$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa File: 5b65e206-849c-3cf1-a6e0-7265114b7c15.roa (raw, json) Hash identifier: sdSW6IBUX2kPf0iK1+ozA3LlDLuTwZt66an5yRTJhhs= Subject key identifier: E6:3F:A6:EA:55:30:58:94:4B:8B:39:2B:EB:6F:40:9F:7F:F3:40:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD72495A7710261FCF480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.25.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d7:24:95:a7:71:02:61:fc:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=b70ec819-9bb4-46d5-a2ae-1437f5fee9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:a5:b6:39:8b:bf:62:21:17:a4:75:0b:d9: 8e:45:d5:0f:90:58:82:d9:2f:4c:13:d2:b9:a4:c6: 29:bf:1b:bd:c5:e0:f4:c8:62:bc:b8:4e:81:9a:93: 6d:7e:ee:44:11:af:2b:94:59:78:e3:5d:36:d7:15: ad:f6:78:06:a0:54:13:a4:42:51:d3:48:41:ef:bd: 4b:31:57:02:b3:0b:ab:25:57:d8:50:bd:d5:9b:70: c3:b7:13:93:20:0a:4c:12:22:f9:50:1e:19:4c:13: 8f:37:a1:9f:ef:d8:eb:95:4e:af:15:e4:ca:ad:15: 59:e3:cc:6f:30:40:0a:1f:f8:dd:53:59:50:d7:77: d7:b6:76:d4:dd:89:29:97:d2:8e:88:33:a0:e5:c9: 56:11:1b:af:9c:c5:dc:19:45:9f:18:db:cf:c4:a7: db:ce:17:cd:d9:7b:97:c7:db:ef:01:53:6f:91:e4: d9:e3:91:86:ff:dd:8d:d0:09:2d:e7:42:95:20:e7: 3e:69:5c:32:ea:82:40:d4:e8:28:3a:93:b0:9a:dd: b3:ec:c2:59:c5:01:0d:45:78:88:2e:52:a9:af:5b: 42:55:70:ff:52:51:6e:f6:52:cf:e9:ef:55:08:d9: 78:4c:39:cb:be:52:e1:34:11:cd:a6:dc:95:d4:9d: 7d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:A6:EA:55:30:58:94:4B:8B:39:2B:EB:6F:40:9F:7F:F3:40:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0c:b8:e4:81:9c:ed:ec:55:e1:42:79:7f:97:85:92:06:07: d5:c4:1e:ba:51:16:42:0d:7d:c0:4c:79:47:3b:c5:1b:00:09: a5:3f:be:17:78:54:c3:7c:4f:71:db:0c:91:11:f3:60:d3:8b: c5:48:1a:8c:9d:71:a0:07:ef:e3:68:ec:7e:64:66:f6:df:d7: 2a:71:5b:96:66:5b:ff:fe:52:01:e7:f6:c2:82:ca:60:c1:4d: ef:4f:4b:d8:41:8b:f2:42:26:99:8c:04:a9:1d:c9:62:65:e5: 88:0b:cb:48:16:db:7b:81:cf:41:93:c5:97:68:62:4f:f1:d2: 3c:c1:75:6b:92:85:cc:20:c9:5e:b7:57:07:69:b6:29:16:d3: cc:05:ec:32:d7:c4:c5:9f:c1:ee:d8:8c:6e:e9:ee:ce:58:e2: 07:25:d7:0d:ad:ff:ae:0d:a1:59:36:d4:30:37:b1:f6:80:74: c1:64:72:35:32:c1:88:c6:ef:8a:77:93:9d:a4:43:5a:2a:6e: e3:34:30:3d:83:6e:bd:fe:ec:ed:e6:bb:df:e3:45:bf:42:05: cc:fe:f0:c4:33:7f:47:13:e5:f6:09:7a:d6:69:cc:20:e4:2a: 19:44:f1:38:d3:c9:c0:74:63:45:1f:18:2a:ec:cc:2c:35:23: 12:a5:87:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79ckladxAmH89IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjcwZWM4MTktOWJiNC00NmQ1LWEyYWUtMTQzN2Y1ZmVlOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WOltjmLv2IhF6R1C9mORdUPkFiC2S9ME9K5 pMYpvxu9xeD0yGK8uE6BmpNtfu5EEa8rlFl441021xWt9ngGoFQTpEJR00hB771L MVcCswurJVfYUL3Vm3DDtxOTIApMEiL5UB4ZTBOPN6Gf79jrlU6vFeTKrRVZ48xv MEAKH/jdU1lQ13fXtnbU3Ykpl9KOiDOg5clWERuvnMXcGUWfGNvPxKfbzhfN2XuX x9vvAVNvkeTZ45GG/92N0Akt50KVIOc+aVwy6oJA1OgoOpOwmt2z7MJZxQENRXiI LlKpr1tCVXD/UlFu9lLP6e9VCNl4TDnLvlLhNBHNptyV1J19NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY/pupVMFiUS4s5K+tvQJ9/80B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWI2NWUyMDYtODQ5Yy0z Y2YxLWE2ZTAtNzI2NTExNGI3YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsMuOSBnO3sVeFCeX+XhZIGB9XEHrpRFkINfcBMeUc7xRsACaU/vhd4 VMN8T3HbDJER82DTi8VIGoydcaAH7+No7H5kZvbf1ypxW5ZmW//+UgHn9sKCymDB Te9PS9hBi/JCJpmMBKkdyWJl5YgLy0gW23uBz0GTxZdoYk/x0jzBdWuShcwgyV63 VwdptikW08wF7DLXxMWfwe7YjG7p7s5Y4gcl1w2t/64NoVk21DA3sfaAdMFkcjUy wYjG74p3k52kQ1oqbuM0MD2Dbr3+7O3mu9/jRb9CBcz+8MQzf0cT5fYJetZpzCDk KhlE8TjTycB0Y0UfGCrszCw1IxKlh+I= -----END CERTIFICATE-----Generated at Fri Jun 6 16:42:53 2025 by rpki-client