$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa File: d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa (raw, json) Hash identifier: mhulArNs7360cGLLpZNg00rJ1LdafDIxLNPyYIl6oXk= Subject key identifier: BF:3B:94:A3:C2:3B:7A:64:19:16:42:30:81:FB:91:20:2D:02:CC:E6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD5A214E82C8DD4E8C880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.21.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d5:a2:14:e8:2c:8d:d4:e8:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=77b03175-9fd6-46ba-bb32-72f60ccc6e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:71:4f:a8:09:7b:56:11:06:9b:80:99:81: 26:be:a8:80:a4:01:6f:99:b3:6f:66:4e:9f:1c:34: 65:99:93:63:16:1b:1d:89:d4:f6:29:33:5b:74:5c: 3b:a8:12:b4:06:70:fe:28:f5:70:87:6c:3e:60:53: fa:89:74:51:bf:16:46:1a:ff:19:73:69:08:8b:c6: 90:63:cd:3e:d5:de:6c:4f:14:d7:0f:16:58:98:11: 7e:07:35:e0:1e:d4:ff:35:8a:e8:d0:be:0f:9f:9d: b9:27:1f:a7:61:db:13:6e:03:1c:e5:b3:51:24:b6: 1a:f7:69:21:6c:fb:80:1e:0e:e5:f7:13:ad:a2:fb: d2:c6:0f:91:5c:7f:12:58:7d:33:dd:0e:c3:35:07: b2:9c:86:ec:c5:d1:c7:fe:a7:9c:87:c6:19:4d:c3: 64:10:a9:f7:bf:62:c9:36:c5:c1:d1:94:08:39:4d: 8e:b7:5e:60:07:68:d0:58:c4:12:62:07:19:da:db: 4d:40:f7:c7:72:e3:e2:83:ed:7d:10:2c:08:e3:41: f1:e1:e8:ba:69:88:27:68:36:51:73:f8:32:b7:3b: 66:c6:6e:8e:c7:f0:08:bf:44:61:05:9b:82:d3:32: 5d:03:1f:c0:28:5d:84:54:de:5b:45:ad:2a:39:4f: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:94:A3:C2:3B:7A:64:19:16:42:30:81:FB:91:20:2D:02:CC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b0:2c:8b:00:63:9a:e9:a8:f1:bc:ee:d4:c2:c5:91:fb:eb: b3:fd:fd:b9:23:d5:ad:1f:a4:7d:da:06:5f:6d:f4:f8:b0:f4: e2:45:ea:80:0d:89:26:8b:98:79:ee:12:52:65:6a:0d:06:35: 2e:93:b8:f1:f4:5d:5d:90:d5:7b:6a:31:5d:38:73:b8:71:f9: 0f:c7:1b:10:bf:10:dd:36:68:99:aa:b9:d7:df:dc:ea:70:4b: f2:c7:ef:ed:25:39:af:ea:48:49:98:2a:8b:49:0f:e5:a5:04: 79:65:71:c9:cd:ec:42:c8:c5:d2:75:27:c0:d6:8f:55:57:d1: 0e:b3:c6:14:8c:3f:9a:87:8b:f0:45:ca:9c:b2:03:dd:0a:e8: e8:86:cd:69:28:1b:99:b1:09:b6:a3:fe:29:92:c2:ad:f6:08: c2:d5:c8:83:3e:1c:d0:62:cf:9e:f1:b5:db:d2:e4:90:d9:2c: 1e:08:d7:b3:e7:ee:55:cc:0a:96:6d:51:c6:0e:ed:62:03:71: 18:3e:4d:78:11:6e:8c:17:e9:30:d8:bf:36:eb:85:ff:2b:78: 65:3d:07:75:12:24:c0:41:f2:90:da:58:76:48:59:d4:26:5b: fe:8e:bb:67:ea:58:11:fc:08:db:e1:e5:c3:0e:5d:84:f3:58: f2:57:30:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79WiFOgsjdToyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NzdiMDMxNzUtOWZkNi00NmJhLWJiMzItNzJmNjBjY2M2ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zZxT6gJe1YRBpuAmYEmvqiApAFvmbNvZk6f HDRlmZNjFhsdidT2KTNbdFw7qBK0BnD+KPVwh2w+YFP6iXRRvxZGGv8Zc2kIi8aQ Y80+1d5sTxTXDxZYmBF+BzXgHtT/NYro0L4Pn525Jx+nYdsTbgMc5bNRJLYa92kh bPuAHg7l9xOtovvSxg+RXH8SWH0z3Q7DNQeynIbsxdHH/qech8YZTcNkEKn3v2LJ NsXB0ZQIOU2Ot15gB2jQWMQSYgcZ2ttNQPfHcuPig+19ECwI40Hx4ei6aYgnaDZR c/gytztmxm6Ox/AIv0RhBZuC0zJdAx/AKF2EVN5bRa0qOU9Y6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL87lKPCO3pkGRZCMIH7kSAtAszmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDBkZTIyYjYtMGNiMS0z N2ZkLWJlNzAtYjJjOTNmZGE3Y2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIywLIsAY5rpqPG87tTCxZH767P9/bkj1a0fpH3aBl9t9Piw9OJF6oAN iSaLmHnuElJlag0GNS6TuPH0XV2Q1XtqMV04c7hx+Q/HGxC/EN02aJmqudff3Opw S/LH7+0lOa/qSEmYKotJD+WlBHllccnN7ELIxdJ1J8DWj1VX0Q6zxhSMP5qHi/BF ypyyA90K6OiGzWkoG5mxCbaj/imSwq32CMLVyIM+HNBiz57xtdvS5JDZLB4I17Pn 7lXMCpZtUcYO7WIDcRg+TXgRbowX6TDYvzbrhf8reGU9B3USJMBB8pDaWHZIWdQm W/6Ou2fqWBH8CNvh5cMOXYTzWPJXMMY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:32:39 2025 by rpki-client