$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa File: af12d4d2-eba1-3225-9761-d1d0bcd90937.roa (raw, json) Hash identifier: dagi3PbEcfY5yoqPSQcZ4nz3XwTSf97V8yEFxqFIyUs= Subject key identifier: 06:4F:E3:BA:F8:BF:25:A6:8A:D0:7C:49:38:DE:DD:04:7F:F3:67:F8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C4A08A662899E4B40EE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.20.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c4:a0:8a:66:28:99:e4:b4:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=04095488-1852-4df5-a3e0-147b87e4e171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:23:7f:b2:84:ea:b5:d7:74:ec:27:9c:b5: d0:11:96:05:cd:13:3a:a4:3a:b6:f9:0c:f3:f7:93: ec:f5:e1:48:10:c2:98:ce:c8:f0:04:99:c2:62:9f: 2b:77:e9:03:b4:7a:84:1d:a3:b6:f5:5c:25:d8:bb: 83:87:64:0d:01:a6:f7:f9:76:3e:85:4b:03:32:9f: 79:fb:a6:86:17:7b:02:9e:d4:1a:e8:01:e8:cb:e6: 42:72:ac:df:63:01:82:f0:93:e9:d9:52:84:74:cc: bf:71:d5:6d:0a:73:1e:fb:c5:55:5e:12:c0:1b:a0: 27:91:76:72:e1:6b:ad:61:99:7a:9f:7e:57:d2:98: af:9b:7a:a5:06:42:ce:11:01:99:6d:a8:63:10:36: ce:29:46:21:e2:69:86:ff:82:32:40:8c:08:f1:7a: f5:d6:cf:4b:90:0c:be:16:8e:52:a4:dc:6b:37:19: 1a:af:34:a9:ca:f0:d0:2d:57:3f:22:f7:dc:f1:69: 3d:15:7a:b8:20:de:b6:fd:a9:84:d4:96:ca:23:f8: 59:75:ba:7e:04:53:11:08:5b:1f:dd:72:6f:83:33: cd:17:4b:be:5f:74:9a:9a:61:7d:89:21:a4:d7:44: 73:0e:d3:6a:57:2c:cc:40:07:d6:ac:72:6c:92:8c: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4F:E3:BA:F8:BF:25:A6:8A:D0:7C:49:38:DE:DD:04:7F:F3:67:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b2:d3:af:a8:6e:9f:a8:d6:cc:03:48:21:8d:46:21:d1:dc: 7b:e4:bf:a6:c3:f2:7a:ef:f3:50:90:9c:8e:d6:2b:fa:3e:2f: e6:d8:f7:5a:6b:a6:e3:03:6f:9e:0b:e7:a0:28:90:20:bb:97: 9b:26:c4:1c:6b:8a:b9:45:77:71:f0:43:65:0c:fa:ed:02:57: 6f:6d:f6:d1:5c:ab:7d:e0:56:4e:3b:0e:6f:82:14:24:8d:85: c1:63:0b:ab:fb:e3:4b:c7:a9:fd:7b:f8:c4:89:69:5c:e3:ff: 4a:59:bb:0c:c2:2e:ad:48:74:54:e3:99:f2:d1:ab:f6:f2:63: 9d:d3:b8:f1:d2:02:55:60:f8:33:46:8b:0a:a0:68:82:6f:b8: bd:59:08:8f:eb:a2:25:16:9d:b1:35:ee:ea:74:7a:04:a6:fe: a2:60:d5:f6:f6:89:2f:e9:c1:c1:95:14:31:ae:db:51:20:5e: c1:16:da:4d:c5:1f:fa:ca:1e:34:11:54:5c:8c:d5:bc:ce:a5: 36:74:72:27:f0:4c:66:c9:bc:59:90:16:66:81:22:5c:3e:10: 10:29:7b:7a:80:d3:34:e5:94:62:16:c6:ef:79:2d:5c:28:94: a2:d3:5e:84:f1:19:c0:8d:bb:5e:c8:7e:5f:d4:66:22:d8:ad: f7:c4:42:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsSgimYomeS0DuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MDQwOTU0ODgtMTg1Mi00ZGY1LWEzZTAtMTQ3Yjg3ZTRlMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWojf7KE6rXXdOwnnLXQEZYFzRM6pDq2+Qzz 95Ps9eFIEMKYzsjwBJnCYp8rd+kDtHqEHaO29Vwl2LuDh2QNAab3+XY+hUsDMp95 +6aGF3sCntQa6AHoy+ZCcqzfYwGC8JPp2VKEdMy/cdVtCnMe+8VVXhLAG6AnkXZy 4WutYZl6n35X0pivm3qlBkLOEQGZbahjEDbOKUYh4mmG/4IyQIwI8Xr11s9LkAy+ Fo5SpNxrNxkarzSpyvDQLVc/Ivfc8Wk9FXq4IN62/amE1JbKI/hZdbp+BFMRCFsf 3XJvgzPNF0u+X3SammF9iSGk10RzDtNqVyzMQAfWrHJskoxZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZP47r4vyWmitB8STje3QR/82f4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWYxMmQ0ZDItZWJhMS0z MjI1LTk3NjEtZDFkMGJjZDkwOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKy06+obp+o1swDSCGNRiHR3Hvkv6bD8nrv81CQnI7WK/o+L+bY91pr puMDb54L56AokCC7l5smxBxrirlFd3HwQ2UM+u0CV29t9tFcq33gVk47Dm+CFCSN hcFjC6v740vHqf17+MSJaVzj/0pZuwzCLq1IdFTjmfLRq/byY53TuPHSAlVg+DNG iwqgaIJvuL1ZCI/roiUWnbE17up0egSm/qJg1fb2iS/pwcGVFDGu21EgXsEW2k3F H/rKHjQRVFyM1bzOpTZ0cifwTGbJvFmQFmaBIlw+EBApe3qA0zTllGIWxu95LVwo lKLTXoTxGcCNu17Ifl/UZiLYrffEQos= -----END CERTIFICATE-----Generated at Sat Apr 5 04:58:22 2025 by rpki-client