$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aed3d735-cd06-3b4b-8713-afe4538ce1b8.roa File: aed3d735-cd06-3b4b-8713-afe4538ce1b8.roa (raw, json) Hash identifier: W6r9E4As2/f3vOU1eBxpPT/63ddU+Yg+abiCT/XR1Mg= Subject key identifier: D1:6E:84:D5:E3:E4:84:36:81:17:E8:98:3E:8E:2B:2E:B2:1B:9D:53 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C87CD2E18B5DBA5D2200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aed3d735-cd06-3b4b-8713-afe4538ce1b8.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.25.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c8:7c:d2:e1:8b:5d:ba:5d:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=138cbdc9-301a-436e-83a4-452655597f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:ad:85:ae:e7:e6:d9:a0:31:25:47:59:23: 67:f9:2d:f0:ee:ad:f2:a7:68:2b:ed:1b:50:5d:13: bd:12:fd:3e:55:0d:0b:75:12:76:a6:ae:ee:d8:b2: 1b:47:c6:3a:2c:dd:95:a5:c6:33:31:94:0c:7c:eb: a5:28:b3:5a:61:40:8e:e7:97:41:f7:9f:aa:ed:a5: cf:33:f9:62:e5:b3:3d:ab:f5:86:2c:46:29:44:ef: 96:3d:d6:12:57:4d:ef:8c:ef:c7:fe:cf:65:84:ed: 09:06:09:7f:41:18:b8:11:0d:ec:7d:fb:67:e7:5d: e2:46:1c:0f:7b:4a:67:ad:2c:d9:17:2b:18:7b:38: 62:d0:83:d5:3e:1d:c3:02:fd:38:7e:e4:24:1f:f2: 3d:db:e5:1c:43:0d:19:b6:c7:46:36:af:90:9a:03: ca:44:06:8b:7f:47:58:c5:a8:74:b2:90:6b:f5:8a: 75:1e:24:c1:78:c4:7d:dc:77:2d:34:0b:92:bc:09: d7:e5:c2:1a:69:99:ef:37:45:17:0e:6e:c9:3f:21: 95:83:01:b0:bc:2a:fe:de:f3:b6:38:0d:3c:cd:eb: 48:e9:f3:a2:80:6b:06:c2:7a:cd:71:ed:86:39:61: 9a:71:d5:8b:31:46:d7:9e:4c:61:13:cd:66:34:4f: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6E:84:D5:E3:E4:84:36:81:17:E8:98:3E:8E:2B:2E:B2:1B:9D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aed3d735-cd06-3b4b-8713-afe4538ce1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:68:d6:c8:21:28:ba:a0:d6:3a:e0:92:be:8d:2d:48:a7:ee: 1e:0b:50:45:fc:f8:0e:c7:cc:1b:b5:20:dd:d0:8e:fb:d8:5d: 46:c4:db:84:2f:d8:95:d6:02:59:6f:2a:b3:1e:86:e9:bc:e4: f1:cc:95:3a:8d:49:b6:c8:5e:86:34:aa:8d:0d:d9:5a:82:8e: fc:89:4f:6d:e7:c2:30:cc:19:b6:d2:b6:2e:1d:09:83:d2:d0: 1e:ba:4a:00:38:af:15:e7:4a:81:31:1b:b1:72:f1:7b:83:ca: fa:1b:c8:eb:aa:14:1b:3f:ef:3c:de:57:74:95:28:ee:85:2a: fa:8b:4c:28:34:d4:b2:7e:36:8d:1a:e8:e4:f1:61:1c:13:7a: e4:ec:60:2f:62:0e:ba:0e:72:1d:55:ba:7c:d3:40:17:cc:13: f3:1c:c1:32:5c:f1:f6:b7:eb:c1:2d:30:49:4e:50:da:22:83: 02:18:8a:f3:c9:17:89:ca:f6:e2:d3:47:5a:3d:0b:21:e9:aa: fc:73:8e:a0:ab:e7:76:b4:27:6d:5e:02:a2:31:02:36:8b:51: 97:05:be:9f:22:bb:1e:95:40:dd:d2:73:89:f4:6f:8f:73:6b: bc:cf:1f:bc:31:e2:98:c2:56:0b:49:f4:ee:20:1d:f8:27:78: 86:35:22:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsh80uGLXbpdIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MTM4Y2JkYzktMzAxYS00MzZlLTgzYTQtNDUyNjU1NTk3ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnutha7n5tmgMSVHWSNn+S3w7q3yp2gr7RtQ XRO9Ev0+VQ0LdRJ2pq7u2LIbR8Y6LN2VpcYzMZQMfOulKLNaYUCO55dB95+q7aXP M/li5bM9q/WGLEYpRO+WPdYSV03vjO/H/s9lhO0JBgl/QRi4EQ3sfftn513iRhwP e0pnrSzZFysYezhi0IPVPh3DAv04fuQkH/I92+UcQw0ZtsdGNq+QmgPKRAaLf0dY xah0spBr9Yp1HiTBeMR93HctNAuSvAnX5cIaaZnvN0UXDm7JPyGVgwGwvCr+3vO2 OA08zetI6fOigGsGwnrNce2GOWGacdWLMUbXnkxhE81mNE9BgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFuhNXj5IQ2gRfomD6OKy6yG51TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWVkM2Q3MzUtY2QwNi0z YjRiLTg3MTMtYWZlNDUzOGNlMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpo1sghKLqg1jrgkr6NLUin7h4LUEX8+A7HzBu1IN3QjvvYXUbE24Qv 2JXWAllvKrMehum85PHMlTqNSbbIXoY0qo0N2VqCjvyJT23nwjDMGbbSti4dCYPS 0B66SgA4rxXnSoExG7Fy8XuDyvobyOuqFBs/7zzeV3SVKO6FKvqLTCg01LJ+No0a 6OTxYRwTeuTsYC9iDroOch1VunzTQBfME/McwTJc8fa368EtMElOUNoigwIYivPJ F4nK9uLTR1o9CyHpqvxzjqCr53a0J21eAqIxAjaLUZcFvp8iux6VQN3Sc4n0b49z a7zPH7wx4pjCVgtJ9O4gHfgneIY1Img= -----END CERTIFICATE-----Generated at Sat Apr 5 07:46:37 2025 by rpki-client