$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa File: c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa (raw, json) Hash identifier: j98vJxQFzENhd1T5F+TDDSbWZv25Quk4aG9g8PwkYZM= Subject key identifier: AF:05:35:B2:FC:4C:0F:F5:A5:DB:6F:7C:37:E4:33:72:17:A1:E5:3C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCC0E1EBA45683A3EDCE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.23.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cc:0e:1e:ba:45:68:3a:3e:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=e31545e4-401f-4b62-82c7-2b7894c712ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:18:aa:a4:46:44:d4:1a:79:35:e3:43:fd: 72:d2:f9:fc:d2:ba:83:d5:14:40:c3:70:0c:b5:77: cf:a1:b4:f7:6d:29:1e:25:43:1c:68:8b:e3:55:92: 80:b2:61:63:e5:8c:0e:32:eb:f9:b0:fd:25:cf:b5: 3e:fb:3e:3e:39:bf:ea:86:85:7d:5c:b4:5b:38:e2: ee:f5:89:ed:14:f7:21:32:0f:9a:29:6c:fe:da:35: 02:4c:a4:8c:97:2a:4e:e4:7d:78:7b:56:d3:65:f8: 4f:d8:04:99:d9:a0:67:c3:47:f1:e8:f1:c4:34:44: b8:04:26:4e:a3:98:b5:f1:c5:af:1e:ae:fb:56:bc: 2e:4d:e8:e7:af:17:de:f7:4c:f3:00:fe:5e:9c:28: 97:e1:84:cd:9a:8f:c1:49:cd:80:eb:49:49:d9:5b: cc:66:c3:e6:a7:39:25:c4:2d:cc:9d:eb:b3:46:6d: 5a:b7:26:5c:46:97:8f:ac:8c:e0:98:6f:00:c6:09: 68:34:1f:e3:0f:8b:d9:88:c4:a3:52:43:90:d4:16: a5:13:b2:0b:97:a1:45:d5:da:fa:0b:b2:3c:73:f0: 5c:37:7b:4f:09:3e:2e:c8:11:fd:8b:db:6f:21:70: 96:d1:23:97:be:c1:ba:37:ba:da:9c:e4:ca:c8:0b: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:05:35:B2:FC:4C:0F:F5:A5:DB:6F:7C:37:E4:33:72:17:A1:E5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6c:9e:3d:a9:ec:1e:8c:b5:9a:26:62:72:ac:72:d1:a5:5e: 91:18:33:4e:7c:7e:a5:33:75:83:5d:5b:1c:82:23:d2:9c:14: cf:b3:78:67:db:7d:b3:1b:e8:03:47:07:f9:bd:a0:4d:52:1f: 99:b4:bc:f2:9d:87:4c:da:53:51:22:bb:39:81:bb:60:1b:74: 69:0f:89:58:5d:bb:00:9a:4d:d5:be:54:60:6c:6d:c4:34:b2: 2d:07:0e:d6:e9:42:a5:4a:d3:7c:76:5a:95:84:eb:77:2f:30: 78:9b:49:9a:80:ce:9a:72:dc:86:ed:25:e6:89:6a:ec:60:07: 52:db:34:6c:aa:4d:1d:02:87:33:cc:ad:81:bb:83:c1:b6:fc: b4:e7:99:81:1e:f0:04:2e:d5:51:85:af:d8:74:e0:98:99:16: e1:9b:88:01:5c:cb:51:70:87:7d:36:d6:b3:63:61:21:c4:22: 2d:78:2d:24:22:63:b9:6b:d4:e9:07:95:7e:b8:81:85:0a:8f: 1e:02:6b:07:9f:95:b6:b4:dd:0f:61:0b:f1:0b:67:e5:91:ce: 46:0b:12:3c:53:10:9e:25:bf:74:06:ae:2a:94:91:2b:21:aa: 88:15:9c:ba:a9:73:17:06:08:1a:56:45:6a:1c:85:8b:1c:0f: 77:64:a9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78wOHrpFaDo+3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTMxNTQ1ZTQtNDAxZi00YjYyLTgyYzctMmI3ODk0YzcxMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfgYqqRGRNQaeTXjQ/1y0vn80rqD1RRAw3AM tXfPobT3bSkeJUMcaIvjVZKAsmFj5YwOMuv5sP0lz7U++z4+Ob/qhoV9XLRbOOLu 9YntFPchMg+aKWz+2jUCTKSMlypO5H14e1bTZfhP2ASZ2aBnw0fx6PHENES4BCZO o5i18cWvHq77VrwuTejnrxfe90zzAP5enCiX4YTNmo/BSc2A60lJ2VvMZsPmpzkl xC3MneuzRm1atyZcRpePrIzgmG8AxgloNB/jD4vZiMSjUkOQ1BalE7ILl6FF1dr6 C7I8c/BcN3tPCT4uyBH9i9tvIXCW0SOXvsG6N7ranOTKyAtKLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8FNbL8TA/1pdtvfDfkM3IXoeU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzkyNzJmNjktZDI3OC0z ZTI0LWIyZjktMjFlN2FhOGYyMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpsnj2p7B6MtZomYnKsctGlXpEYM058fqUzdYNdWxyCI9KcFM+zeGfb fbMb6ANHB/m9oE1SH5m0vPKdh0zaU1EiuzmBu2AbdGkPiVhduwCaTdW+VGBsbcQ0 si0HDtbpQqVK03x2WpWE63cvMHibSZqAzppy3IbtJeaJauxgB1LbNGyqTR0ChzPM rYG7g8G2/LTnmYEe8AQu1VGFr9h04JiZFuGbiAFcy1Fwh3021rNjYSHEIi14LSQi Y7lr1OkHlX64gYUKjx4Caweflba03Q9hC/ELZ+WRzkYLEjxTEJ4lv3QGriqUkSsh qogVnLqpcxcGCBpWRWochYscD3dkqfs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:04 2025 by rpki-client