$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a18c9e53-a8d8-32f5-9b82-55303fb95152.roa File: a18c9e53-a8d8-32f5-9b82-55303fb95152.roa (raw, json) Hash identifier: WFTozpw8FQxA+sEilvJOAOdW5p+1IuK5xr7EKbmq90M= Subject key identifier: B7:8C:85:7B:F2:90:0F:23:AD:4D:99:D4:6E:5C:A4:18:94:D3:47:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCA449CC99CE4C78095C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a18c9e53-a8d8-32f5-9b82-55303fb95152.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.18.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:ca:44:9c:c9:9c:e4:c7:80:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=b29e0e05-0b81-4171-81df-9f99ba79fdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:d1:10:77:a2:7e:24:c0:ad:02:e7:bc:77: 9b:de:90:58:57:34:3c:c0:2b:4c:af:fc:64:0d:38: 66:0d:eb:92:12:8b:0a:67:3a:02:87:22:ef:17:2b: a7:f4:cc:31:fd:d1:cd:57:c7:20:2b:5f:ee:b0:49: 62:0a:6e:ae:8b:fb:c2:92:a2:96:83:cb:63:23:e7: fa:09:79:e8:7a:5e:45:64:81:b0:d1:3a:41:43:6d: c4:12:c7:30:69:d6:bc:f6:dc:87:a0:54:d6:ef:1a: 31:af:eb:dc:4b:d9:17:2a:9c:f2:18:6a:47:fa:b9: cc:c3:33:16:52:dd:f4:94:e3:54:9e:7f:f5:6b:a0: 93:6c:58:03:82:81:0b:cb:18:c2:bf:b9:30:03:a3: 25:0d:88:20:65:f0:9e:ab:3a:ef:e2:cf:69:0e:58: 0e:e0:cd:c2:d1:8f:fc:77:60:9a:49:17:dc:18:cd: 85:b1:a2:ee:a2:92:35:c1:26:2d:87:f6:2e:af:e5: 0c:6e:3a:10:f7:7c:28:51:e8:c9:00:ea:95:17:b0: 58:f5:7a:b7:54:cf:46:c0:09:35:49:22:6e:a2:9a: c7:18:4b:03:5d:58:f8:d2:69:2a:94:c0:5c:ff:5a: f2:f0:90:c5:32:0b:a5:e7:f0:47:96:d0:f2:b1:87: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:85:7B:F2:90:0F:23:AD:4D:99:D4:6E:5C:A4:18:94:D3:47:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a18c9e53-a8d8-32f5-9b82-55303fb95152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b8:b1:01:63:d6:27:a5:ee:46:5f:4c:47:de:61:35:14:6c: 46:79:8b:99:1c:2b:76:48:c2:19:83:bf:82:08:ab:26:e0:22: 9d:6a:b4:0d:29:dd:f2:89:a5:9b:44:ba:39:29:f4:70:d6:be: 58:8d:1b:e9:2f:63:2d:bd:4e:df:ad:c7:d6:e0:35:c1:e8:17: df:41:6b:a0:bf:1b:a2:7f:5b:47:82:8e:2d:1f:ac:99:2c:f9: 0d:c8:4f:83:5a:db:f4:5f:36:b0:d4:89:a8:fe:e8:df:3c:3e: ba:2c:04:7a:c3:ee:cd:b1:d9:d3:8f:40:53:f0:6e:45:1f:ba: 3f:90:d0:0d:2b:00:f4:4c:06:02:f4:74:da:43:cf:fd:13:43: 5c:e2:9d:4a:6e:74:42:59:99:52:8d:03:6c:ee:cf:0b:80:37: 51:98:2f:b8:bd:6c:25:2b:dd:ce:87:e7:31:e3:8c:26:8b:69: 75:53:09:0f:1f:3b:36:e8:75:20:b1:48:24:68:49:5a:a0:60: 1f:49:9c:25:16:36:a8:42:00:d2:c5:dd:81:70:1b:2f:77:34: 8b:13:36:d9:01:c4:fe:eb:e4:d4:46:06:34:24:21:33:f5:bc: 53:01:df:22:86:47:7b:b8:41:c0:19:85:f0:f2:b5:9e:b2:09: bd:c9:d7:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78pEnMmc5MeAlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjI5ZTBlMDUtMGI4MS00MTcxLTgxZGYtOWY5OWJhNzlmZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdfREHeifiTArQLnvHeb3pBYVzQ8wCtMr/xk DThmDeuSEosKZzoChyLvFyun9Mwx/dHNV8cgK1/usEliCm6ui/vCkqKWg8tjI+f6 CXnoel5FZIGw0TpBQ23EEscwada89tyHoFTW7xoxr+vcS9kXKpzyGGpH+rnMwzMW Ut30lONUnn/1a6CTbFgDgoELyxjCv7kwA6MlDYggZfCeqzrv4s9pDlgO4M3C0Y/8 d2CaSRfcGM2FsaLuopI1wSYth/Yur+UMbjoQ93woUejJAOqVF7BY9Xq3VM9GwAk1 SSJuoprHGEsDXVj40mkqlMBc/1ry8JDFMgul5/BHltDysYchFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeMhXvykA8jrU2Z1G5cpBiU00dOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE4YzllNTMtYThkOC0z MmY1LTliODItNTUzMDNmYjk1MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS4sQFj1iel7kZfTEfeYTUUbEZ5i5kcK3ZIwhmDv4IIqybgIp1qtA0p 3fKJpZtEujkp9HDWvliNG+kvYy29Tt+tx9bgNcHoF99Ba6C/G6J/W0eCji0frJks +Q3IT4Na2/RfNrDUiaj+6N88ProsBHrD7s2x2dOPQFPwbkUfuj+Q0A0rAPRMBgL0 dNpDz/0TQ1zinUpudEJZmVKNA2zuzwuAN1GYL7i9bCUr3c6H5zHjjCaLaXVTCQ8f OzbodSCxSCRoSVqgYB9JnCUWNqhCANLF3YFwGy93NIsTNtkBxP7r5NRGBjQkITP1 vFMB3yKGR3u4QcAZhfDytZ6yCb3J1zU= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:57 2025 by rpki-client