$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c09b9619-5947-3458-aaf6-4677427afc32.roa File: c09b9619-5947-3458-aaf6-4677427afc32.roa (raw, json) Hash identifier: TobbgDvmUOCjIZ3KEa9px13i21Mx9lsWqc6Ius1E13E= Subject key identifier: 79:EF:7E:0A:E6:10:F7:AC:75:9E:91:F8:5B:1D:DF:E7:D1:38:C2:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C5CD6D3540D78D2B9680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c09b9619-5947-3458-aaf6-4677427afc32.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.21.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c5:cd:6d:35:40:d7:8d:2b:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=c47e3ed2-dbdf-4705-bd21-e18af4304e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:9e:55:50:9a:1e:34:6f:9f:ae:f5:fd:1f: c9:a5:c5:dd:06:fd:5c:4a:56:b0:24:c9:84:49:ca: 2a:46:3b:e9:7c:7c:8a:f5:14:6d:0b:98:3b:3b:2c: 55:73:a5:90:f6:e6:ab:50:ca:04:2e:0d:72:4f:09: 11:63:f8:0e:51:f7:88:72:9b:d5:b2:e8:b4:32:5e: ec:a1:b1:22:1a:52:38:95:96:85:0f:c8:1f:b1:90: 16:99:ac:08:74:94:b2:c8:df:45:05:8d:41:8b:9c: 59:21:cf:08:b4:c6:f1:51:d7:3e:53:51:cb:f9:0e: 0f:66:61:3b:43:d6:e0:a3:19:7a:ff:5f:df:70:85: f5:e0:4d:1e:e2:7f:49:a5:19:e5:b4:a0:fd:b0:87: 6f:47:df:d8:82:35:02:23:16:40:61:68:c6:ac:c3: df:34:1d:5b:9b:48:85:2d:9f:e1:1d:9b:f1:ec:4c: 78:10:4f:f6:c2:82:95:17:cd:ea:6b:b9:57:1b:ae: 8d:4f:f2:33:ff:15:e1:af:69:80:8e:3c:96:d3:97: ad:49:56:b7:63:a4:96:bb:22:a0:07:d8:b3:3a:ef: d9:18:6b:a5:03:fc:0b:20:96:c6:e8:46:8c:78:23: 56:34:99:71:4e:9f:de:b9:67:ca:73:14:74:38:ac: 51:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:7E:0A:E6:10:F7:AC:75:9E:91:F8:5B:1D:DF:E7:D1:38:C2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c09b9619-5947-3458-aaf6-4677427afc32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:75:01:33:48:58:48:b2:86:0b:5c:8c:06:d5:a7:4e:f2:9e: b2:fc:fd:03:6e:ee:c8:b4:21:8b:4b:a2:04:26:4b:03:d0:74: b3:6b:f6:fb:d9:95:30:7b:bf:49:76:b1:cf:ea:6e:fa:b8:b0: 24:20:3a:f5:12:3b:a9:d3:5e:68:1f:21:70:3a:63:d3:14:b1: bb:aa:8c:99:8a:34:c0:79:2c:37:f7:48:4b:f5:e2:ee:c5:0c: cd:80:4b:75:f7:e0:2b:d0:d9:d3:69:ef:2e:1a:11:60:52:19: e7:5e:a7:18:7c:cf:f8:5c:dd:12:28:f1:ab:c3:ae:b1:aa:a4: 53:90:7a:6e:a7:02:24:ed:62:18:34:64:90:c1:aa:15:76:45: 6c:54:9d:47:ba:ce:48:57:31:f9:e9:04:dc:93:35:50:76:91: 53:b2:7a:42:73:70:9f:d7:11:f1:98:72:db:c3:49:70:92:44: 51:b7:50:02:7e:a3:31:29:eb:cb:ab:f8:7e:ee:4c:9a:03:cb: d5:eb:4a:66:47:c4:aa:f3:bf:b0:08:eb:85:cf:ef:ff:fb:0b: ea:2c:d8:df:f7:e4:78:25:e6:a1:30:07:f1:5b:b2:be:d0:88: d8:26:a9:82:6b:d1:fd:bb:f5:ed:23:df:41:e9:b7:d0:3a:1c: ab:a2:2c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsXNbTVA140rloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YzQ3ZTNlZDItZGJkZi00NzA1LWJkMjEtZTE4YWY0MzA0ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUueVVCaHjRvn671/R/JpcXdBv1cSlawJMmE ScoqRjvpfHyK9RRtC5g7OyxVc6WQ9uarUMoELg1yTwkRY/gOUfeIcpvVsui0Ml7s obEiGlI4lZaFD8gfsZAWmawIdJSyyN9FBY1Bi5xZIc8ItMbxUdc+U1HL+Q4PZmE7 Q9bgoxl6/1/fcIX14E0e4n9JpRnltKD9sIdvR9/YgjUCIxZAYWjGrMPfNB1bm0iF LZ/hHZvx7Ex4EE/2woKVF83qa7lXG66NT/Iz/xXhr2mAjjyW05etSVa3Y6SWuyKg B9izOu/ZGGulA/wLIJbG6EaMeCNWNJlxTp/euWfKcxR0OKxROQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnvfgrmEPesdZ6R+Fsd3+fROMJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzA5Yjk2MTktNTk0Ny0z NDU4LWFhZjYtNDY3NzQyN2FmYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt1ATNIWEiyhgtcjAbVp07ynrL8/QNu7si0IYtLogQmSwPQdLNr9vvZ lTB7v0l2sc/qbvq4sCQgOvUSO6nTXmgfIXA6Y9MUsbuqjJmKNMB5LDf3SEv14u7F DM2AS3X34CvQ2dNp7y4aEWBSGedepxh8z/hc3RIo8avDrrGqpFOQem6nAiTtYhg0 ZJDBqhV2RWxUnUe6zkhXMfnpBNyTNVB2kVOyekJzcJ/XEfGYctvDSXCSRFG3UAJ+ ozEp68ur+H7uTJoDy9XrSmZHxKrzv7AI64XP7//7C+os2N/35Hgl5qEwB/Fbsr7Q iNgmqYJr0f279e0j30Hpt9A6HKuiLDI= -----END CERTIFICATE-----Generated at Sat Apr 5 07:59:39 2025 by rpki-client