$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/900d1542-617e-3e39-9db7-edb12d324023.roa File: 900d1542-617e-3e39-9db7-edb12d324023.roa (raw, json) Hash identifier: hMMLRxhPfOyG3tqYNOp5YkPXn2Xre8/DK1Z575WYB1M= Subject key identifier: 44:AE:AC:6A:A5:CF:BB:D7:6A:C7:0B:13:33:77:35:41:26:31:B6:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC808B366F21F56EA4680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/900d1542-617e-3e39-9db7-edb12d324023.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.17.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c8:08:b3:66:f2:1f:56:ea:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=7664046d-bbd3-4d55-81da-d1f14025e4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:2d:c9:c6:8e:3c:41:59:80:dc:cc:5b:d9: d8:f2:c3:d4:7e:41:f2:da:13:b8:8a:fc:c8:96:ea: fc:32:f4:02:03:de:65:5d:b8:c7:0f:2b:9c:c8:f4: a0:57:62:d1:c8:e0:76:f1:ea:be:3b:1d:c3:f0:af: e0:e2:6b:ed:10:60:56:f0:ca:18:04:dc:65:2b:5c: 66:9e:f9:fa:2a:35:5d:e5:43:4a:3d:d3:8d:e1:36: 34:2d:66:e7:f1:66:37:2c:61:71:e6:99:e6:52:f0: fb:e8:f4:28:d3:19:81:a0:28:22:77:47:fe:32:13: 70:d7:6f:0a:26:ff:45:81:c4:47:9b:16:aa:fc:62: 90:82:0d:19:50:0e:05:8d:a6:69:d0:50:13:8e:ec: 28:f7:ea:3f:50:4b:32:73:bd:a8:48:26:8c:a6:ea: e2:16:a3:70:39:13:b1:13:9b:bc:cd:9f:77:ef:e3: c9:e8:b6:6b:5a:07:2c:46:a1:15:77:ab:29:e2:c3: 6b:02:03:19:75:b6:66:25:b0:7c:1c:4c:87:29:22: 50:9b:30:b1:1d:f6:e0:50:75:e7:ea:c8:60:22:69: 2e:7c:1d:45:65:d7:2e:55:b8:af:35:f8:9d:39:99: 38:2b:77:7a:d5:bc:b9:90:96:1a:52:80:b3:17:ae: 05:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AE:AC:6A:A5:CF:BB:D7:6A:C7:0B:13:33:77:35:41:26:31:B6:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/900d1542-617e-3e39-9db7-edb12d324023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7c:a8:f8:2b:6f:77:02:11:58:21:99:95:7b:3c:8e:f8:cf: 9d:f2:e9:eb:94:df:95:1b:0e:1a:76:72:23:f0:07:e7:a2:ec: 2f:55:a8:7e:98:de:04:68:2c:ef:37:a0:26:b4:8a:0b:d2:18: 94:48:06:02:ec:9a:6a:15:40:7a:49:c1:e6:3b:9b:b7:1c:9e: 2c:50:45:db:14:18:31:22:54:6e:a3:e3:cb:1a:80:2b:c7:27: 3d:cb:f9:8a:2e:83:de:36:22:bd:9e:be:43:48:95:93:69:ce: 97:43:c2:5e:d5:6c:fa:31:3f:f8:02:f2:85:b4:86:02:ed:99: 95:f6:80:d6:a3:50:d7:1e:e0:0e:e8:ad:af:8c:b5:a6:37:36: d4:9a:25:02:31:71:fc:db:60:dd:7d:0d:4d:e2:68:d5:28:2b: a2:74:c2:66:95:ca:b1:46:bc:f2:71:ae:1b:23:89:a4:34:60: 83:2a:ab:a6:e7:ac:79:7c:9e:a1:ec:da:6a:f7:32:a2:39:71: 66:ec:90:4a:68:b6:6c:c5:82:b4:af:3a:18:22:66:69:d6:7c: 70:1d:7b:72:28:65:c7:26:b3:e0:b9:ff:9c:90:5c:51:82:e4: 93:bd:e7:4e:70:0a:d6:bd:af:d9:a9:fe:f5:04:a5:cb:6e:cf: 52:86:ce:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78gIs2byH1bqRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NzY2NDA0NmQtYmJkMy00ZDU1LTgxZGEtZDFmMTQwMjVlNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD8tycaOPEFZgNzMW9nY8sPUfkHy2hO4ivzI lur8MvQCA95lXbjHDyucyPSgV2LRyOB28eq+Ox3D8K/g4mvtEGBW8MoYBNxlK1xm nvn6KjVd5UNKPdON4TY0LWbn8WY3LGFx5pnmUvD76PQo0xmBoCgid0f+MhNw128K Jv9FgcRHmxaq/GKQgg0ZUA4FjaZp0FATjuwo9+o/UEsyc72oSCaMpuriFqNwOROx E5u8zZ937+PJ6LZrWgcsRqEVd6sp4sNrAgMZdbZmJbB8HEyHKSJQmzCxHfbgUHXn 6shgImkufB1FZdcuVbivNfidOZk4K3d61by5kJYaUoCzF64FswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESurGqlz7vXascLEzN3NUEmMbZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTAwZDE1NDItNjE3ZS0z ZTM5LTlkYjctZWRiMTJkMzI0MDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp8qPgrb3cCEVghmZV7PI74z53y6euU35UbDhp2ciPwB+ei7C9VqH6Y 3gRoLO83oCa0igvSGJRIBgLsmmoVQHpJweY7m7ccnixQRdsUGDEiVG6j48sagCvH Jz3L+Youg942Ir2evkNIlZNpzpdDwl7VbPoxP/gC8oW0hgLtmZX2gNajUNce4A7o ra+MtaY3NtSaJQIxcfzbYN19DU3iaNUoK6J0wmaVyrFGvPJxrhsjiaQ0YIMqq6bn rHl8nqHs2mr3MqI5cWbskEpotmzFgrSvOhgiZmnWfHAde3IoZccms+C5/5yQXFGC 5JO9505wCta9r9mp/vUEpctuz1KGzlk= -----END CERTIFICATE-----Generated at Sat Jun 7 05:09:07 2025 by rpki-client