$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa File: d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa (raw, json) Hash identifier: DDVDikVK+8dR2t0grv+0AgYpE80iU5z2jry8I+X9YkM= Subject key identifier: B4:7A:19:1A:C8:B1:5B:40:A4:BF:79:E9:8D:A0:24:03:B2:B0:5B:F6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD5AE8ED6D8826F00D100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.21.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d5:ae:8e:d6:d8:82:6f:00:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=d81fbafa-ed77-4f2e-9d6e-4b5cd67d3fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:27:83:af:b0:d2:17:39:08:1e:16:85:0b: b1:6c:d1:27:6d:69:ac:17:9e:79:f3:db:a0:0e:6d: 65:7a:29:33:88:32:87:dd:83:16:49:9c:5d:52:90: 3c:83:e2:a0:7e:26:9d:ed:21:92:c5:60:15:91:32: 38:98:09:76:5d:e9:ab:ba:7b:6c:3e:23:31:d9:7c: 20:10:25:52:6e:27:7a:fb:b6:ba:6a:01:24:02:ee: 5e:c7:f4:ee:d8:6f:62:44:6d:35:dd:23:cc:5e:af: 21:20:bb:e8:2c:10:bf:e2:7f:02:31:19:b3:44:16: d4:30:87:1e:97:97:ba:c5:c8:93:73:8d:f0:f4:a5: 45:a8:8b:ef:fb:c3:e5:8b:59:ba:01:b4:ac:9f:79: f2:4c:09:61:01:c0:38:64:51:cd:60:32:d8:79:24: 56:3f:6b:06:bb:96:8a:9e:5d:9f:5b:77:58:a5:ac: 82:b2:a0:65:48:7d:63:11:67:78:8a:1b:a2:52:65: a6:6c:7b:cc:88:4f:84:30:6c:aa:c6:2b:74:c6:4b: ff:11:67:d3:3a:8b:b8:81:b3:f5:06:df:15:73:f2: 6e:50:a8:de:6b:8f:7d:c6:06:31:33:4c:a0:7a:c4: e7:c4:1f:ed:35:18:50:b2:ee:8a:25:53:bb:bb:7b: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7A:19:1A:C8:B1:5B:40:A4:BF:79:E9:8D:A0:24:03:B2:B0:5B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d228ae6e-66d8-3230-ad30-12d6bfa544fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.21.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:36:3d:e9:f0:b5:e1:93:f6:45:31:d0:dd:e7:f5:73:dd:26: 32:3a:69:1b:55:5c:c6:2b:0c:b4:e5:a8:04:4a:15:b5:cf:ad: 0f:92:34:fe:e5:7d:91:97:bf:7c:10:ed:8f:99:bf:7c:f8:fd: bc:50:c0:00:5f:60:48:c6:89:4c:85:fc:59:f5:ed:4b:8d:7b: d4:ee:f4:14:81:66:b2:95:b0:0f:94:a7:8f:10:09:c5:85:b9: 6c:39:4c:ee:8d:f5:5f:17:62:f0:02:a5:2e:20:ae:16:d5:3b: bd:f9:8f:25:fd:7b:d0:3a:3e:de:0f:c1:76:8e:e1:d8:dc:8d: a4:63:9c:83:a1:ac:c4:d8:b3:97:31:71:bf:02:2b:c3:bc:40: 78:1b:e1:34:fb:72:bd:c4:28:c6:30:9d:73:36:2b:53:ab:1f: db:70:4f:de:4f:f1:7a:a1:d1:40:22:41:68:ce:2b:b1:9f:70: ef:1a:15:11:24:51:ae:d6:00:a3:2a:62:ff:17:0a:90:b8:9d: 93:5e:33:45:18:e0:23:b1:27:07:c0:42:bc:3c:8b:92:60:18: fa:48:5d:8a:3d:b2:e5:03:4c:37:9b:77:a2:c2:a3:49:b4:e2: 6f:b4:cf:bc:96:ac:6c:fc:ba:aa:e9:50:d7:c9:1a:b7:9a:85: 65:b3:cf:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79WujtbYgm8A0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZDgxZmJhZmEtZWQ3Ny00ZjJlLTlkNmUtNGI1Y2Q2N2QzZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT0ng6+w0hc5CB4WhQuxbNEnbWmsF55589ug Dm1leikziDKH3YMWSZxdUpA8g+Kgfiad7SGSxWAVkTI4mAl2XemruntsPiMx2Xwg ECVSbid6+7a6agEkAu5ex/Tu2G9iRG013SPMXq8hILvoLBC/4n8CMRmzRBbUMIce l5e6xciTc43w9KVFqIvv+8Pli1m6AbSsn3nyTAlhAcA4ZFHNYDLYeSRWP2sGu5aK nl2fW3dYpayCsqBlSH1jEWd4ihuiUmWmbHvMiE+EMGyqxit0xkv/EWfTOou4gbP1 Bt8Vc/JuUKjea499xgYxM0ygesTnxB/tNRhQsu6KJVO7u3tS8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR6GRrIsVtApL956Y2gJAOysFv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDIyOGFlNmUtNjZkOC0z MjMwLWFkMzAtMTJkNmJmYTU0NGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA2PenwteGT9kUx0N3n9XPdJjI6aRtVXMYrDLTlqARKFbXPrQ+SNP7l fZGXv3wQ7Y+Zv3z4/bxQwABfYEjGiUyF/Fn17UuNe9Tu9BSBZrKVsA+Up48QCcWF uWw5TO6N9V8XYvACpS4grhbVO735jyX9e9A6Pt4PwXaO4djcjaRjnIOhrMTYs5cx cb8CK8O8QHgb4TT7cr3EKMYwnXM2K1OrH9twT95P8Xqh0UAiQWjOK7GfcO8aFREk Ua7WAKMqYv8XCpC4nZNeM0UY4COxJwfAQrw8i5JgGPpIXYo9suUDTDebd6LCo0m0 4m+0z7yWrGz8uqrpUNfJGreahWWzzzQ= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:48 2025 by rpki-client