$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa File: a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa (raw, json) Hash identifier: xscn5j3zAOTcgw8UmXszBcj8ah28EFNbtMMelw4zpFE= Subject key identifier: 87:79:85:97:DC:19:F5:54:BD:35:8E:62:45:98:0A:0F:A9:C3:D9:DC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCB07C2C5C2E312C539C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.19.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cb:07:c2:c5:c2:e3:12:c5:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=cdb952f3-b6a4-44e0-81d4-69eee6489498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:f7:cd:e0:b0:90:96:72:4b:a6:79:57:6d: ef:45:cf:ba:c0:5a:c8:81:e9:04:43:ab:36:4e:0d: fa:83:3e:cd:23:81:e4:af:7b:5f:75:e0:2f:44:36: d6:35:16:bd:d6:ef:1a:47:bb:16:52:29:62:1b:ef: 4c:ff:a0:56:d1:2d:08:e0:b1:d0:8e:f4:49:68:73: 06:a3:72:bc:30:7c:e8:ae:79:54:70:1b:8a:10:e1: 52:ed:c6:0a:ea:67:c5:93:af:ab:5a:87:a1:72:87: bb:28:14:b1:eb:a0:33:97:a7:26:f8:19:1e:69:08: 29:39:21:8b:56:5a:be:a1:15:5a:ef:eb:d3:d2:c6: 22:fb:0c:f6:b1:4c:3b:26:c1:d7:6b:01:66:82:2e: bc:c6:42:50:e6:fa:7b:5c:50:4f:83:5f:10:5c:1f: 9f:06:8b:5e:97:a0:01:a9:c5:53:e5:c9:06:ab:0f: 64:2d:98:a4:66:86:b9:41:10:d9:c0:e9:6d:30:0a: 06:09:97:4c:53:77:d7:26:a6:31:cb:da:ab:a5:2a: 32:c3:3d:79:6c:50:90:cf:a3:22:74:32:ef:d2:bc: aa:9c:de:27:42:f7:61:ac:3f:5f:38:88:03:31:14: 23:07:8e:70:38:df:4b:99:5a:d9:c5:93:86:d7:46: f9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:79:85:97:DC:19:F5:54:BD:35:8E:62:45:98:0A:0F:A9:C3:D9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7dedf49-91f4-314e-a08c-dbdb8645c6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:a6:15:0a:d5:d4:e1:51:4f:eb:e1:e9:69:e0:56:f1:d8: 9b:ff:54:56:e2:4e:f8:8a:7f:e1:5e:38:c6:3b:3f:24:4e:33: ff:05:4d:1c:7f:90:20:06:83:34:73:66:d1:c2:2b:1d:29:1d: 20:94:04:f9:cc:2f:2e:6f:67:0c:f7:e6:b0:25:d3:6f:c0:14: a6:23:60:03:9c:37:6b:5b:ff:ec:12:c7:c1:eb:b2:0b:ba:af: d2:4c:60:16:07:e2:bb:e8:c3:83:d9:94:e3:54:6d:b1:45:8d: f3:5c:6b:77:62:64:b1:1c:03:a0:3c:44:c3:2d:8c:b5:ad:42: 2d:e0:0a:08:ca:04:ff:ef:0d:3a:d3:34:bc:b7:39:9a:01:98: ce:a5:90:69:24:cb:18:9e:16:01:e1:17:6d:77:07:0d:02:62: f4:8d:de:3c:45:ee:56:3e:89:b4:47:a8:3c:02:2e:57:89:bd: 10:c4:eb:3a:10:ce:50:a8:6d:62:37:75:d9:81:7e:46:af:ba: 57:71:e9:52:89:b0:87:81:92:40:26:3b:8b:d4:fa:9f:b4:ea: 21:6a:71:1f:7d:61:7a:2d:ab:cd:85:38:4f:e4:47:ab:38:89: a2:9f:92:ba:1d:06:2a:b7:6d:c6:e3:ba:85:01:99:30:e1:71: f7:a1:3e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78sHwsXC4xLFOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk Y2RiOTUyZjMtYjZhNC00NGUwLTgxZDQtNjllZWU2NDg5NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsX3zeCwkJZyS6Z5V23vRc+6wFrIgekEQ6s2 Tg36gz7NI4Hkr3tfdeAvRDbWNRa91u8aR7sWUiliG+9M/6BW0S0I4LHQjvRJaHMG o3K8MHzornlUcBuKEOFS7cYK6mfFk6+rWoehcoe7KBSx66Azl6cm+BkeaQgpOSGL Vlq+oRVa7+vT0sYi+wz2sUw7JsHXawFmgi68xkJQ5vp7XFBPg18QXB+fBotel6AB qcVT5ckGqw9kLZikZoa5QRDZwOltMAoGCZdMU3fXJqYxy9qrpSoywz15bFCQz6Mi dDLv0ryqnN4nQvdhrD9fOIgDMRQjB45wON9LmVrZxZOG10b5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId5hZfcGfVUvTWOYkWYCg+pw9ncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTdkZWRmNDktOTFmNC0z MTRlLWEwOGMtZGJkYjg2NDVjNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCAphUK1dThUU/r4elp4Fbx2Jv/VFbiTviKf+FeOMY7PyROM/8FTRx/ kCAGgzRzZtHCKx0pHSCUBPnMLy5vZwz35rAl02/AFKYjYAOcN2tb/+wSx8Hrsgu6 r9JMYBYH4rvow4PZlONUbbFFjfNca3diZLEcA6A8RMMtjLWtQi3gCgjKBP/vDTrT NLy3OZoBmM6lkGkkyxieFgHhF213Bw0CYvSN3jxF7lY+ibRHqDwCLleJvRDE6zoQ zlCobWI3ddmBfkavuldx6VKJsIeBkkAmO4vU+p+06iFqcR99YXotq82FOE/kR6s4 iaKfkrodBiq3bcbjuoUBmTDhcfehPgk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:11 2025 by rpki-client