$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa File: 9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa (raw, json) Hash identifier: dFTX2qdqcaaV+1i9e+IFlqaHr7IawemGloGm/JNJX9c= Subject key identifier: 5E:8B:F0:FD:2F:F8:5F:59:22:27:64:42:D5:6C:DB:57:79:D7:1D:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCB8FD9A77ED4BE64FF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.20.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cb:8f:d9:a7:7e:d4:be:64:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=96c9bad4-1c4f-4ad5-bedf-80cdd7e19074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:6d:70:cb:3d:7e:f2:73:29:4b:9f:92:6e: 80:d7:a6:72:b7:28:9c:29:93:a7:ae:59:34:ab:90: ef:ca:b2:ea:a9:7e:4c:6b:08:c7:7b:82:d0:be:be: 50:a5:58:25:12:a4:65:f1:57:54:4d:83:60:dd:27: 3c:b7:2e:f6:4d:f6:c4:99:eb:e6:ed:4a:ea:32:39: 2a:5a:c4:02:c2:67:6a:f8:0b:c0:cf:77:dc:0d:14: 12:04:ba:2b:d2:86:c3:c5:05:9a:40:ab:5a:be:ac: 2d:93:b3:32:ff:a9:81:6e:72:fc:c1:e8:15:74:f6: 65:9f:99:54:97:ad:6d:bc:fe:2e:8c:97:b8:70:55: 74:b6:4e:f3:11:42:2d:60:54:dc:e8:c2:43:92:22: 6f:a0:bb:c6:5f:79:d9:5c:b6:ad:a9:fd:38:d6:32: cc:33:93:88:4f:4d:14:47:35:a8:44:89:f2:8a:18: 34:70:ed:4c:e8:2a:38:88:43:66:b8:2e:7d:fe:ce: 85:61:a8:b4:b8:f0:9c:6c:70:51:96:63:5a:0e:f9: 68:16:05:f2:61:f8:f1:94:b4:d6:d3:58:3b:22:09: 15:ef:87:cc:7b:d3:13:4b:2a:96:b4:97:03:83:59: 7d:05:4c:58:b6:56:8d:c7:5c:16:a2:ae:81:5e:94: 10:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:F0:FD:2F:F8:5F:59:22:27:64:42:D5:6C:DB:57:79:D7:1D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:b8:0c:47:e9:b1:36:07:5a:03:c5:10:d8:30:88:49:fa:5a: 70:cd:96:a5:e2:f0:77:70:e3:80:2b:54:33:ba:18:7f:c8:6a: 28:06:be:6e:26:4e:36:ac:16:ae:51:25:65:91:06:d1:d7:74: 34:54:90:a6:44:0b:d5:90:cc:93:13:dd:2d:7b:41:0f:68:b8: 34:e2:09:02:88:c1:aa:84:df:ad:89:55:eb:10:b5:22:97:61: 14:f7:48:90:24:99:68:51:27:c7:ec:f2:ad:d9:dd:23:43:bd: 29:c3:06:b9:ae:54:95:94:4e:5c:60:d1:d2:b1:de:8b:17:3f: 00:ce:ab:5d:46:96:1e:90:7e:e0:f8:a0:e6:61:49:7c:5f:fb: 9d:4a:77:a5:ca:08:7e:d7:df:4c:0c:c7:7a:b1:76:af:b9:0a: 3a:2f:7a:b2:de:ac:07:42:2c:03:5a:87:fb:46:79:d2:8b:20: ab:86:eb:61:5c:30:0b:52:46:44:d8:52:3e:b7:a8:0f:ee:ee: 14:ad:17:65:ff:63:a4:f5:a5:21:44:6c:84:a2:a9:a4:6f:4e: 5f:e0:48:39:5d:6d:48:92:0d:a7:6d:b2:eb:4a:c5:5b:54:47: ae:49:84:82:3d:b9:9d:e8:26:a1:ac:7e:b0:e5:f7:ac:7f:37: 22:d1:26:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78uP2ad+1L5k/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTZjOWJhZDQtMWM0Zi00YWQ1LWJlZGYtODBjZGQ3ZTE5MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1NtcMs9fvJzKUufkm6A16ZytyicKZOnrlk0 q5DvyrLqqX5MawjHe4LQvr5QpVglEqRl8VdUTYNg3Sc8ty72TfbEmevm7UrqMjkq WsQCwmdq+AvAz3fcDRQSBLor0obDxQWaQKtavqwtk7My/6mBbnL8wegVdPZln5lU l61tvP4ujJe4cFV0tk7zEUItYFTc6MJDkiJvoLvGX3nZXLatqf041jLMM5OIT00U RzWoRInyihg0cO1M6Co4iENmuC59/s6FYai0uPCcbHBRlmNaDvloFgXyYfjxlLTW 01g7IgkV74fMe9MTSyqWtJcDg1l9BUxYtlaNx1wWoq6BXpQQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6L8P0v+F9ZIidkQtVs21d51x3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMzZDBiNjctMzdkZi0z Zjc5LWE1YWItYWViYTcxMjdkYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL24DEfpsTYHWgPFENgwiEn6WnDNlqXi8Hdw44ArVDO6GH/IaigGvm4m TjasFq5RJWWRBtHXdDRUkKZEC9WQzJMT3S17QQ9ouDTiCQKIwaqE362JVesQtSKX YRT3SJAkmWhRJ8fs8q3Z3SNDvSnDBrmuVJWUTlxg0dKx3osXPwDOq11Glh6QfuD4 oOZhSXxf+51Kd6XKCH7X30wMx3qxdq+5CjoverLerAdCLANah/tGedKLIKuG62Fc MAtSRkTYUj63qA/u7hStF2X/Y6T1pSFEbISiqaRvTl/gSDldbUiSDadtsutKxVtU R65JhII9uZ3oJqGsfrDl96x/NyLRJgc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:32 2025 by rpki-client