$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9df31d8d-d5ee-3040-89e3-17f00accc17a.roa File: 9df31d8d-d5ee-3040-89e3-17f00accc17a.roa (raw, json) Hash identifier: lZnLnODW3BMYLKUUIxG8cAs81Ac3NLhugs9kxNXTqBU= Subject key identifier: 74:2E:7B:D2:47:7C:E6:7E:1E:7F:3C:DA:FA:50:07:2B:94:DE:44:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD644ACF925F145B6AAF0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9df31d8d-d5ee-3040-89e3-17f00accc17a.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.24.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d6:44:ac:f9:25:f1:45:b6:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=29d04929-65b7-476c-a2b4-222b4f40b5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:09:e4:5b:3e:87:ee:0f:59:85:f5:81:5e: a7:62:29:fe:af:c8:31:0d:9c:2a:e6:30:7e:57:f4: 28:24:ad:f7:31:9a:73:07:f2:0c:6e:06:b5:05:fd: 3c:a5:c6:96:51:9a:3d:99:6d:f5:0f:35:4d:6b:68: f5:6b:2e:9c:18:a7:79:65:27:e2:60:3f:98:88:02: 47:8c:9c:1f:9e:71:1e:10:b1:68:60:86:7f:95:28: 95:61:f9:70:1d:f7:92:aa:02:47:e1:bd:bd:4c:2c: 64:a5:6a:b5:37:88:56:2c:55:14:89:a1:74:df:b4: d0:79:d8:bd:49:ef:9e:13:b9:bf:e2:7d:29:d7:f3: 11:6e:82:c0:a7:b8:95:e7:2d:d4:73:84:ae:18:1f: 1b:43:57:ab:a6:c0:0f:f6:fb:11:74:ce:75:4d:ef: 99:00:03:c1:01:81:0d:e1:8f:e0:19:dd:d7:b2:05: 15:61:1f:fa:9e:97:61:6f:8d:99:fc:33:a4:c3:ba: b2:d0:42:0b:59:8b:79:f8:e5:60:92:94:2a:34:bd: cf:8d:79:7d:42:44:fd:50:e6:7b:79:7e:fc:4f:13: 76:5f:e3:f8:bd:02:f5:d3:68:55:2b:ef:c6:0c:bb: 90:b8:b4:02:41:a8:c8:ed:0f:54:a2:ae:4d:b8:f9: cb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2E:7B:D2:47:7C:E6:7E:1E:7F:3C:DA:FA:50:07:2B:94:DE:44:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9df31d8d-d5ee-3040-89e3-17f00accc17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a8:3e:e3:58:e2:70:f5:bc:47:13:67:a0:fb:a1:df:fb:16: 23:b8:18:e0:bf:9d:d8:f9:9c:b9:4f:f6:1f:4b:54:21:1f:df: fb:3d:cf:69:d3:a6:6f:36:f9:8a:c7:c2:ba:92:a8:2c:26:69: 0a:c9:56:70:61:15:bb:ad:87:cb:81:60:a1:c2:ae:5a:9a:9d: 32:d4:6f:b0:16:64:ed:c6:af:b3:ba:93:c3:36:6d:1f:0b:f5: 1c:7d:e3:f6:4d:b0:77:c3:e8:46:de:87:42:a1:ba:db:6a:55: e1:42:ac:9b:c3:33:d3:b9:1b:1b:06:05:1f:ea:dd:8c:e4:51: 2c:9d:83:e2:23:dd:0d:f4:a5:cd:b7:d6:32:27:6e:0e:cb:ce: 94:12:01:58:e7:72:a9:ec:46:55:8f:05:e2:ff:e4:c4:b8:52: 41:42:37:4d:f3:5d:c1:96:78:2b:eb:4a:b6:f8:e0:27:e4:93: 37:b8:cb:93:30:fb:53:b2:13:10:68:d5:e7:f1:8a:a9:52:76: 63:df:15:79:81:c4:87:60:d5:fd:c7:c1:bb:d3:67:e2:98:79: f9:1b:50:47:04:60:cb:e1:ed:f1:68:9f:d4:80:c9:75:b0:ab: 6f:ec:cd:89:a5:4f:87:5c:2d:4d:55:62:d0:8c:16:1c:e3:47: 94:6f:cd:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79ZErPkl8UW2qvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MjlkMDQ5MjktNjViNy00NzZjLWEyYjQtMjIyYjRmNDBiNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsgJ5Fs+h+4PWYX1gV6nYin+r8gxDZwq5jB+ V/QoJK33MZpzB/IMbga1Bf08pcaWUZo9mW31DzVNa2j1ay6cGKd5ZSfiYD+YiAJH jJwfnnEeELFoYIZ/lSiVYflwHfeSqgJH4b29TCxkpWq1N4hWLFUUiaF037TQedi9 Se+eE7m/4n0p1/MRboLAp7iV5y3Uc4SuGB8bQ1erpsAP9vsRdM51Te+ZAAPBAYEN 4Y/gGd3XsgUVYR/6npdhb42Z/DOkw7qy0EILWYt5+OVgkpQqNL3PjXl9QkT9UOZ7 eX78TxN2X+P4vQL102hVK+/GDLuQuLQCQajI7Q9Uoq5NuPnLmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQue9JHfOZ+Hn882vpQByuU3kTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWRmMzFkOGQtZDVlZS0z MDQwLTg5ZTMtMTdmMDBhY2NjMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyoPuNY4nD1vEcTZ6D7od/7FiO4GOC/ndj5nLlP9h9LVCEf3/s9z2nT pm82+YrHwrqSqCwmaQrJVnBhFbuth8uBYKHCrlqanTLUb7AWZO3Gr7O6k8M2bR8L 9Rx94/ZNsHfD6Ebeh0KhuttqVeFCrJvDM9O5GxsGBR/q3YzkUSydg+Ij3Q30pc23 1jInbg7LzpQSAVjncqnsRlWPBeL/5MS4UkFCN03zXcGWeCvrSrb44Cfkkze4y5Mw +1OyExBo1efxiqlSdmPfFXmBxIdg1f3HwbvTZ+KYefkbUEcEYMvh7fFon9SAyXWw q2/szYmlT4dcLU1VYtCMFhzjR5RvzUk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:47 2025 by rpki-client