$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa File: 9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa (raw, json) Hash identifier: myO663Y+hsZflGuE9j5/d07QANDnh8ghu9fNEAJprxw= Subject key identifier: AD:EE:25:7B:55:EB:87:7C:DE:A1:84:BA:9B:6F:33:A3:6F:D7:86:95 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C52101809B3FD6172C82 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.20.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:21:01:80:9b:3f:d6:17:2c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=82e7ae1f-378c-48fa-8f72-61c666c312d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:ed:c1:16:dc:68:a0:c9:44:bb:14:85:90: 7b:8d:93:8b:36:e5:9b:4b:1f:e6:3e:52:aa:dd:8e: 80:c5:0a:b4:14:28:fa:26:88:7d:45:c2:91:71:0c: fe:6b:ee:19:34:cb:74:4e:24:40:5d:b4:d0:a1:32: 07:a8:c4:87:c3:4e:f3:34:bf:7a:38:18:72:0b:49: e9:95:0f:33:88:d7:a9:e6:bc:8b:51:ea:0b:72:c9: 04:69:e9:37:8b:7d:a1:59:ff:4b:b1:87:7e:d7:4b: 12:f4:c1:ea:90:40:63:84:e7:3c:44:12:75:5d:02: 63:0b:7c:09:86:72:6f:f7:4f:72:7f:44:06:39:ba: a3:92:d3:d2:4d:fd:fa:dc:53:0e:45:5e:53:3f:21: 25:78:28:a1:c7:41:25:3b:2a:0b:69:ae:c0:42:ff: 3c:19:94:c0:3b:fd:4a:28:a8:3b:9a:3a:d8:c0:70: 56:e5:cd:f2:d5:ec:b0:13:d3:78:fb:67:3f:6b:9f: ef:e1:0b:c2:8f:a8:96:20:c0:23:6a:41:4f:f1:0f: f4:cc:d9:20:a8:bb:75:f5:7a:ed:10:a2:e0:18:dc: a3:00:29:97:9f:a5:35:e6:a2:34:73:7f:73:a4:8f: 45:e8:9f:b5:60:a0:02:bd:ad:12:ce:8a:0d:2c:68: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EE:25:7B:55:EB:87:7C:DE:A1:84:BA:9B:6F:33:A3:6F:D7:86:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c3d0b67-37df-3f79-a5ab-aeba7127da38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8c:a9:38:be:dc:e5:f4:79:a7:66:30:6f:d8:53:7d:50:17: b6:59:25:ce:03:26:6e:ae:91:f6:bb:cc:12:51:b3:80:fa:c2: cf:03:e4:40:88:8a:d0:34:f6:32:28:4e:28:4e:20:39:ff:95: 29:c6:7d:76:4f:64:ed:8c:c7:07:fd:62:b3:bc:ed:63:01:37: e8:b2:f0:a0:fa:f5:50:6a:49:b4:f5:6a:45:1c:b4:ca:fd:7e: 1d:10:ac:8d:04:30:c9:06:ff:36:e0:b5:b8:2e:a6:b4:49:94: 31:99:c6:1b:37:b4:f6:4b:8f:12:47:7c:77:5c:ca:ec:f6:fc: 74:de:94:c0:dc:6e:1a:64:6e:2a:af:c2:58:f6:3f:f3:3b:0d: 58:fd:13:73:0f:2a:d1:fd:fb:c1:01:09:7a:8e:a8:57:19:18: 2f:00:ab:4e:0d:65:39:7b:3a:42:58:bc:2c:f9:5d:25:c2:a8: 12:25:93:52:34:94:22:59:df:12:1c:85:7e:8d:5d:7d:86:04: b4:a7:96:6c:04:0d:90:20:32:6f:ff:0f:de:88:53:4a:b7:b5: 36:ab:60:0d:2b:10:36:de:7c:a3:51:ec:5f:f5:39:82:41:6b: 64:7e:03:cc:8a:8e:06:28:4f:81:33:14:c6:c6:65:87:37:75: 40:5d:e3:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsUhAYCbP9YXLIIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ODJlN2FlMWYtMzc4Yy00OGZhLThmNzItNjFjNjY2YzMxMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl3twRbcaKDJRLsUhZB7jZOLNuWbSx/mPlKq 3Y6AxQq0FCj6Joh9RcKRcQz+a+4ZNMt0TiRAXbTQoTIHqMSHw07zNL96OBhyC0np lQ8ziNep5ryLUeoLcskEaek3i32hWf9LsYd+10sS9MHqkEBjhOc8RBJ1XQJjC3wJ hnJv909yf0QGObqjktPSTf363FMORV5TPyEleCihx0ElOyoLaa7AQv88GZTAO/1K KKg7mjrYwHBW5c3y1eywE9N4+2c/a5/v4QvCj6iWIMAjakFP8Q/0zNkgqLt19Xrt EKLgGNyjACmXn6U15qI0c39zpI9F6J+1YKACva0SzooNLGhEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3uJXtV64d83qGEuptvM6Nv14aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMzZDBiNjctMzdkZi0z Zjc5LWE1YWItYWViYTcxMjdkYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyMqTi+3OX0eadmMG/YU31QF7ZZJc4DJm6ukfa7zBJRs4D6ws8D5ECI itA09jIoTihOIDn/lSnGfXZPZO2Mxwf9YrO87WMBN+iy8KD69VBqSbT1akUctMr9 fh0QrI0EMMkG/zbgtbguprRJlDGZxhs3tPZLjxJHfHdcyuz2/HTelMDcbhpkbiqv wlj2P/M7DVj9E3MPKtH9+8EBCXqOqFcZGC8Aq04NZTl7OkJYvCz5XSXCqBIlk1I0 lCJZ3xIchX6NXX2GBLSnlmwEDZAgMm//D96IU0q3tTarYA0rEDbefKNR7F/1OYJB a2R+A8yKjgYoT4EzFMbGZYc3dUBd4/I= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:48 2025 by rpki-client