$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c875935-271a-372b-a486-a80abdac472b.roa File: 6c875935-271a-372b-a486-a80abdac472b.roa (raw, json) Hash identifier: Q66pGrCPFBQKCJy+qNBJGdgY8jKcwabsR+/U0Pd1to8= Subject key identifier: F2:76:73:F7:FE:EE:CB:9F:B8:80:8D:97:93:1E:9B:A7:2B:E9:59:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C684A7A84CC4F7E62C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c875935-271a-372b-a486-a80abdac472b.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.23.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c6:84:a7:a8:4c:c4:f7:e6:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=96098f63-b301-454b-8e3a-903ee8638642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:89:92:77:74:c1:36:0c:f9:fa:fc:73:5d: 66:60:18:c7:00:fc:c9:fd:e5:99:7c:a7:b2:16:e3: 57:16:71:a0:5f:3d:bb:11:51:b8:aa:cf:39:b0:28: b5:02:b8:d4:85:26:dd:b2:4a:d1:2b:e4:70:85:0f: e7:2d:ee:fa:21:28:31:d5:eb:25:b5:8b:a4:70:7c: 65:8c:e1:b5:1d:24:7b:72:e6:4f:fa:91:78:1d:18: ae:63:c9:e2:80:da:c4:38:50:fd:da:83:45:0f:22: 99:ad:b2:83:3f:46:31:cf:44:eb:dc:c6:b9:6b:45: 2d:b0:59:f5:9c:08:67:a2:46:15:a9:04:ad:89:c2: fb:76:cd:69:cf:dc:60:63:d2:a9:54:60:0a:26:9b: 2c:f4:99:a8:cb:41:08:b1:c2:79:f4:7a:e6:ed:4b: 9f:9a:de:a2:1c:da:6d:6b:55:e1:fa:66:4e:90:f0: b5:be:85:b1:74:f4:a5:dd:72:ad:2c:93:c6:94:35: 11:73:f3:70:32:9b:94:9e:07:2e:ce:24:6d:a6:cd: e8:38:31:1a:38:b0:e6:fb:7a:d6:3d:b8:1b:a1:bd: 7d:83:f8:0c:2c:4f:03:4b:24:b8:b2:9a:d1:51:48: 98:bc:95:b3:4f:33:97:72:95:82:38:0a:c7:8f:42: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:76:73:F7:FE:EE:CB:9F:B8:80:8D:97:93:1E:9B:A7:2B:E9:59:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c875935-271a-372b-a486-a80abdac472b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e5:c9:f3:d3:ef:65:a9:c6:bc:7e:9b:33:b5:ea:01:65:c9: d3:02:cd:86:f7:87:22:87:53:d0:4f:66:c1:bb:b2:6d:a5:09: 7e:60:59:e4:70:c7:41:54:bb:42:d7:76:88:ec:ae:6c:a2:22: de:d7:cb:a6:d9:54:74:2a:36:98:b6:33:35:bd:1f:2e:99:db: a3:32:5f:4c:f9:cc:fc:53:93:c0:2d:39:91:84:20:5a:dd:26: 42:ea:64:38:02:9b:1b:9b:77:d6:e5:b8:04:8c:f4:63:f4:1e: ec:b2:21:c5:e7:1e:67:34:1a:bb:78:3a:7a:e6:65:01:6a:8e: 01:9a:96:91:e8:30:7d:c3:49:a6:60:ae:ba:c3:fc:1b:cf:29: f1:ac:81:90:86:b9:8c:6a:22:5b:84:d9:4e:fb:e0:be:9f:76: b8:ef:6c:e2:72:fd:3d:9a:1f:ec:42:ac:30:60:ae:4d:10:ad: 45:ac:a4:c7:ac:67:0b:c8:05:60:85:34:c1:88:d4:7b:e0:b7: c7:50:ef:29:6d:d1:68:d1:7a:4a:73:f5:c9:f9:e6:8b:92:22: 27:c7:f2:4b:2b:2b:29:b9:69:01:ff:51:01:d2:97:ed:33:ed: 47:1f:57:75:97:6e:c9:e4:fa:73:3a:05:7a:67:7b:93:20:a6: 7f:51:dd:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsaEp6hMxPfmLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OTYwOThmNjMtYjMwMS00NTRiLThlM2EtOTAzZWU4NjM4NjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0CJknd0wTYM+fr8c11mYBjHAPzJ/eWZfKey FuNXFnGgXz27EVG4qs85sCi1ArjUhSbdskrRK+RwhQ/nLe76ISgx1esltYukcHxl jOG1HSR7cuZP+pF4HRiuY8nigNrEOFD92oNFDyKZrbKDP0Yxz0Tr3Ma5a0UtsFn1 nAhnokYVqQSticL7ds1pz9xgY9KpVGAKJpss9Jmoy0EIscJ59Hrm7Uufmt6iHNpt a1Xh+mZOkPC1voWxdPSl3XKtLJPGlDURc/NwMpuUngcuziRtps3oODEaOLDm+3rW Pbgbob19g/gMLE8DSyS4sprRUUiYvJWzTzOXcpWCOArHj0J22QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJ2c/f+7sufuICNl5Mem6cr6VkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmM4NzU5MzUtMjcxYS0z NzJiLWE0ODYtYTgwYWJkYWM0NzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaBfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvlyfPT72Wpxrx+mzO16gFlydMCzYb3hyKHU9BPZsG7sm2lCX5gWeRw x0FUu0LXdojsrmyiIt7Xy6bZVHQqNpi2MzW9Hy6Z26MyX0z5zPxTk8AtOZGEIFrd JkLqZDgCmxubd9bluASM9GP0HuyyIcXnHmc0Grt4OnrmZQFqjgGalpHoMH3DSaZg rrrD/BvPKfGsgZCGuYxqIluE2U774L6fdrjvbOJy/T2aH+xCrDBgrk0QrUWspMes ZwvIBWCFNMGI1Hvgt8dQ7ylt0WjRekpz9cn55ouSIifH8ksrKym5aQH/UQHSl+0z 7UcfV3WXbsnk+nM6BXpne5Mgpn9R3SQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:44:07 2025 by rpki-client