$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de6e148b-7970-3561-95d3-cf37c99c5b96.roa File: de6e148b-7970-3561-95d3-cf37c99c5b96.roa (raw, json) Hash identifier: n2itY0g0IAZYJLYCkgaaz9OBImXSlQS7TQTTaA5BlHw= Subject key identifier: 4B:53:46:FC:26:9B:4C:7C:80:BA:60:3B:00:0F:53:78:DB:D3:48:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC9B57E96560BD10AEA40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de6e148b-7970-3561-95d3-cf37c99c5b96.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.18.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c9:b5:7e:96:56:0b:d1:0a:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=090ec113-20ee-4f0d-8d27-f6d96b98a6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:e9:44:70:c3:78:40:1f:62:e3:30:c1:37: 10:65:2f:3e:24:03:a8:08:72:ad:1e:5a:13:ce:40: e1:86:50:2f:45:43:55:7d:e5:88:38:a0:c3:54:cd: bd:26:b4:6c:4a:f8:ae:0e:67:db:d3:3a:e9:9e:f0: b2:0d:2c:1f:15:d9:0f:79:79:d0:11:ed:f8:e3:08: 96:85:24:cf:c7:02:4c:8c:b3:1f:5f:d7:31:73:ac: 68:20:22:1b:a8:52:a6:44:29:f2:d2:11:f9:48:dc: fc:b2:5f:ff:e2:67:07:63:c7:38:bc:92:fd:e9:a4: 2d:1b:9c:89:8d:a8:ac:70:13:6b:e7:10:4a:79:3c: d4:0c:94:c3:54:8b:07:20:2e:3f:50:b4:15:d1:3f: 3c:4d:26:e1:99:af:72:5a:57:91:7a:48:d5:12:d1: ee:07:9e:37:dd:9a:57:b7:68:04:f3:ac:d0:5d:1a: 70:34:10:37:2e:9c:db:e4:56:74:4c:55:13:52:2b: 95:cc:ef:37:80:f4:12:4a:6b:31:9e:a2:99:86:bf: ed:55:0e:dc:f4:ba:b8:d7:eb:67:26:7f:bf:1a:7f: e0:db:6d:93:23:77:58:88:61:0a:50:0c:19:14:ae: 0e:7b:36:31:e6:9c:e7:6b:5b:1a:7d:36:d5:ed:24: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:53:46:FC:26:9B:4C:7C:80:BA:60:3B:00:0F:53:78:DB:D3:48:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de6e148b-7970-3561-95d3-cf37c99c5b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.18.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:18:d9:8e:35:d5:53:7b:4b:2c:36:03:ba:14:22:30:0d:09: b8:d8:00:98:8a:ba:8f:8e:32:7c:9e:60:c9:e4:e5:10:ac:dc: c2:93:c6:02:e3:41:57:ab:87:5f:94:2a:7b:49:b5:da:14:ea: d3:6a:f6:b3:9d:f3:bf:0e:ed:24:59:38:a5:c2:83:56:2f:d4: a7:c6:41:81:c6:cf:98:0c:ce:b8:3b:ca:2d:a6:14:eb:41:e4: f3:cb:ef:08:25:fc:74:f5:a9:db:04:8c:f1:40:ae:68:7a:34: f5:4a:0c:2b:01:65:fe:67:4a:a7:22:3d:8b:38:ee:62:c0:9e: 75:51:2b:87:04:81:c8:d0:2d:a5:e6:3d:35:5d:ff:44:6f:ee: ed:e7:88:01:6a:92:13:eb:27:4b:d8:8e:98:0e:d1:c0:96:14: 40:d8:db:87:54:d7:8b:c9:37:30:6d:97:9b:29:34:d7:3f:2e: 46:9e:26:88:f0:a0:80:22:c6:44:6f:81:ca:64:f7:30:b0:e4: d6:9a:e8:f9:0d:20:36:c8:bd:35:5c:05:a8:06:15:4a:e7:55: 5a:4e:73:9d:8a:b1:71:0d:1e:da:8c:cd:2d:dd:17:5c:4d:97: 0e:fa:66:27:41:eb:be:9a:7d:61:3b:52:96:60:0b:5c:94:12: 9d:63:d0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78m1fpZWC9EK6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MDkwZWMxMTMtMjBlZS00ZjBkLThkMjctZjZkOTZiOThhNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptTpRHDDeEAfYuMwwTcQZS8+JAOoCHKtHloT zkDhhlAvRUNVfeWIOKDDVM29JrRsSviuDmfb0zrpnvCyDSwfFdkPeXnQEe344wiW hSTPxwJMjLMfX9cxc6xoICIbqFKmRCny0hH5SNz8sl//4mcHY8c4vJL96aQtG5yJ jaiscBNr5xBKeTzUDJTDVIsHIC4/ULQV0T88TSbhma9yWleRekjVEtHuB5433ZpX t2gE86zQXRpwNBA3Lpzb5FZ0TFUTUiuVzO83gPQSSmsxnqKZhr/tVQ7c9Lq41+tn Jn+/Gn/g222TI3dYiGEKUAwZFK4OezYx5pzna1safTbV7SQVawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtTRvwmm0x8gLpgOwAPU3jb00hIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU2ZTE0OGItNzk3MC0z NTYxLTk1ZDMtY2YzN2M5OWM1Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYY2Y411VN7Syw2A7oUIjANCbjYAJiKuo+OMnyeYMnk5RCs3MKTxgLj QVerh1+UKntJtdoU6tNq9rOd878O7SRZOKXCg1Yv1KfGQYHGz5gMzrg7yi2mFOtB 5PPL7wgl/HT1qdsEjPFArmh6NPVKDCsBZf5nSqciPYs47mLAnnVRK4cEgcjQLaXm PTVd/0Rv7u3niAFqkhPrJ0vYjpgO0cCWFEDY24dU14vJNzBtl5spNNc/LkaeJojw oIAixkRvgcpk9zCw5Naa6PkNIDbIvTVcBagGFUrnVVpOc52KsXENHtqMzS3dF1xN lw76ZidB676afWE7UpZgC1yUEp1j0J4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:54:22 2025 by rpki-client