$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa File: 689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa (raw, json) Hash identifier: 84NUjw5kbsrBPa0L9ffNjq1ALzjW4Hcmz0SPDcdhV2c= Subject key identifier: 69:52:2C:E7:9A:E6:87:1C:49:FD:C9:FB:BB:50:48:C6:CA:39:C1:69 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC7C09A188AB8F3294800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.17.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c7:c0:9a:18:8a:b8:f3:29:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=a21aef94-dc36-4ef1-8c12-1a9140c5d1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:49:83:66:ed:8b:ec:e7:fa:2e:08:6b:fe: d3:c7:34:b7:0d:6b:1d:d6:7f:63:e1:24:f4:83:04: 66:3a:c3:a8:03:49:46:6c:e6:26:b5:b2:af:98:cd: 71:c0:e0:21:38:95:2d:15:83:c1:88:5a:fa:2c:e2: ee:18:f6:8a:21:4e:45:82:7d:1d:3e:40:fa:6a:fa: 43:92:11:d2:1d:a2:bc:4e:3f:9a:7b:ca:58:f1:bc: c1:25:56:77:c1:31:b7:a5:a6:d2:f2:50:4e:67:27: e9:2c:cc:4c:55:d9:fb:cb:24:9a:60:bd:ee:12:82: 91:bf:5e:37:b8:dd:fd:c7:9e:e4:d2:f9:cd:fb:89: 1b:5a:73:66:80:cd:71:2e:91:28:db:07:b3:62:21: ed:3f:35:51:7f:df:ba:90:4e:52:48:db:99:56:43: 41:b1:64:6b:78:67:d3:76:cf:43:58:37:4e:10:12: 70:8b:4f:a6:e3:38:09:ae:7f:42:f3:d6:2b:57:19: 5f:4a:a1:4c:95:31:8d:60:5d:27:eb:9e:de:fd:e2: b5:f4:c9:3d:5a:8d:b4:f3:9c:0d:f7:69:ab:fc:be: c3:ad:72:2a:8d:49:13:c6:99:bd:64:93:af:07:d2: 5f:8f:d2:f3:f2:b8:b6:81:f5:aa:6f:a3:49:cb:49: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:52:2C:E7:9A:E6:87:1C:49:FD:C9:FB:BB:50:48:C6:CA:39:C1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/689ea0e3-dc9d-3a2d-9bc0-2bff35dfdc4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fe:70:12:b7:ea:bb:e4:d6:66:77:09:d9:63:73:44:08:8b: 35:7d:99:ad:43:3c:cb:b8:59:58:5c:b6:e6:b8:e2:0e:4f:3b: 63:a0:3f:82:13:a5:0c:4d:74:75:eb:d2:b6:c2:79:d5:9d:7a: 34:d4:b1:cd:cd:32:70:f4:7c:ab:c2:4f:50:92:2e:fd:a1:0a: 81:80:ba:a2:94:4f:61:0e:00:33:16:07:fd:67:65:ba:be:2c: c5:a8:03:a0:18:60:66:2b:d3:26:db:70:6a:42:b7:57:16:1a: df:d9:f3:84:78:b2:38:e5:8f:c6:a3:90:0f:0c:f0:88:ea:8d: df:4d:c0:66:90:b5:21:fd:0b:67:44:3d:fe:18:b0:0a:88:97: a5:47:fe:e1:c8:c8:94:8f:46:ef:b5:e5:f5:06:c7:83:e6:86: 1f:fc:31:60:69:a4:09:99:fb:88:70:73:5c:17:11:d6:29:74: 14:e2:af:93:28:72:0c:17:2f:b6:4e:09:73:07:e6:f0:d0:a0: c4:b8:0a:6b:df:1c:e4:6e:c1:47:59:12:28:a5:14:a5:63:30: 76:7f:49:72:21:23:12:a0:39:7b:0d:ca:99:f7:2c:b8:30:3d: f4:a4:7e:9d:65:b6:a3:11:51:26:ec:9d:e4:55:e3:be:0d:a7: f5:8a:e9:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78fAmhiKuPMpSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YTIxYWVmOTQtZGMzNi00ZWYxLThjMTItMWE5MTQwYzVkMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBdJg2bti+zn+i4Ia/7TxzS3DWsd1n9j4ST0 gwRmOsOoA0lGbOYmtbKvmM1xwOAhOJUtFYPBiFr6LOLuGPaKIU5Fgn0dPkD6avpD khHSHaK8Tj+ae8pY8bzBJVZ3wTG3pabS8lBOZyfpLMxMVdn7yySaYL3uEoKRv143 uN39x57k0vnN+4kbWnNmgM1xLpEo2wezYiHtPzVRf9+6kE5SSNuZVkNBsWRreGfT ds9DWDdOEBJwi0+m4zgJrn9C89YrVxlfSqFMlTGNYF0n657e/eK19Mk9Wo2085wN 92mr/L7DrXIqjUkTxpm9ZJOvB9Jfj9Lz8ri2gfWqb6NJy0kznwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlSLOea5occSf3J+7tQSMbKOcFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjg5ZWEwZTMtZGM5ZC0z YTJkLTliYzAtMmJmZjM1ZGZkYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/+cBK36rvk1mZ3Cdljc0QIizV9ma1DPMu4WVhctua44g5PO2OgP4IT pQxNdHXr0rbCedWdejTUsc3NMnD0fKvCT1CSLv2hCoGAuqKUT2EOADMWB/1nZbq+ LMWoA6AYYGYr0ybbcGpCt1cWGt/Z84R4sjjlj8ajkA8M8Ijqjd9NwGaQtSH9C2dE Pf4YsAqIl6VH/uHIyJSPRu+15fUGx4Pmhh/8MWBppAmZ+4hwc1wXEdYpdBTir5Mo cgwXL7ZOCXMH5vDQoMS4CmvfHORuwUdZEiilFKVjMHZ/SXIhIxKgOXsNypn3LLgw PfSkfp1ltqMRUSbsneRV474Np/WK6fc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:26 2025 by rpki-client