$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca97ada7-9c40-3952-a9b3-2cc7e909211f.roa File: ca97ada7-9c40-3952-a9b3-2cc7e909211f.roa (raw, json) Hash identifier: C3BT0Zzn+SHKSZUQpmj56uQm47j2CktgdSMtQ9VyqXk= Subject key identifier: 62:5F:ED:08:20:B8:13:25:44:63:52:26:60:AA:15:D6:E7:57:55:7A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BF1B478E074D9C1D2A60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca97ada7-9c40-3952-a9b3-2cc7e909211f.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.18.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bf:1b:47:8e:07:4d:9c:1d:2a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=3e95ecf1-8ba2-4fb6-81b4-b055ad166ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:54:75:4b:c3:11:ad:ea:b0:a9:fe:77:12:67: 27:3b:b6:88:73:fd:27:2d:71:08:97:8a:4c:9d:cf: 89:ee:6a:70:55:2a:e1:b0:34:81:82:27:43:c2:d1: 16:3b:d1:5d:92:a6:37:03:f3:38:c6:ec:2f:87:89: 7c:d0:cf:74:75:86:9c:3c:7c:da:4b:2e:53:ba:76: 3e:18:ba:20:c1:d6:b5:dc:fa:25:cd:c7:04:5b:e3: 4f:2f:77:89:41:f1:ab:f2:ff:4e:db:ca:ad:c0:71: f8:59:99:52:3b:0d:8f:0e:80:31:8b:53:bf:32:68: 4c:4c:b5:16:a3:36:97:c3:b2:45:9d:da:c8:03:96: 08:74:3d:35:e6:40:42:ae:84:c5:58:a8:50:84:e7: 5b:90:ac:62:af:3a:2c:d5:4c:6f:46:cd:7d:71:06: 55:09:9a:6f:02:99:45:de:2b:48:ea:e6:e9:f3:86: 9b:12:80:52:f6:5c:5d:a2:a8:23:82:3c:3e:9a:80: 93:18:b6:61:99:57:44:9c:b2:05:71:74:fd:1c:89: 0a:fc:d7:4a:91:5d:65:7d:c4:68:4e:ca:c6:38:af: b6:e3:70:3f:f8:d2:ec:1c:ee:81:e8:e6:da:93:4a: 48:c3:f0:e3:6e:3b:30:61:b0:ec:d5:ff:a4:e2:06: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5F:ED:08:20:B8:13:25:44:63:52:26:60:AA:15:D6:E7:57:55:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca97ada7-9c40-3952-a9b3-2cc7e909211f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9c:7c:d1:7b:cd:d4:76:a0:ba:70:cf:e4:de:a3:23:f9:62: 9a:a7:21:e2:a6:e1:51:91:a8:44:d6:1b:b4:96:3f:48:eb:cf: 98:01:c5:ad:50:de:3f:47:f4:e3:75:8f:3c:0e:06:6e:3f:16: 07:4c:64:48:88:ff:ac:02:70:c7:3f:86:e0:ff:4a:cf:90:9d: 70:6b:d5:09:3b:0b:ec:e4:70:ee:85:bc:a8:0f:7a:9b:fe:d6: 9c:7f:06:32:eb:32:97:7b:c3:38:71:84:57:45:28:02:0c:10: 3e:a5:6e:6b:6d:4d:69:42:c3:35:bd:f0:16:c2:d1:7b:1f:a2: e6:19:a3:a9:ca:e2:29:e5:e2:ce:3d:af:5b:10:5d:0f:d9:31: dd:73:47:6d:72:32:f9:ae:15:35:41:74:0d:8c:c0:5d:48:0f: a5:27:2d:62:b3:55:49:44:51:7d:29:06:13:78:c6:60:a1:28: fb:ef:f4:eb:fe:be:2e:a1:58:e9:57:c8:70:b0:8f:7b:5d:fe: e2:76:93:14:86:69:d4:2e:bb:d2:d9:8d:84:3c:5b:b0:b0:7b: b1:fd:e1:b4:5f:2e:e9:13:52:68:34:97:8d:86:30:7d:94:68: 3e:d0:9c:89:bc:e0:db:25:34:28:d5:45:2e:50:37:3e:2d:83: df:f1:37:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtr8bR44HTZwdKmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk M2U5NWVjZjEtOGJhMi00ZmI2LTgxYjQtYjA1NWFkMTY2YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVR1S8MRreqwqf53EmcnO7aIc/0nLXEIl4pM nc+J7mpwVSrhsDSBgidDwtEWO9FdkqY3A/M4xuwvh4l80M90dYacPHzaSy5TunY+ GLogwda13PolzccEW+NPL3eJQfGr8v9O28qtwHH4WZlSOw2PDoAxi1O/MmhMTLUW ozaXw7JFndrIA5YIdD015kBCroTFWKhQhOdbkKxirzos1UxvRs19cQZVCZpvAplF 3itI6ubp84abEoBS9lxdoqgjgjw+moCTGLZhmVdEnLIFcXT9HIkK/NdKkV1lfcRo TsrGOK+243A/+NLsHO6B6Obak0pIw/DjbjswYbDs1f+k4gbKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJf7QgguBMlRGNSJmCqFdbnV1V6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2E5N2FkYTctOWM0MC0z OTUyLWE5YjMtMmNjN2U5MDkyMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBIpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGcfNF7zdR2oLpwz+TeoyP5YpqnIeKm4VGRqETWG7SWP0jrz5gBxa1Q 3j9H9ON1jzwOBm4/FgdMZEiI/6wCcMc/huD/Ss+QnXBr1Qk7C+zkcO6FvKgPepv+ 1px/BjLrMpd7wzhxhFdFKAIMED6lbmttTWlCwzW98BbC0XsfouYZo6nK4inl4s49 r1sQXQ/ZMd1zR21yMvmuFTVBdA2MwF1ID6UnLWKzVUlEUX0pBhN4xmChKPvv9Ov+ vi6hWOlXyHCwj3td/uJ2kxSGadQuu9LZjYQ8W7Cwe7H94bRfLukTUmg0l42GMH2U aD7QnIm84NslNCjVRS5QNz4tg9/xN5E= -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:12 2025 by rpki-client