$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/767a5232-1c2f-3adb-bc6d-e444545df0fa.roa File: 767a5232-1c2f-3adb-bc6d-e444545df0fa.roa (raw, json) Hash identifier: ydud6PoY8hjPYgLalivSd0ncx1hYs+FEHypifMVmdUQ= Subject key identifier: 10:4C:D3:AB:98:1D:F9:BD:0E:84:0E:B6:D7:7B:50:56:A7:22:1F:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BB43ED55D3F7BE117AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/767a5232-1c2f-3adb-bc6d-e444545df0fa.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.16.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bb:43:ed:55:d3:f7:be:11:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=22c79094-3025-40fa-a87d-0a6cb7d80b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:46:b6:85:e7:b6:f7:48:ce:4d:15:2d:f7: 4d:28:78:7e:0b:f9:1b:63:82:c9:d6:96:11:eb:1a: 65:7e:44:31:e3:78:df:c7:44:5b:e4:9d:2d:0a:d4: e7:40:a0:b8:a8:a8:94:dc:4f:7a:ec:97:96:13:b8: f9:7e:d1:f2:1c:47:60:3a:c0:5e:ad:6d:16:04:6f: 30:15:c0:94:bf:87:a4:36:65:4b:7b:a1:41:a6:0e: 0d:c5:f8:1e:80:17:0b:ab:31:15:c9:7c:16:10:79: d3:18:e5:56:a3:4a:4c:0e:69:8f:de:4c:9d:02:cf: eb:89:57:5f:bd:32:07:6b:ab:e5:e3:93:bb:e0:0f: a3:8a:ce:ca:21:88:aa:35:6e:62:7a:2f:da:d8:77: b2:85:e8:76:42:d0:1e:ea:74:fb:ff:75:cc:2c:08: be:29:14:07:06:60:33:9c:00:79:97:bc:35:54:69: 3c:ca:a2:c3:88:6e:8c:f1:7d:41:07:11:0a:de:48: c4:b3:0f:f8:85:06:71:6b:6c:98:5c:5b:0d:bc:a9: 69:82:1f:9e:09:ab:8c:30:c2:b6:5b:c2:15:f0:7a: 80:44:f9:b6:fc:9d:11:ca:06:ad:68:23:2f:c9:f9: 4c:8e:1c:b3:09:ba:01:95:1a:e9:be:25:f9:c7:78: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:D3:AB:98:1D:F9:BD:0E:84:0E:B6:D7:7B:50:56:A7:22:1F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/767a5232-1c2f-3adb-bc6d-e444545df0fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:38:83:51:ad:c8:e0:91:37:a3:aa:29:12:2d:83:bb:37:a8: 5f:11:ca:62:8d:85:6a:9a:b7:c2:49:a4:80:34:f0:d4:11:16: 9e:bd:b1:bf:21:33:5f:6e:57:39:74:68:0a:6b:8f:62:0a:f1: 00:c0:8d:2e:e6:e4:9b:cb:1f:95:66:60:f2:b5:ec:1b:57:e5: b2:00:d4:f7:60:47:82:83:29:bf:70:67:8f:9c:c5:95:3e:aa: 1a:48:1f:1f:73:25:29:2e:09:af:e8:e3:ec:9c:ad:83:f0:54: d7:7d:0b:1b:81:bd:d7:63:82:e0:25:1a:3a:e3:96:a7:87:e1: 44:71:6a:25:18:8d:9f:4b:ab:5b:12:75:e7:0e:5e:7c:d9:3d: ed:6a:da:64:98:21:e9:dd:be:77:4f:5e:cd:92:60:25:e7:69: 5c:b0:1e:ef:78:78:6b:16:f6:0d:7e:b2:c7:5c:c0:ed:10:09: ac:30:3e:c1:47:f5:74:c5:02:46:2d:37:01:b9:3a:3e:0b:ae: 6c:c4:b6:fc:ec:65:5e:3d:44:f5:f6:05:2b:1a:a5:81:99:bc: ab:f1:49:26:46:b0:a4:a2:a1:15:71:10:8c:30:c6:60:ba:06: 3e:2a:6a:76:8b:0b:ff:96:aa:a6:3e:28:e4:69:c4:1e:bd:c1: 88:ad:0a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrtD7VXT974ResAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MjJjNzkwOTQtMzAyNS00MGZhLWE4N2QtMGE2Y2I3ZDgwYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1xGtoXntvdIzk0VLfdNKHh+C/kbY4LJ1pYR 6xplfkQx43jfx0Rb5J0tCtTnQKC4qKiU3E967JeWE7j5ftHyHEdgOsBerW0WBG8w FcCUv4ekNmVLe6FBpg4NxfgegBcLqzEVyXwWEHnTGOVWo0pMDmmP3kydAs/riVdf vTIHa6vl45O74A+jis7KIYiqNW5iei/a2Heyheh2QtAe6nT7/3XMLAi+KRQHBmAz nAB5l7w1VGk8yqLDiG6M8X1BBxEK3kjEsw/4hQZxa2yYXFsNvKlpgh+eCauMMMK2 W8IV8HqARPm2/J0RygataCMvyflMjhyzCboBlRrpviX5x3g0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBM06uYHfm9DoQOttd7UFanIh9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzY3YTUyMzItMWMyZi0z YWRiLWJjNmQtZTQ0NDU0NWRmMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY4g1GtyOCRN6OqKRItg7s3qF8RymKNhWqat8JJpIA08NQRFp69sb8h M19uVzl0aAprj2IK8QDAjS7m5JvLH5VmYPK17BtX5bIA1PdgR4KDKb9wZ4+cxZU+ qhpIHx9zJSkuCa/o4+ycrYPwVNd9CxuBvddjguAlGjrjlqeH4URxaiUYjZ9Lq1sS decOXnzZPe1q2mSYIendvndPXs2SYCXnaVywHu94eGsW9g1+ssdcwO0QCawwPsFH 9XTFAkYtNwG5Oj4LrmzEtvzsZV49RPX2BSsapYGZvKvxSSZGsKSioRVxEIwwxmC6 Bj4qanaLC/+WqqY+KORpxB69wYitCrI= -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:31 2025 by rpki-client