$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6c9604-e214-3353-88d1-c281906ebe1a.roa File: 8f6c9604-e214-3353-88d1-c281906ebe1a.roa (raw, json) Hash identifier: jTXHN7cd1Hho+feSkEsU+54NNYPiQ2rDvfCQ+UjKnZU= Subject key identifier: D9:CA:60:35:A6:EA:58:00:80:DB:F6:56:29:5C:AA:B0:42:19:A8:8D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849126F85E0CA3E536816617F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6c9604-e214-3353-88d1-c281906ebe1a.roa Signing time: Tue 04 Mar 2025 03:23:05 +0000 ROA not before: Tue 04 Mar 2025 03:23:05 +0000 ROA not after: Mon 02 Jun 2025 02:23:05 +0000 asID: 13335 IP address blocks: 104.23.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:6f:85:e0:ca:3e:53:68:16:61:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 4 03:23:05 2025 GMT Not After : Jun 2 02:23:05 2025 GMT Subject: CN=6ca9ca65-c6da-4b35-8a4f-fc1fc1006280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:ab:69:5d:72:50:00:c3:1f:4a:5a:6d:aa: ca:6e:7e:92:0d:eb:01:4a:5d:07:2c:6b:75:30:5e: 37:0b:05:8c:93:b9:bf:b2:e9:c7:21:fd:7b:10:34: d3:8c:d4:9d:11:8d:95:09:81:9b:06:52:d4:e9:b7: 97:25:59:1f:1d:75:fe:4f:67:21:1c:f4:e2:58:bf: ea:24:c1:2d:89:e5:93:64:17:05:94:e9:28:ba:a3: e1:87:88:6e:33:ff:9a:f1:08:e8:31:d7:8c:15:21: 8c:27:a4:26:6b:8b:ca:ef:3d:36:80:ca:7f:d1:5b: 9b:15:c8:d7:8a:0d:92:42:75:d4:a0:83:16:65:ee: 15:74:b1:4f:6d:fb:ee:65:4a:e0:c4:9e:6d:dd:fb: 37:90:1b:08:cb:3c:e7:33:d5:9b:78:be:22:3f:70: b4:54:d2:5f:cd:4a:36:b2:bf:62:eb:fa:47:c5:48: 19:8e:de:66:5b:60:26:b5:7f:ab:38:e7:fa:aa:3e: e1:55:d1:d0:32:d2:14:2f:88:c1:73:ad:61:1f:b0: e2:ae:15:47:c4:7a:33:82:0b:42:0b:63:61:39:1e: 31:c7:56:d7:77:f5:c5:e7:6c:b1:07:fa:0f:8c:0f: c7:eb:56:ac:30:70:99:cb:56:ec:06:8e:0d:3d:4c: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:60:35:A6:EA:58:00:80:DB:F6:56:29:5C:AA:B0:42:19:A8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6c9604-e214-3353-88d1-c281906ebe1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5a:0f:db:41:de:e8:7d:86:0b:9c:1f:12:ee:0b:14:4d:90: 20:43:de:86:67:07:fc:fb:a7:91:0b:17:83:21:ab:19:8c:30: 47:aa:db:81:4c:ae:04:43:6c:7b:27:b9:d7:ff:0f:44:f3:8c: 05:14:87:f0:78:30:13:24:08:6d:b1:45:26:9b:49:ab:52:3f: 68:79:85:76:1d:8a:ff:41:a0:6d:8c:9f:ea:9b:57:7b:1b:c9: ab:e2:3f:36:2d:11:00:de:a7:2f:c2:ef:82:28:a8:6b:23:18: 09:c9:0d:7a:7e:44:ce:98:7e:92:82:9b:34:73:04:a3:d2:e4: 3a:f1:a4:be:b8:07:a8:c5:db:21:03:9e:32:80:30:48:59:80: d2:5a:77:23:47:3e:2f:b8:2c:cc:6f:c9:cc:1d:1f:05:9d:c7: 18:7d:b3:a1:fc:ae:58:1d:f1:7d:40:58:39:0c:6a:26:4d:86: 26:18:58:55:3c:ca:e8:b9:65:72:bc:1b:b9:a4:bc:d1:6a:ce: 0b:36:6a:bd:92:d7:8a:8e:3e:c0:e5:34:96:94:ed:fe:fa:d6: 38:9c:a3:43:7d:1b:cd:49:7e:74:43:81:fa:63:3e:51:fe:42: 34:99:20:a3:60:72:ca:d5:60:d6:9e:41:85:f9:36:11:3b:2f: 01:8c:33:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSb4Xgyj5TaBZhf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNDAzMjMwNVoXDTI1MDYwMjAyMjMwNVowLzEtMCsGA1UEAxMk NmNhOWNhNjUtYzZkYS00YjM1LThhNGYtZmMxZmMxMDA2MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfuraV1yUADDH0pabarKbn6SDesBSl0HLGt1 MF43CwWMk7m/sunHIf17EDTTjNSdEY2VCYGbBlLU6beXJVkfHXX+T2chHPTiWL/q JMEtieWTZBcFlOkouqPhh4huM/+a8QjoMdeMFSGMJ6Qma4vK7z02gMp/0VubFcjX ig2SQnXUoIMWZe4VdLFPbfvuZUrgxJ5t3fs3kBsIyzznM9WbeL4iP3C0VNJfzUo2 sr9i6/pHxUgZjt5mW2AmtX+rOOf6qj7hVdHQMtIUL4jBc61hH7DirhVHxHozggtC C2NhOR4xx1bXd/XF52yxB/oPjA/H61asMHCZy1bsBo4NPUyCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnKYDWm6lgAgNv2VilcqrBCGaiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY2Yzk2MDQtZTIxNC0z MzUzLTg4ZDEtYzI4MTkwNmViZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9aD9tB3uh9hgucHxLuCxRNkCBD3oZnB/z7p5ELF4MhqxmMMEeq24FM rgRDbHsnudf/D0TzjAUUh/B4MBMkCG2xRSabSatSP2h5hXYdiv9BoG2Mn+qbV3sb yaviPzYtEQDepy/C74IoqGsjGAnJDXp+RM6YfpKCmzRzBKPS5DrxpL64B6jF2yED njKAMEhZgNJadyNHPi+4LMxvycwdHwWdxxh9s6H8rlgd8X1AWDkMaiZNhiYYWFU8 yui5ZXK8G7mkvNFqzgs2ar2S14qOPsDlNJaU7f761jico0N9G81JfnRDgfpjPlH+ QjSZIKNgcsrVYNaeQYX5NhE7LwGMM6Y= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:33 2025 by rpki-client