$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa File: ae787592-e911-36a3-888b-4f4a37abd16b.roa (raw, json) Hash identifier: YegevaBXYyzihFChr4DaWkFxXpkxsKWudca61Y2U8oQ= Subject key identifier: D6:94:7C:2D:A3:B0:99:C2:D2:F1:4B:E0:52:35:C6:36:36:FE:01:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550FAFE12DA411CD5E4620 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 104.31.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0f:af:e1:2d:a4:11:cd:5e:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=51949689-12e8-4abe-af17-e149b913583f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:6f:23:c8:bf:6e:9c:1f:3a:98:01:69:d3: 85:3f:f7:c8:0a:d3:89:da:05:2d:78:da:c1:49:d1: ba:90:f3:3f:8d:92:6c:d1:59:da:76:b7:54:10:c6: b2:d7:a5:3e:a8:9b:d2:16:21:0c:c9:ab:24:a7:81: 4d:48:52:bb:72:24:a5:49:c7:ee:a1:37:ef:21:90: 59:96:61:3a:48:b2:6b:32:48:83:3c:39:86:ee:d9: 0d:45:27:8e:b7:75:cb:a3:db:79:1b:3b:7c:c2:b8: 3a:cc:d8:14:b0:8d:52:25:bb:57:f6:4f:33:d8:49: 57:ff:d4:3c:93:0d:61:40:04:7f:01:f4:d7:81:85: 23:82:e1:e4:9f:a6:4c:17:21:a1:f4:8e:67:3b:68: 8c:da:84:26:7e:18:3c:1e:be:ea:dd:b5:54:10:2b: be:b7:74:2d:61:70:4f:27:b4:77:c3:0b:8a:ef:47: 25:12:dc:ad:a2:1b:39:df:66:64:6a:e7:3e:01:98: c7:5a:34:af:d8:ff:c4:41:89:f6:a5:59:1e:b4:c0: aa:c9:2f:f6:a5:b8:b4:24:de:56:87:a7:cb:9c:93: cd:ce:00:b3:c0:69:51:7b:bf:94:55:92:28:70:a1: 7a:51:31:10:4d:30:d1:ba:f1:3f:f5:13:b5:29:bf: c0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:94:7C:2D:A3:B0:99:C2:D2:F1:4B:E0:52:35:C6:36:36:FE:01:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae787592-e911-36a3-888b-4f4a37abd16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c6:19:59:f1:70:35:68:19:1f:fe:8d:8e:86:66:e4:a5:8a: 48:60:5c:f4:b7:29:30:3b:fb:8a:ce:3a:fd:32:ee:61:0c:9c: e1:4f:db:6f:a6:31:5a:2d:8e:ca:a5:60:b6:18:0e:67:3b:18: f6:e0:bb:d5:74:02:9f:fd:f6:b6:78:0b:49:01:10:78:f7:d3: 4c:d5:5a:05:bd:27:7f:57:b3:84:51:35:d9:3c:c3:0d:3b:d6: 29:d7:3f:60:1d:97:8e:d6:f8:d4:98:f2:73:6a:3b:1f:de:83: 7d:f6:b4:fc:d0:7f:e7:d1:e4:61:16:e9:69:4b:9e:cc:90:fc: 4c:e4:b8:6e:2d:92:1a:3a:d3:ae:75:da:c4:43:0e:69:20:9e: 5a:11:7d:b4:3f:e8:34:c3:77:4a:d6:88:d1:0b:35:6c:62:cb: b2:ec:0b:87:34:7a:80:52:ae:f0:c4:f1:73:0c:1f:6e:26:f3: e2:71:e7:27:10:48:7c:48:f0:56:9b:09:84:3b:c4:1e:d5:86: 99:53:09:2f:24:c6:cb:f6:ca:65:75:28:28:60:47:a1:ac:96: e6:57:78:5a:a6:1a:3f:18:98:50:14:93:a9:18:2e:3b:5e:2c: 19:4d:96:51:ef:4c:fe:38:b7:76:ed:8d:7f:ac:fc:ab:7e:eb: 8e:d1:a7:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ+v4S2kEc1eRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk NTE5NDk2ODktMTJlOC00YWJlLWFmMTctZTE0OWI5MTM1ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjVvI8i/bpwfOpgBadOFP/fICtOJ2gUteNrB SdG6kPM/jZJs0VnadrdUEMay16U+qJvSFiEMyaskp4FNSFK7ciSlScfuoTfvIZBZ lmE6SLJrMkiDPDmG7tkNRSeOt3XLo9t5Gzt8wrg6zNgUsI1SJbtX9k8z2ElX/9Q8 kw1hQAR/AfTXgYUjguHkn6ZMFyGh9I5nO2iM2oQmfhg8Hr7q3bVUECu+t3QtYXBP J7R3wwuK70clEtytohs532Zkauc+AZjHWjSv2P/EQYn2pVketMCqyS/2pbi0JN5W h6fLnJPNzgCzwGlRe7+UVZIocKF6UTEQTTDRuvE/9RO1Kb/A9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaUfC2jsJnC0vFL4FI1xjY2/gEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU3ODc1OTItZTkxMS0z NmEzLTg4OGItNGY0YTM3YWJkMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaB9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDGGVnxcDVoGR/+jY6GZuSlikhgXPS3KTA7+4rOOv0y7mEMnOFP22+m MVotjsqlYLYYDmc7GPbgu9V0Ap/99rZ4C0kBEHj300zVWgW9J39Xs4RRNdk8ww07 1inXP2Adl47W+NSY8nNqOx/eg332tPzQf+fR5GEW6WlLnsyQ/EzkuG4tkho60651 2sRDDmkgnloRfbQ/6DTDd0rWiNELNWxiy7LsC4c0eoBSrvDE8XMMH24m8+Jx5ycQ SHxI8FabCYQ7xB7VhplTCS8kxsv2ymV1KChgR6GsluZXeFqmGj8YmFAUk6kYLjte LBlNllHvTP44t3btjX+s/Kt+647Rp2I= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:48 2025 by rpki-client