$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa File: 7aa385db-0ce4-3f6e-889e-18919de224f6.roa (raw, json) Hash identifier: RSg5DAS0CQWqYZ7eMWcOOa3OJmFd6qKJOFMgUxOroIU= Subject key identifier: 4C:97:6E:DB:4A:6A:D4:59:03:F5:DF:9D:11:E0:FC:B8:61:26:B2:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C589207FF861A7F9D480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:89:20:7f:f8:61:a7:f9:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=95b0a11e-8a73-4e65-bf55-604ac96a5070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:9f:6a:7a:48:88:dc:15:4a:7a:89:0d:08: d8:cc:01:22:c6:83:81:b4:d0:02:d0:6f:23:0c:2c: d7:4e:75:d8:69:af:2d:b6:0b:ea:bf:55:8e:56:bd: 70:b1:34:04:28:11:7f:4c:9d:f3:ee:69:86:8b:de: 3a:09:45:97:61:cd:00:d3:0b:d0:75:8e:fc:76:7b: 6a:b5:52:3d:c5:f8:32:3b:66:92:6b:34:cd:b6:58: a5:33:ef:50:ca:3c:a7:49:cb:3e:72:16:db:fd:08: 0d:0a:3b:f1:1f:d2:05:4e:ba:02:56:5a:47:69:aa: c3:6a:ee:0b:3a:9d:a8:d5:1b:0f:0b:52:c3:a5:9d: d9:e8:27:4d:c4:a1:e9:10:8d:9d:73:64:8b:24:cf: c4:76:03:f4:bd:0c:19:c9:d4:73:3f:0d:51:93:5e: cb:61:7f:7f:b4:cb:74:c1:18:6e:4c:89:80:43:7f: 7e:b7:e7:e9:c2:7d:03:b4:91:9a:7c:62:75:c6:5e: ed:12:7a:22:bf:b9:ac:86:fb:02:cb:fd:c9:6b:3f: 35:20:26:4c:5e:3f:08:f6:bf:4c:6e:55:96:fe:dc: c0:ee:4a:60:0d:e3:7d:a7:60:51:ee:0e:34:7b:0f: 14:37:9d:6a:c1:14:fb:a1:e6:5b:92:e7:89:ad:db: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:97:6E:DB:4A:6A:D4:59:03:F5:DF:9D:11:E0:FC:B8:61:26:B2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fb:b4:1f:d7:30:d2:f5:2d:7b:dc:3b:de:7c:ed:4e:59:3f: 09:c3:71:19:2e:49:98:8c:fa:c2:87:41:1b:4a:11:95:8e:aa: 41:31:ba:1d:31:9d:5b:6e:6c:e4:d5:cf:e1:1d:f9:e1:ae:97: f3:8a:73:ae:4e:e3:95:1d:91:1e:3a:44:2b:a9:9e:93:ec:aa: fc:10:6b:61:d5:14:f7:25:8c:d5:39:07:94:2d:39:1c:30:db: 58:7e:11:43:d1:d8:33:4a:3a:36:54:df:67:9a:7e:ef:3a:9c: c1:fa:60:7e:12:4f:13:2c:84:7a:ae:91:7f:ac:3c:c8:e4:e1: 05:1b:5e:2a:fd:90:49:5f:15:8f:78:f2:77:cf:ea:d0:8c:a6: 68:a5:87:9b:7a:67:ea:a2:03:f5:b5:41:17:89:4a:67:35:03: ae:cb:50:bd:5f:87:7f:51:1d:5a:30:32:c6:3e:ec:bf:5e:87: 86:7c:90:f8:ea:4e:37:b9:87:26:8b:4e:bc:bf:e1:c4:2c:3a: bf:9a:a5:06:ed:1d:59:c2:98:c2:fa:f5:f9:79:96:6b:f7:e4: f3:53:20:84:38:51:f0:af:65:cd:98:0e:b7:94:63:6d:1f:d3: 46:c2:03:d1:58:de:18:8a:52:f7:ba:40:c8:f5:6e:96:0b:7a: 7b:7f:f6:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsWJIH/4Yaf51IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OTViMGExMWUtOGE3My00ZTY1LWJmNTUtNjA0YWM5NmE1MDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+2fanpIiNwVSnqJDQjYzAEixoOBtNAC0G8j DCzXTnXYaa8ttgvqv1WOVr1wsTQEKBF/TJ3z7mmGi946CUWXYc0A0wvQdY78dntq tVI9xfgyO2aSazTNtlilM+9QyjynScs+chbb/QgNCjvxH9IFTroCVlpHaarDau4L Op2o1RsPC1LDpZ3Z6CdNxKHpEI2dc2SLJM/EdgP0vQwZydRzPw1Rk17LYX9/tMt0 wRhuTImAQ39+t+fpwn0DtJGafGJ1xl7tEnoiv7mshvsCy/3Jaz81ICZMXj8I9r9M blWW/tzA7kpgDeN9p2BR7g40ew8UN51qwRT7oeZbkueJrdvmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyXbttKatRZA/XfnRHg/LhhJrLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2FhMzg1ZGItMGNlNC0z ZjZlLTg4OWUtMTg5MTlkZTIyNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL7tB/XMNL1LXvcO9587U5ZPwnDcRkuSZiM+sKHQRtKEZWOqkExuh0x nVtubOTVz+Ed+eGul/OKc65O45UdkR46RCupnpPsqvwQa2HVFPcljNU5B5QtORww 21h+EUPR2DNKOjZU32eafu86nMH6YH4STxMshHqukX+sPMjk4QUbXir9kElfFY94 8nfP6tCMpmilh5t6Z+qiA/W1QReJSmc1A67LUL1fh39RHVowMsY+7L9eh4Z8kPjq Tje5hyaLTry/4cQsOr+apQbtHVnCmML69fl5lmv35PNTIIQ4UfCvZc2YDreUY20f 00bCA9FY3hiKUve6QMj1bpYLent/9q0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:59 2025 by rpki-client