$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa File: da9a4408-8b68-391a-8e54-a150697293fa.roa (raw, json) Hash identifier: D2kcI0Wsm6GfH0m5aVsEAamMQQFUB/rK3RFVWzyrHHo= Subject key identifier: 95:8B:C1:62:1D:C6:03:08:89:02:93:79:EE:30:4C:EC:D2:55:F8:5B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E65502E8DB517CCF688BCE40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 104.31.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:02:e8:db:51:7c:cf:68:8b:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=9d716b1a-46d7-4828-a80d-69cfa43bf693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:06:04:72:d8:74:a9:9b:91:f4:b0:5e:41: 83:3b:6a:38:eb:53:16:28:78:04:dc:9c:94:86:e3: d3:b7:b2:da:1f:b9:74:ca:56:62:3d:15:b4:3e:d5: a0:97:b6:f8:78:b9:d3:25:29:49:d0:cf:78:d3:b4: ef:52:7f:1c:7b:e9:da:cf:31:9f:c1:cf:ab:5f:2e: e6:2f:9a:ec:3b:0a:7c:ec:8c:8f:65:a4:3a:97:20: 15:5c:88:31:22:eb:8b:ac:d8:ac:83:c8:43:c5:f7: 95:7c:4a:24:5f:54:b0:e6:81:5d:0d:e3:2a:e1:c0: 1b:37:02:d2:e7:8b:b2:01:94:ea:a9:fc:68:04:ad: 5a:81:43:0e:92:e7:c2:20:9e:7d:68:23:84:c6:3b: 2c:12:41:4f:55:36:ff:d2:3b:b2:50:63:a1:82:7f: cd:52:50:0a:e0:5b:24:75:95:49:42:c9:7f:aa:24: 0c:18:8e:c2:4a:df:7f:f4:98:4d:78:48:c7:b2:57: 09:2d:88:5d:f0:20:37:48:80:f8:94:09:e1:cf:ac: 66:8f:ee:56:f3:27:9d:e3:ca:22:d2:e2:e0:c7:76: ed:8e:53:27:53:9f:6c:74:34:72:a3:40:7a:03:d6: 35:47:66:ef:e0:f2:01:c4:43:e5:01:5c:6d:84:f9: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:C1:62:1D:C6:03:08:89:02:93:79:EE:30:4C:EC:D2:55:F8:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:e4:ae:48:b8:30:3a:68:f9:96:9b:47:50:1f:68:7e:24:2f: f4:34:db:11:6d:e6:79:20:d7:fc:e6:a6:9f:10:6a:75:00:de: 04:87:16:25:0a:a7:f4:af:dc:bd:0d:49:16:ac:67:a5:34:4c: 41:f0:0b:d7:81:9d:ac:85:1f:33:15:da:ed:3b:50:27:03:2d: 4e:52:4e:4f:15:49:ba:0b:a3:7a:98:db:31:2f:11:94:22:3f: 48:ab:a9:3a:92:17:e2:3b:73:3d:53:de:b6:2b:58:08:69:8b: bf:9c:70:8e:dc:94:9a:23:d7:aa:57:aa:a4:7f:87:9f:52:d0: 5a:28:ff:3f:c1:71:eb:29:ca:68:9a:ce:e1:98:f6:d7:36:e7: 39:ce:b8:ad:3b:0a:f9:e4:bd:8c:ee:79:cb:65:1d:05:c0:03: 7e:83:1f:d5:5a:d7:e3:a2:8e:e7:cb:a3:45:4f:6d:43:ac:b6: ea:e5:1e:92:90:c9:a3:92:48:49:04:33:b8:65:e3:2e:87:d4: e6:a4:08:2e:57:a5:de:18:b7:4d:10:aa:3d:44:bd:62:74:59: 5a:45:46:f0:60:4e:45:f3:a4:99:e8:e6:78:a5:af:88:0c:e8: 98:22:1b:70:87:a2:35:7c:6f:29:5e:a0:09:7b:a2:ed:22:4d: 11:22:8e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQLo21F8z2iLzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk OWQ3MTZiMWEtNDZkNy00ODI4LWE4MGQtNjljZmE0M2JmNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEkGBHLYdKmbkfSwXkGDO2o461MWKHgE3JyU huPTt7LaH7l0ylZiPRW0PtWgl7b4eLnTJSlJ0M9407TvUn8ce+nazzGfwc+rXy7m L5rsOwp87IyPZaQ6lyAVXIgxIuuLrNisg8hDxfeVfEokX1Sw5oFdDeMq4cAbNwLS 54uyAZTqqfxoBK1agUMOkufCIJ59aCOExjssEkFPVTb/0juyUGOhgn/NUlAK4Fsk dZVJQsl/qiQMGI7CSt9/9JhNeEjHslcJLYhd8CA3SID4lAnhz6xmj+5W8yed48oi 0uLgx3btjlMnU59sdDRyo0B6A9Y1R2bv4PIBxEPlAVxthPmBZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWLwWIdxgMIiQKTee4wTOzSVfhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE5YTQ0MDgtOGI2OC0z OTFhLThlNTQtYTE1MDY5NzI5M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLkrki4MDpo+ZabR1AfaH4kL/Q02xFt5nkg1/zmpp8QanUA3gSHFiUK p/Sv3L0NSRasZ6U0TEHwC9eBnayFHzMV2u07UCcDLU5STk8VSboLo3qY2zEvEZQi P0irqTqSF+I7cz1T3rYrWAhpi7+ccI7clJoj16pXqqR/h59S0Foo/z/Bcespymia zuGY9tc25znOuK07CvnkvYzuectlHQXAA36DH9Va1+OijufLo0VPbUOsturlHpKQ yaOSSEkEM7hl4y6H1OakCC5Xpd4Yt00Qqj1EvWJ0WVpFRvBgTkXzpJno5nilr4gM 6JgiG3CHojV8byleoAl7ou0iTREijuE= -----END CERTIFICATE-----Generated at Fri Jun 6 17:17:57 2025 by rpki-client