$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa File: 5733aaff-6788-3f49-afa1-3260b9ee26bc.roa (raw, json) Hash identifier: CD13nJUZn9Rc8SQKkVk4YO2q7sZfpjKeIwOaLq1bq68= Subject key identifier: 32:16:D3:19:8C:64:CC:D8:2F:A8:1F:37:0B:2F:12:F6:95:2C:E7:65 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCADBD9E4BA94ABCFC8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.19.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:ca:db:d9:e4:ba:94:ab:cf:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=b59fdb9d-54b8-4bc9-9665-d19b99e144b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:3f:d7:00:e6:ec:2e:f7:db:c2:25:f0:f2: d0:a5:5a:62:50:8a:3f:6e:44:cf:d9:67:ae:6b:b0: 4c:d5:5c:f5:6c:6f:f0:9f:2c:22:64:5f:ef:d8:97: 02:3c:56:0d:33:04:48:60:c8:9f:71:57:40:55:2b: 50:7d:7e:90:5f:11:6f:53:6a:fb:ff:66:43:f2:55: 05:82:19:e7:b3:d9:4e:c6:be:50:32:93:14:6a:c1: 87:0b:5b:84:94:a6:bf:83:da:84:50:2d:d2:9f:35: 30:dd:a5:7b:6e:90:f0:b9:9f:ab:92:e6:f4:52:39: 6e:ab:fe:23:ce:97:6e:52:cf:b3:6e:dd:87:05:be: 4a:00:35:6a:44:06:76:53:ad:4c:5a:25:bd:ec:13: f4:25:50:01:38:2e:d4:34:9a:b4:ad:2e:51:95:d0: 4d:21:61:1e:24:3f:e1:3e:b0:2b:82:e6:e2:3a:fd: 36:a9:ca:76:4e:07:0f:73:2c:ac:3e:6b:50:42:78: 74:47:ab:93:e7:4c:4b:54:33:f9:b7:c7:00:35:57: 3a:0f:79:bd:50:84:35:5c:62:74:58:02:44:ef:ee: 72:a4:2c:0e:c8:2f:cb:21:b0:20:00:2b:67:b0:cb: 67:ff:fe:67:94:c8:bf:8c:36:bd:64:2e:20:0b:98: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:16:D3:19:8C:64:CC:D8:2F:A8:1F:37:0B:2F:12:F6:95:2C:E7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:37:b5:94:be:59:c4:f3:66:cc:7c:49:37:8e:d2:34:99:82: 9f:cc:90:1c:e8:10:f9:44:ed:ae:7d:e0:c6:75:68:74:40:74: d7:c7:f5:91:47:25:50:a1:6b:1b:a6:89:76:3a:52:4c:8d:93: c6:1b:60:78:c5:5c:88:7a:11:e9:1f:a8:98:bf:e2:2f:87:36: 7a:c6:84:58:aa:fe:ac:f8:c8:9c:4d:99:37:6f:17:e0:0e:27: d4:75:24:9d:2a:a9:fa:cb:40:44:56:f0:53:b1:7a:9a:1c:6c: e7:13:44:60:17:c7:8d:94:23:d6:b6:ac:17:db:c6:d0:68:2e: 2e:8b:b9:5d:d4:5a:60:7b:a2:93:5d:bc:25:17:0d:59:a0:49: 2e:51:48:24:87:36:7d:db:cb:94:8f:25:4b:23:e8:f9:8c:d4: d5:11:63:74:71:e6:02:e2:1f:09:dd:c4:93:98:58:70:f6:0e: 3f:a0:e8:ee:40:63:5e:86:95:e7:ba:e0:37:81:11:31:c6:f9: 51:86:65:01:99:41:95:25:e3:90:70:75:5a:aa:22:ba:b5:ad: 7e:3b:33:c0:e5:2c:1a:43:ae:f1:9a:64:65:9f:07:44:f1:7a: 97:47:2b:3c:33:06:66:19:33:02:a9:aa:c9:fb:7c:bc:a4:b7: 08:40:64:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78rb2eS6lKvPyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjU5ZmRiOWQtNTRiOC00YmM5LTk2NjUtZDE5Yjk5ZTE0NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLY/1wDm7C7328Il8PLQpVpiUIo/bkTP2Weu a7BM1Vz1bG/wnywiZF/v2JcCPFYNMwRIYMifcVdAVStQfX6QXxFvU2r7/2ZD8lUF ghnns9lOxr5QMpMUasGHC1uElKa/g9qEUC3SnzUw3aV7bpDwuZ+rkub0Ujluq/4j zpduUs+zbt2HBb5KADVqRAZ2U61MWiW97BP0JVABOC7UNJq0rS5RldBNIWEeJD/h PrArgubiOv02qcp2TgcPcyysPmtQQnh0R6uT50xLVDP5t8cANVc6D3m9UIQ1XGJ0 WAJE7+5ypCwOyC/LIbAgACtnsMtn//5nlMi/jDa9ZC4gC5h1uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIW0xmMZMzYL6gfNwsvEvaVLOdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTczM2FhZmYtNjc4OC0z ZjQ5LWFmYTEtMzI2MGI5ZWUyNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY3tZS+WcTzZsx8STeO0jSZgp/MkBzoEPlE7a594MZ1aHRAdNfH9ZFH JVChaxumiXY6UkyNk8YbYHjFXIh6EekfqJi/4i+HNnrGhFiq/qz4yJxNmTdvF+AO J9R1JJ0qqfrLQERW8FOxepocbOcTRGAXx42UI9a2rBfbxtBoLi6LuV3UWmB7opNd vCUXDVmgSS5RSCSHNn3by5SPJUsj6PmM1NURY3Rx5gLiHwndxJOYWHD2Dj+g6O5A Y16Glee64DeBETHG+VGGZQGZQZUl45BwdVqqIrq1rX47M8DlLBpDrvGaZGWfB0Tx epdHKzwzBmYZMwKpqsn7fLyktwhAZHc= -----END CERTIFICATE-----Generated at Fri Jun 6 17:00:59 2025 by rpki-client