$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c875935-271a-372b-a486-a80abdac472b.roa File: 6c875935-271a-372b-a486-a80abdac472b.roa (raw, json) Hash identifier: Twr9WDiaeYSoCqcn8NrM0uVXiPUIDwIyHkOD8oKZ6tU= Subject key identifier: 93:29:17:61:15:2C:4B:49:45:90:66:D4:53:AB:F1:6B:94:79:DB:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD5FEBE2AAE0B2DCD1470 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c875935-271a-372b-a486-a80abdac472b.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.23.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d5:fe:be:2a:ae:0b:2d:cd:14:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=ab3be7b4-dd54-4de5-81c3-a0d7df770bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:ce:6e:56:a2:52:95:39:86:1f:7f:d9:be: 70:47:03:c5:bc:d7:d5:2c:1c:d1:63:48:1d:79:e7: fe:20:b4:14:8b:c5:a7:e8:45:3a:cb:ba:e2:61:b0: 1d:4e:4e:cb:34:5f:2c:d7:50:9b:86:68:58:21:b7: ad:a5:1a:62:d3:37:63:fa:11:e0:5f:7d:f2:0d:67: f9:21:4e:f4:d3:e6:58:01:1b:13:90:fe:3e:b1:47: 97:bf:e9:3a:04:be:5a:12:1b:b2:16:23:0e:1c:a5: de:1e:71:bf:15:21:26:f8:95:61:d9:01:3f:9a:10: 84:a7:83:41:16:78:36:ed:ec:25:24:6e:37:c1:d7: 16:a4:dd:f3:8d:db:58:f6:8a:99:86:45:66:18:d0: dd:bf:e8:8e:62:eb:50:9b:e0:bb:a5:3d:c3:5c:72: fe:63:f7:7b:34:15:1c:09:40:3d:6d:20:58:3e:d6: c5:a3:aa:ca:d8:ec:41:95:2e:79:4b:e1:e1:11:ab: fa:27:66:4b:bc:17:4f:76:61:cb:85:74:17:54:0e: e4:26:4c:21:ca:a5:67:31:77:91:cd:da:c3:b9:ce: 71:df:9e:4a:09:da:c8:74:a3:42:d3:bc:32:f3:7f: 37:af:d4:53:29:e3:20:ea:73:ad:b9:ef:f7:3f:dd: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:29:17:61:15:2C:4B:49:45:90:66:D4:53:AB:F1:6B:94:79:DB:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c875935-271a-372b-a486-a80abdac472b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:31:0f:cc:62:c6:81:ab:9e:41:3a:84:6b:f4:9b:0b:89:e8: f5:ba:9a:81:c5:63:db:60:fd:41:b1:f4:20:99:97:10:87:45: b7:2a:39:dc:21:de:81:aa:b0:0c:9c:b9:b4:cb:18:3e:d2:94: c8:22:f4:07:9e:6f:f4:10:cb:7e:55:f6:29:11:42:fd:3c:ac: 63:8c:72:84:05:3d:7a:4b:23:64:ec:ce:4c:25:1d:b3:1c:65: 1d:22:5a:ba:ac:6f:b7:62:9e:f3:cf:43:5d:5c:75:e7:7f:18: 05:1e:94:67:7e:9f:5b:09:c6:67:e6:93:fe:32:38:ef:a8:60: 17:e5:14:ff:5b:c0:81:0b:b0:3c:ab:a5:50:17:eb:83:f1:db: fb:56:be:0c:be:ea:bb:e8:7e:99:71:63:70:49:61:f7:d2:56: 44:08:83:a6:53:d5:35:d2:0c:86:57:4c:88:76:5c:0e:2b:ef: 3d:c9:55:5a:d7:b3:45:fd:59:70:49:b0:6c:df:4c:1a:ea:1e: 9b:bb:2f:b0:09:a5:87:31:a3:d5:39:aa:09:e2:5a:c7:46:14: f5:92:b3:31:89:18:47:a7:a4:a1:62:a5:a8:f4:08:91:ba:30: a9:fb:28:5c:de:72:c5:6f:7c:97:1f:41:e4:45:7e:f1:74:8b: 94:3f:83:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79X+viquCy3NFHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YWIzYmU3YjQtZGQ1NC00ZGU1LTgxYzMtYTBkN2RmNzcwYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8rOblaiUpU5hh9/2b5wRwPFvNfVLBzRY0gd eef+ILQUi8Wn6EU6y7riYbAdTk7LNF8s11CbhmhYIbetpRpi0zdj+hHgX33yDWf5 IU700+ZYARsTkP4+sUeXv+k6BL5aEhuyFiMOHKXeHnG/FSEm+JVh2QE/mhCEp4NB Fng27ewlJG43wdcWpN3zjdtY9oqZhkVmGNDdv+iOYutQm+C7pT3DXHL+Y/d7NBUc CUA9bSBYPtbFo6rK2OxBlS55S+HhEav6J2ZLvBdPdmHLhXQXVA7kJkwhyqVnMXeR zdrDuc5x355KCdrIdKNC07wy8383r9RTKeMg6nOtue/3P91ERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMpF2EVLEtJRZBm1FOr8WuUedtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmM4NzU5MzUtMjcxYS0z NzJiLWE0ODYtYTgwYWJkYWM0NzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaBfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsxD8xixoGrnkE6hGv0mwuJ6PW6moHFY9tg/UGx9CCZlxCHRbcqOdwh 3oGqsAycubTLGD7SlMgi9Aeeb/QQy35V9ikRQv08rGOMcoQFPXpLI2TszkwlHbMc ZR0iWrqsb7dinvPPQ11cded/GAUelGd+n1sJxmfmk/4yOO+oYBflFP9bwIELsDyr pVAX64Px2/tWvgy+6rvofplxY3BJYffSVkQIg6ZT1TXSDIZXTIh2XA4r7z3JVVrX s0X9WXBJsGzfTBrqHpu7L7AJpYcxo9U5qgniWsdGFPWSszGJGEenpKFipaj0CJG6 MKn7KFzecsVvfJcfQeRFfvF0i5Q/g4g= -----END CERTIFICATE-----Generated at Fri Jun 6 16:50:03 2025 by rpki-client