$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa File: aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa (raw, json) Hash identifier: H66XNJ5RAxl0frNskGna5om+A2RHsEPK3gSP74lHQpI= Subject key identifier: 29:54:C1:DD:5A:6A:0A:86:50:E3:74:9C:6E:E4:AA:D1:20:7D:E3:B7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCBA581E5BCF28F87D6C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.21.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cb:a5:81:e5:bc:f2:8f:87:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=6a69f865-d2a7-4201-9f90-17d798fdd0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:76:44:9b:02:dc:a0:1f:4d:ba:88:57:df: da:63:c5:b9:84:7b:a2:d9:08:cd:c3:4b:0e:3c:97: 7a:74:84:47:89:6d:7d:bb:57:1c:34:75:e8:1b:58: 27:08:18:67:ef:25:d2:70:bd:f2:70:5d:10:f3:67: da:99:5b:b3:4f:31:e2:f8:06:39:32:a9:05:e3:11: f2:3f:4f:b9:e5:2f:09:31:99:cf:df:e4:81:39:61: 61:9f:b4:3d:e7:89:45:2d:33:f3:1b:4f:a0:e9:c5: 03:79:21:bd:73:ba:aa:49:cd:da:6f:3b:56:23:e7: a4:6b:79:27:90:1b:ca:3f:b7:33:eb:2c:83:48:f0: ea:19:02:4d:25:5e:ce:e3:8c:43:99:b4:b1:24:94: 92:da:67:e2:ae:69:a2:43:63:08:53:96:d9:83:5b: c0:19:e5:1a:47:db:c4:b5:d9:d3:9e:ef:da:2b:05: a0:39:fb:e8:70:18:a1:53:1e:d1:76:89:ad:59:22: 3e:f6:d7:a4:78:26:ad:a7:17:65:44:54:66:fb:20: 91:c4:3c:e1:e5:16:ce:35:0d:63:ad:1e:74:4b:8e: 97:a3:b1:84:dc:a7:81:ff:e3:15:c5:f8:2a:83:97: 3c:a7:1a:0c:b9:24:d3:63:86:f9:d8:95:35:f2:56: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:54:C1:DD:5A:6A:0A:86:50:E3:74:9C:6E:E4:AA:D1:20:7D:E3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:94:61:bd:70:96:b2:0d:1e:ec:b1:fb:a6:31:ed:4f:53:ef: e1:06:78:a2:47:32:bd:8a:ee:66:cc:e2:3e:01:26:17:d0:9b: 27:9e:e3:47:1a:02:9a:30:a5:a7:1f:35:61:59:7c:78:83:62: 35:ad:c4:01:ba:01:cc:e3:50:6b:60:fd:fd:c0:74:a9:cc:c2: ee:20:32:de:5b:2a:61:cc:38:17:6a:70:65:b2:f3:47:55:e4: bc:84:94:8c:8b:65:c8:97:3f:80:80:8c:65:d6:d3:ac:fc:18: 61:56:3c:b0:04:da:ff:84:25:a8:18:7a:6c:8f:c7:59:7f:3c: b4:1a:1b:7c:16:8e:e6:24:d0:70:bd:bb:e5:6c:19:da:a9:16: 6b:78:77:99:d1:43:d9:31:29:a3:bf:36:c1:27:d5:81:3d:bf: 4e:75:d8:45:d6:15:98:2d:c6:2e:74:74:85:3b:67:b6:62:52: 1f:2f:75:52:5a:05:3e:eb:5d:2c:0e:bb:98:49:95:13:4d:b7: f2:0e:1b:12:47:2e:7b:d7:3a:3d:f4:c8:f8:88:13:1a:13:a1: 07:08:90:98:67:04:57:41:b5:24:8e:35:53:04:d6:7f:81:d1: a4:35:c6:4e:2e:ba:9b:d4:52:59:44:93:e1:29:46:5d:46:35: 8f:2b:df:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78ulgeW88o+H1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NmE2OWY4NjUtZDJhNy00MjAxLTlmOTAtMTdkNzk4ZmRkMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIp2RJsC3KAfTbqIV9/aY8W5hHui2QjNw0sO PJd6dIRHiW19u1ccNHXoG1gnCBhn7yXScL3ycF0Q82famVuzTzHi+AY5MqkF4xHy P0+55S8JMZnP3+SBOWFhn7Q954lFLTPzG0+g6cUDeSG9c7qqSc3abztWI+eka3kn kBvKP7cz6yyDSPDqGQJNJV7O44xDmbSxJJSS2mfirmmiQ2MIU5bZg1vAGeUaR9vE tdnTnu/aKwWgOfvocBihUx7RdomtWSI+9tekeCatpxdlRFRm+yCRxDzh5RbONQ1j rR50S46Xo7GE3KeB/+MVxfgqg5c8pxoMuSTTY4b52JU18la13wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClUwd1aagqGUON0nG7kqtEgfeO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWE2M2Y0YzctYzFhMC0z ZDVmLWIyNGEtNGM4ZjFiOGU4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeUYb1wlrINHuyx+6Yx7U9T7+EGeKJHMr2K7mbM4j4BJhfQmyee40ca ApowpacfNWFZfHiDYjWtxAG6AczjUGtg/f3AdKnMwu4gMt5bKmHMOBdqcGWy80dV 5LyElIyLZciXP4CAjGXW06z8GGFWPLAE2v+EJagYemyPx1l/PLQaG3wWjuYk0HC9 u+VsGdqpFmt4d5nRQ9kxKaO/NsEn1YE9v0512EXWFZgtxi50dIU7Z7ZiUh8vdVJa BT7rXSwOu5hJlRNNt/IOGxJHLnvXOj30yPiIExoToQcIkJhnBFdBtSSONVME1n+B 0aQ1xk4uupvUUllEk+EpRl1GNY8r35o= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:12 2025 by rpki-client