$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa File: caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa (raw, json) Hash identifier: sJPZPFPtOhSthjXH3WiHtHlpcG05i5upZP+xauCONH4= Subject key identifier: 4E:3A:2D:D3:6B:F8:89:2D:22:BA:1B:8B:D1:B2:31:40:2C:20:BA:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849DF24F22F3CC5301A3B54F180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa Signing time: Fri 16 May 2025 11:13:32 +0000 ROA not before: Fri 16 May 2025 11:13:32 +0000 ROA not after: Thu 14 Aug 2025 11:13:32 +0000 asID: 13335 IP address blocks: 104.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:24:f2:2f:3c:c5:30:1a:3b:54:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 16 11:13:32 2025 GMT Not After : Aug 14 11:13:32 2025 GMT Subject: CN=85dba269-480b-4cc8-94cd-6568f4df0e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:93:60:30:fd:a6:92:5e:00:5b:2f:e4:5b: 2a:d3:07:14:7a:c0:e9:f8:18:ef:e6:fe:24:45:7f: 7e:63:b0:20:de:ec:6e:02:da:df:3e:9e:cf:30:e0: 03:8c:45:4c:45:4e:7e:37:7b:ad:39:ee:e8:25:47: c7:80:0d:f5:68:f9:35:09:08:56:79:2b:3c:8e:b8: d0:34:5b:98:e9:97:bb:2c:c5:45:b1:3b:5f:d4:55: 79:0c:24:1a:14:89:65:5b:7f:49:ff:2d:12:77:60: 66:68:07:55:0c:38:fa:60:90:b0:5a:20:50:57:cb: ab:50:6f:e9:4e:15:aa:76:53:11:03:b2:cc:90:9a: ff:21:90:12:68:a7:78:b5:b4:10:2c:fe:c1:8b:ac: 05:2c:b6:99:2b:fb:3e:a7:4e:0a:aa:eb:2b:d0:39: 4e:34:a3:42:8a:26:d9:52:65:ff:bd:c9:df:ad:b2: ce:a0:5b:2f:f6:0c:4d:cb:32:8c:19:f6:13:c2:e4: 5d:7b:80:d6:ee:2d:9e:47:3c:e6:2f:2c:51:ee:6c: e2:7f:4a:1c:8a:04:02:4a:81:89:e6:42:2e:c3:0c: 99:3c:91:fb:94:8f:3d:37:96:0d:e9:05:7f:b5:7e: 7c:8f:73:6e:cc:84:97:a2:95:05:ee:f5:5c:2d:d1: d2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:2D:D3:6B:F8:89:2D:22:BA:1B:8B:D1:B2:31:40:2C:20:BA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caadc98b-2a88-3bdd-9db0-6d98f2f845f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d0:3b:19:3e:9e:3b:01:e6:10:be:d4:85:35:4e:53:45:5e: 62:12:29:26:82:48:2d:1a:a2:50:72:d9:98:5a:bb:79:1f:e9: 67:3c:e9:a6:2d:cc:a5:63:18:77:81:d3:46:2e:33:af:27:b4: 9b:6a:f0:2a:60:dc:64:49:76:70:b4:d1:7e:f6:fe:5c:fd:a6: b5:45:d9:85:e1:89:8a:4d:48:9d:c7:ef:a6:65:6e:72:c3:26: 05:35:53:56:ee:58:2b:58:f3:a2:8f:9d:bb:4d:bd:2c:2c:80: 50:eb:8f:4a:68:3c:b0:24:26:9a:1a:06:0c:77:80:65:8b:18: 40:4f:87:e4:bc:7e:49:56:1b:e9:2e:97:ca:96:31:78:19:a8: 11:bf:96:ec:d1:dc:32:a5:2c:2d:08:06:80:c6:ba:c3:95:60: a4:a0:e6:a0:58:a2:55:94:a8:a5:a4:91:a3:17:51:3b:31:e4: c0:7b:aa:b8:1a:ae:37:ed:59:3a:0f:90:da:47:c0:1c:cb:90: fa:9b:3f:38:bd:84:63:a0:60:d4:1f:67:03:99:59:94:eb:04: 23:90:0b:e1:05:12:b6:1a:f5:36:06:d6:e6:1a:19:fe:f2:5d: 12:23:03:02:7e:44:d8:52:c8:a5:6c:c2:d7:9f:9b:8e:af:70: 2d:d8:59:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfJPIvPMUwGjtU8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxNjExMTMzMloXDTI1MDgxNDExMTMzMlowLzEtMCsGA1UEAxMk ODVkYmEyNjktNDgwYi00Y2M4LTk0Y2QtNjU2OGY0ZGYwZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06OTYDD9ppJeAFsv5Fsq0wcUesDp+Bjv5v4k RX9+Y7Ag3uxuAtrfPp7PMOADjEVMRU5+N3utOe7oJUfHgA31aPk1CQhWeSs8jrjQ NFuY6Ze7LMVFsTtf1FV5DCQaFIllW39J/y0Sd2BmaAdVDDj6YJCwWiBQV8urUG/p ThWqdlMRA7LMkJr/IZASaKd4tbQQLP7Bi6wFLLaZK/s+p04Kqusr0DlONKNCiibZ UmX/vcnfrbLOoFsv9gxNyzKMGfYTwuRde4DW7i2eRzzmLyxR7mzif0ocigQCSoGJ 5kIuwwyZPJH7lI89N5YN6QV/tX58j3NuzISXopUF7vVcLdHSXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE46LdNr+IktIrobi9GyMUAsILrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FhZGM5OGItMmE4OC0z YmRkLTlkYjAtNmQ5OGYyZjg0NWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvQOxk+njsB5hC+1IU1TlNFXmISKSaCSC0aolBy2Zhau3kf6Wc86aYt zKVjGHeB00YuM68ntJtq8Cpg3GRJdnC00X72/lz9prVF2YXhiYpNSJ3H76ZlbnLD JgU1U1buWCtY86KPnbtNvSwsgFDrj0poPLAkJpoaBgx3gGWLGEBPh+S8fklWG+ku l8qWMXgZqBG/luzR3DKlLC0IBoDGusOVYKSg5qBYolWUqKWkkaMXUTsx5MB7qrga rjftWToPkNpHwBzLkPqbPzi9hGOgYNQfZwOZWZTrBCOQC+EFErYa9TYG1uYaGf7y XRIjAwJ+RNhSyKVswtefm46vcC3YWbo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:46 2025 by rpki-client