$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa File: aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa (raw, json) Hash identifier: vUefhwo5c60+dEIMi5ffqXkc9WWN9/tXOiEmm96P9zA= Subject key identifier: 5C:97:6B:9D:A8:72:1D:72:A9:A4:6C:5C:9E:85:CA:A1:01:08:7A:43 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C739AF8AC1F05AB99822 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.24.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c7:39:af:8a:c1:f0:5a:b9:98:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=7149081f-c655-4419-bc9f-c25b628e1b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e8:a3:6f:18:31:eb:e2:7a:63:28:0e:65:e1: 89:ef:51:e8:46:4a:03:f7:0e:62:14:28:da:d0:88: 89:d0:e9:0e:6c:3a:fa:d9:63:de:20:52:90:88:8e: 17:21:37:a2:d3:d3:4d:d8:13:88:78:1b:97:4e:fc: bf:32:af:2e:5c:69:23:95:b9:01:98:57:13:7c:8a: 31:01:8e:e9:11:e2:1f:51:27:dd:ec:3f:d0:88:75: 9c:95:f9:bd:7b:11:62:a8:d6:34:ea:0c:f8:f2:fb: 0c:73:a8:e2:a5:df:df:01:c9:e8:3b:96:60:56:27: 03:75:b9:40:6e:79:99:47:75:7e:87:73:ab:d0:a3: b0:cb:15:0b:ab:c5:48:69:62:0b:b2:38:ae:54:95: 23:f0:bd:17:3a:5b:ef:95:d8:81:83:15:a4:40:b3: 9c:cf:46:20:96:5a:c7:f0:83:93:a2:4f:d1:4e:5f: d8:61:31:32:53:17:67:bb:c9:3e:85:39:9b:04:c5: 9b:f6:11:79:e4:57:6b:fd:6c:82:f5:32:24:25:cc: 6b:2f:0e:39:45:b6:f0:5e:41:7e:21:dc:ec:c9:69: 20:f7:c3:c8:8e:57:18:82:ad:cf:5e:2b:5b:c0:c5: 93:51:f2:c4:50:57:b6:8a:bd:69:6d:ad:7f:5f:bb: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:6B:9D:A8:72:1D:72:A9:A4:6C:5C:9E:85:CA:A1:01:08:7A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.24.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ae:58:0e:44:0f:b3:fa:b2:6b:5d:bf:bc:91:9f:80:d4:46: 9d:3a:b6:a3:6e:7f:be:38:a2:d1:94:9e:ec:ba:2f:10:ac:c3: 7b:d9:ed:90:53:c8:ff:18:aa:96:ed:67:ca:0e:8a:4c:a7:47: df:da:da:39:24:bf:41:5f:20:47:a6:13:73:98:82:3b:a2:84: 01:5b:1a:3e:72:3e:b1:4c:38:9c:f4:57:fb:36:85:23:77:bf: 17:da:89:88:bf:d6:11:a6:8e:2b:10:89:53:06:8e:a6:b6:9e: d0:14:86:ae:6a:2d:6b:7c:ba:a4:c0:ec:0e:04:b8:22:10:7d: 4b:7e:1a:74:da:f4:e2:08:74:e2:78:cd:c7:09:3d:7d:b9:16: 38:d9:36:96:fb:92:3e:c6:a6:9d:b0:1e:4f:a2:3e:35:89:ba: 0e:90:06:a5:9c:9f:c4:5e:d7:3e:a3:05:da:f9:8e:07:f0:6b: b2:89:52:91:e6:ee:c2:90:e3:f7:11:fb:15:52:c9:5b:13:8c: f7:a3:8d:34:19:0d:9d:6d:eb:04:e0:d5:c5:6f:1b:c3:01:9e: 56:bd:79:39:e7:7d:72:ae:6c:16:d1:01:14:5d:c3:63:5c:1b: ec:8e:a1:6b:cd:6e:d3:fa:58:f6:d7:3d:6c:a1:92:26:41:1c: cf:b2:7e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsc5r4rB8Fq5mCIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NzE0OTA4MWYtYzY1NS00NDE5LWJjOWYtYzI1YjYyOGUxYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuijbxgx6+J6YygOZeGJ71HoRkoD9w5iFCja 0IiJ0OkObDr62WPeIFKQiI4XITei09NN2BOIeBuXTvy/Mq8uXGkjlbkBmFcTfIox AY7pEeIfUSfd7D/QiHWclfm9exFiqNY06gz48vsMc6jipd/fAcnoO5ZgVicDdblA bnmZR3V+h3Or0KOwyxULq8VIaWILsjiuVJUj8L0XOlvvldiBgxWkQLOcz0YgllrH 8IOTok/RTl/YYTEyUxdnu8k+hTmbBMWb9hF55Fdr/WyC9TIkJcxrLw45RbbwXkF+ IdzsyWkg98PIjlcYgq3PXitbwMWTUfLEUFe2ir1pba1/X7t1+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyXa52och1yqaRsXJ6FyqEBCHpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFiYmRhYzAtOWE3Mi0z MzNkLThjNTItYWUzOGExNWEzZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEquWA5ED7P6smtdv7yRn4DURp06tqNuf744otGUnuy6LxCsw3vZ7ZBT yP8YqpbtZ8oOikynR9/a2jkkv0FfIEemE3OYgjuihAFbGj5yPrFMOJz0V/s2hSN3 vxfaiYi/1hGmjisQiVMGjqa2ntAUhq5qLWt8uqTA7A4EuCIQfUt+GnTa9OIIdOJ4 zccJPX25FjjZNpb7kj7Gpp2wHk+iPjWJug6QBqWcn8Re1z6jBdr5jgfwa7KJUpHm 7sKQ4/cR+xVSyVsTjPejjTQZDZ1t6wTg1cVvG8MBnla9eTnnfXKubBbRARRdw2Nc G+yOoWvNbtP6WPbXPWyhkiZBHM+yfh8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:02:16 2025 by rpki-client