$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa File: aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa (raw, json) Hash identifier: UAYNAl/njFfRtMMjbNbLSasavf+sXIpz7xVETQC67rM= Subject key identifier: 55:65:B1:92:BC:FB:9B:DC:8F:15:51:C9:95:00:B7:E0:3D:B8:00:8F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C530BF15A2BE7BFD4280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.21.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:30:bf:15:a2:be:7b:fd:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=b3727c01-abf4-4c89-95a0-55fa355ba832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:e0:34:10:94:92:ce:61:87:d4:5b:7e:05: 22:55:41:bf:d9:57:f1:88:67:27:fd:3a:ee:a7:0a: 1c:7d:1b:7c:58:07:3b:9e:42:01:0b:e5:94:73:9e: 94:a8:89:2b:bd:f5:46:eb:32:8c:d9:b6:90:ad:e4: 21:0f:0d:13:62:87:b2:84:b6:aa:2e:bf:69:c8:3a: ca:3f:6e:14:12:c4:aa:76:43:fc:04:60:9f:ba:58: e1:f2:ff:9f:9c:5a:38:c2:ee:5e:5a:50:d5:0f:5b: b7:91:b5:7d:fe:f1:31:54:ea:25:91:d3:ca:a8:6b: df:a5:2a:75:d9:ae:1a:09:b2:68:22:be:59:79:a6: 35:8d:84:ec:88:ad:18:43:9b:89:d6:19:30:08:00: 6b:93:5c:7f:55:ab:36:53:2a:8e:ea:d5:86:14:3a: 05:ff:cd:2b:43:d2:b8:66:4b:b2:a8:f6:be:4c:14: a9:82:ee:21:22:a4:a2:0f:9f:2a:c4:13:b6:ef:1c: 42:78:6e:c6:52:dc:f9:d3:20:66:9b:00:94:ca:16: 5e:69:81:c1:5c:30:28:3d:f6:14:25:94:9c:f2:62: d1:80:96:23:5d:6f:de:4b:e7:e4:81:c6:6e:95:4f: c5:18:61:0c:5f:08:82:b0:09:a9:e9:bd:dd:e0:21: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:65:B1:92:BC:FB:9B:DC:8F:15:51:C9:95:00:B7:E0:3D:B8:00:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa63f4c7-c1a0-3d5f-b24a-4c8f1b8e8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1f:5d:7c:8f:66:10:1d:b8:44:c8:08:fa:d2:53:36:d1:d9: f5:96:b5:10:b7:67:1a:66:66:87:25:ad:28:6d:48:50:01:ec: bb:95:f3:79:1c:94:50:c3:61:20:ff:7c:f9:bc:a5:ce:2e:79: 61:fd:d6:94:04:e8:ff:bd:06:d0:1e:c9:3e:a1:15:d2:fe:e2: 2b:c8:69:60:c6:b2:f6:a9:eb:41:03:00:1c:5d:d7:51:9d:35: d8:17:ca:32:48:15:f7:2b:65:c7:08:ed:df:18:06:39:bb:53: 3a:16:bb:ee:07:d1:15:62:12:c2:12:d5:18:a1:69:ba:41:3f: 5c:a9:30:72:7c:02:27:df:19:a7:fe:f5:68:78:c4:ae:78:b0: fe:43:5a:1c:e0:00:e5:db:84:ff:e0:b1:cf:ae:89:ba:d3:44: cb:74:27:d4:f4:c1:ed:d1:0e:21:97:2d:6e:72:bb:92:3a:59: a4:96:f7:7e:d1:c2:d9:87:2b:b9:2b:f3:74:8b:fa:d7:bd:a1: 02:6d:6e:9b:05:c3:2b:78:84:1b:eb:bf:83:a7:68:6f:57:87: 79:67:15:94:92:2b:10:3f:f0:41:4d:36:a4:5d:f1:17:e7:59: 9f:c4:0c:fd:28:32:05:0c:25:bc:16:6e:f1:fb:84:4e:db:09: b8:42:24:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsUwvxWivnv9QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YjM3MjdjMDEtYWJmNC00Yzg5LTk1YTAtNTVmYTM1NWJhODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdTgNBCUks5hh9RbfgUiVUG/2VfxiGcn/Tru pwocfRt8WAc7nkIBC+WUc56UqIkrvfVG6zKM2baQreQhDw0TYoeyhLaqLr9pyDrK P24UEsSqdkP8BGCfuljh8v+fnFo4wu5eWlDVD1u3kbV9/vExVOolkdPKqGvfpSp1 2a4aCbJoIr5ZeaY1jYTsiK0YQ5uJ1hkwCABrk1x/Vas2UyqO6tWGFDoF/80rQ9K4 ZkuyqPa+TBSpgu4hIqSiD58qxBO27xxCeG7GUtz50yBmmwCUyhZeaYHBXDAoPfYU JZSc8mLRgJYjXW/eS+fkgcZulU/FGGEMXwiCsAmp6b3d4CHl0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVlsZK8+5vcjxVRyZUAt+A9uACPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWE2M2Y0YzctYzFhMC0z ZDVmLWIyNGEtNGM4ZjFiOGU4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgfXXyPZhAduETICPrSUzbR2fWWtRC3ZxpmZoclrShtSFAB7LuV83kc lFDDYSD/fPm8pc4ueWH91pQE6P+9BtAeyT6hFdL+4ivIaWDGsvap60EDABxd11Gd NdgXyjJIFfcrZccI7d8YBjm7UzoWu+4H0RViEsIS1RihabpBP1ypMHJ8AiffGaf+ 9Wh4xK54sP5DWhzgAOXbhP/gsc+uibrTRMt0J9T0we3RDiGXLW5yu5I6WaSW937R wtmHK7kr83SL+te9oQJtbpsFwyt4hBvrv4OnaG9Xh3lnFZSSKxA/8EFNNqRd8Rfn WZ/EDP0oMgUMJbwWbvH7hE7bCbhCJHU= -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:07 2025 by rpki-client