0d:89:1a:7c:25:cb:01:de:4f:0f: 51:ec:e4:65:10:57:db:d1:7d:a4:69:ba:d7:3e:3e: 1f:7e:53:ef:10:f5:40:7a:59:a6:4b:78:21:05:be: a9:f0:88:21:dd:2b:2b:fb:62:f6:e7:6f:5c:6c:e8: ee:71:e1:07:07:12:a7:92:96:91:d1:f3:16:27:3c: 1a:31:d8:0f:16:7a:f1:41:23:1c:4f:dd:08:d7:b2: ee:7d:71:e1:3f:57:e5:27:e1:ce:f0:96:36:93:af: c9:54:02:9c:74:67:ab:ae:05:30:8f:49:93:f1:b1: 26:af:e3:76:e7:ef:42:8e:30:0a:c4:c5:4a:94:58: 42:25:f0:02:77:9d:e0:d5:3a:c9:05:bb:40:5f:42: cf:fa:e7:5d:36:40:39:6e:da:ed:e5:a1:e7:ef:d0: 85:54:4c:a2:45:90:1a:0f:63:24:08:8f:2a:82:ea: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E9:F8:C4:0F:4F:9F:72:6B:42:0C:7C:E1:F4:61:F6:66:80:62:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8e:85:88:b8:09:cb:48:17:53:5b:b7:73:39:ea:ba:9e:0c: da:da:a9:72:23:5b:dc:ef:33:5d:36:eb:7c:b8:33:72:18:e0: 18:f9:d1:4e:52:d4:09:36:d5:82:75:62:c0:c5:84:57:81:d7: d5:d2:48:ae:05:4e:05:9e:de:44:ce:ba:c4:9b:93:36:e6:62: f3:cb:cc:ce:68:48:24:fa:d9:97:04:5a:68:dc:32:3b:2c:f1: d8:98:ee:e4:b3:a6:c9:47:91:8a:63:fe:45:31:93:70:9c:96: 7b:51:21:ad:2f:60:86:51:ca:40:01:0f:e7:93:66:3e:e7:66: 52:fe:a4:c3:39:80:d2:63:c5:73:b8:d4:95:d0:03:93:87:14: ec:3c:f7:c4:56:95:22:51:a4:86:e0:eb:e4:7b:60:80:05:20: a0:4b:d3:e1:f0:1b:36:ff:2a:ec:5b:50:c9:a8:9e:c5:bc:f1: 0c:d8:e5:9f:12:8a:cf:87:b8:a3:d7:ac:10:24:bb:bf:d9:01: 2b:ad:21:3d:09:d4:3d:a4:9f:2d:49:a5:6d:7e:dd:ae:f0:1f: 07:bb:92:e4:6b:a4:65:2d:50:a5:d8:b9:85:5b:7c:48:3e:5b: 82:9f:37:c8:fd:9e:d7:8e:91:1f:cd:3a:b2:fd:3b:b1:bc:1a: 81:ff:a0:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78hoFWv7PrjB6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NGNkZjgxYTEtMDhlOS00MDUyLTlmOTQtN2Y1MzE0NDJlMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtQ4NEW/nvUCFAr/NePBpdsTS1QguBMuaY9 LEEpnLWlC0659wdsPpVaepXTFuqQ8gGG919THSxj3777KbLSx0CtTEE1yWk4wer2 nGZfAQ2JGnwlywHeTw9R7ORlEFfb0X2kabrXPj4fflPvEPVAelmmS3ghBb6p8Igh 3Ssr+2L2529cbOjuceEHBxKnkpaR0fMWJzwaMdgPFnrxQSMcT90I17LufXHhP1fl J+HO8JY2k6/JVAKcdGerrgUwj0mT8bEmr+N25+9CjjAKxMVKlFhCJfACd53g1TrJ BbtAX0LP+uddNkA5btrt5aHn79CFVEyiRZAaD2MkCI8qguo/kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLp+MQPT59ya0IMfOH0YfZmgGKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTIzZTZmZTctNzhmNy0z NmMzLTgyZjMtNDFjNGI4MjVmZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6OhYi4CctIF1Nbt3M56rqeDNraqXIjW9zvM10263y4M3IY4Bj50U5S 1Ak21YJ1YsDFhFeB19XSSK4FTgWe3kTOusSbkzbmYvPLzM5oSCT62ZcEWmjcMjss 8diY7uSzpslHkYpj/kUxk3CclntRIa0vYIZRykABD+eTZj7nZlL+pMM5gNJjxXO4 1JXQA5OHFOw898RWlSJRpIbg6+R7YIAFIKBL0+HwGzb/KuxbUMmonsW88QzY5Z8S is+HuKPXrBAku7/ZASutIT0J1D2kny1JpW1+3a7wHwe7kuRrpGUtUKXYuYVbfEg+ W4KfN8j9nteOkR/NOrL9O7G8GoH/oH8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:34 2025 by rpki-client