$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c284e8c-6592-3dea-8150-b80299a08407.roa File: 7c284e8c-6592-3dea-8150-b80299a08407.roa (raw, json) Hash identifier: TI7QggBHYP0f50EFu4R8T3RxVfxsvfI3VVHZOK18jpw= Subject key identifier: 44:C4:E8:94:2D:79:21:01:F1:C5:71:4C:0B:D9:11:6B:51:B6:53:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC7A35812C4F41197B800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c284e8c-6592-3dea-8150-b80299a08407.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.16.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c7:a3:58:12:c4:f4:11:97:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=c4e7b22c-1f09-486e-b302-4ecf93ada41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:fc:c3:db:c7:ff:56:22:cd:ec:ac:ad:85: 60:89:ee:a9:48:0f:2a:b5:2c:bb:9d:aa:94:39:93: 48:82:e7:11:55:f8:ae:35:47:94:67:8a:f2:2f:1d: 37:05:9e:47:0f:4f:e7:41:dc:8b:83:b8:be:1d:e1: f1:bc:94:f9:fb:55:d7:72:00:29:2b:99:00:1a:a5: 28:62:c4:4e:fa:0b:f8:9f:03:ff:af:03:84:47:c6: fa:3e:de:4f:45:6a:31:4c:1f:f8:b5:46:94:3a:de: 15:32:61:0b:9c:cc:eb:06:39:76:9f:5a:af:f8:8f: 97:11:51:40:0d:1c:0a:3b:3e:f1:ad:b1:b1:71:c4: d0:8c:ed:ab:d3:f5:09:5f:19:f0:16:43:d4:af:a0: 9d:3b:6d:ae:05:ea:70:a9:2a:b3:47:29:3a:a6:94: f1:c8:4a:c4:3f:f6:65:83:af:ec:59:e7:d3:57:63: 6b:07:08:38:53:d1:23:f3:78:0e:d6:0b:52:9b:e7: da:5d:94:32:97:7f:f2:2c:e0:41:31:79:29:ac:9f: bd:b2:c3:9c:94:37:f1:b8:09:65:a9:ce:bc:05:fc: b3:c4:8d:84:17:90:c1:df:69:a4:59:56:28:c5:e1: 7f:2e:c0:30:2b:f5:af:f5:68:08:6d:05:59:fa:7c: 2e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:E8:94:2D:79:21:01:F1:C5:71:4C:0B:D9:11:6B:51:B6:53:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c284e8c-6592-3dea-8150-b80299a08407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:4b:d9:89:17:7f:02:11:be:d4:57:50:8f:3f:83:e8:87:ed: 73:7c:c1:7b:ef:85:b1:d6:aa:e0:9c:d4:0d:f5:ca:99:da:1c: 25:85:3f:6e:82:c7:af:be:29:04:f2:2d:fc:92:55:a1:46:3b: 08:34:e5:da:f7:a8:3d:cd:31:9e:39:4d:6a:a8:ea:a6:9c:1b: 8a:d1:0f:6f:91:a2:c4:64:5f:67:a9:4f:40:c8:13:31:96:9b: e3:db:cd:4a:89:09:84:78:46:57:90:94:58:38:6a:b1:e1:11: 5d:fd:d5:86:28:f8:cf:e1:61:7b:df:c1:d8:a5:d6:0c:83:b0: d4:69:3f:37:9a:31:3e:00:2b:64:34:76:c7:61:4e:1b:e8:9f: 4f:5a:1a:1c:37:6c:79:8f:1b:77:25:be:d5:10:8f:62:15:a6: 91:54:03:8d:94:dc:ce:d2:47:7b:be:4f:2e:9a:b2:13:3e:0e: 27:55:cd:e4:ee:fb:58:37:49:cf:42:05:0c:1b:aa:95:98:66: 1f:ac:54:e7:03:84:70:d1:f2:03:e3:78:16:1f:10:b4:36:65: c4:32:a0:8b:83:20:63:46:82:39:4d:f2:57:5d:28:d7:97:19: 05:f8:fa:bb:29:04:e5:02:63:32:aa:7a:f6:73:37:d0:c6:3f: f9:b4:9a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78ejWBLE9BGXuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YzRlN2IyMmMtMWYwOS00ODZlLWIzMDItNGVjZjkzYWRhNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJD8w9vH/1YizeysrYVgie6pSA8qtSy7naqU OZNIgucRVfiuNUeUZ4ryLx03BZ5HD0/nQdyLg7i+HeHxvJT5+1XXcgApK5kAGqUo YsRO+gv4nwP/rwOER8b6Pt5PRWoxTB/4tUaUOt4VMmELnMzrBjl2n1qv+I+XEVFA DRwKOz7xrbGxccTQjO2r0/UJXxnwFkPUr6CdO22uBepwqSqzRyk6ppTxyErEP/Zl g6/sWefTV2NrBwg4U9Ej83gO1gtSm+faXZQyl3/yLOBBMXkprJ+9ssOclDfxuAll qc68BfyzxI2EF5DB32mkWVYoxeF/LsAwK/Wv9WgIbQVZ+nwuWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETE6JQteSEB8cVxTAvZEWtRtlNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2MyODRlOGMtNjU5Mi0z ZGVhLTgxNTAtYjgwMjk5YTA4NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxL2YkXfwIRvtRXUI8/g+iH7XN8wXvvhbHWquCc1A31ypnaHCWFP26C x6++KQTyLfySVaFGOwg05dr3qD3NMZ45TWqo6qacG4rRD2+RosRkX2epT0DIEzGW m+PbzUqJCYR4RleQlFg4arHhEV391YYo+M/hYXvfwdil1gyDsNRpPzeaMT4AK2Q0 dsdhThvon09aGhw3bHmPG3clvtUQj2IVppFUA42U3M7SR3u+Ty6ashM+DidVzeTu +1g3Sc9CBQwbqpWYZh+sVOcDhHDR8gPjeBYfELQ2ZcQyoIuDIGNGgjlN8lddKNeX GQX4+rspBOUCYzKqevZzN9DGP/m0mtk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:46 2025 by rpki-client