$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec291f74-3af2-3b38-ade4-53f2d3066186.roa File: ec291f74-3af2-3b38-ade4-53f2d3066186.roa (raw, json) Hash identifier: iumvsn0SLeCZJY74ci9FMy53tkimicLW0X4R7oxk0mU= Subject key identifier: 50:89:5E:30:64:2C:A9:AB:2A:43:26:86:13:6D:65:C6:0F:CD:29:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849D164FD12725BB9CE46A3DFC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec291f74-3af2-3b38-ade4-53f2d3066186.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 104.23.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fd:12:72:5b:b9:ce:46:a3:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=cbe546fe-f00f-4037-905c-9397312fd6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:f8:bf:46:9e:21:c0:92:ef:37:82:b6:2a: 26:60:45:16:d2:48:94:e2:b8:0a:b1:dc:87:6f:44: 1d:28:33:45:ea:74:b5:bc:f0:4c:3f:6e:8d:e0:16: 9d:80:d7:76:5e:23:26:95:af:74:0b:20:7e:8e:a3: 64:db:b1:3f:3f:7d:2b:94:ed:44:88:de:31:50:ed: 53:28:3c:1e:2e:84:79:64:f5:b1:46:c1:6f:27:6b: 08:52:44:72:20:2c:5d:15:7b:9c:9e:43:b9:64:e8: 7c:17:f0:01:66:6b:db:22:6e:c5:f6:11:67:2f:a5: 0a:38:c5:4d:4a:93:f5:23:83:46:bf:8e:25:b0:88: 91:54:8e:99:4b:6d:4f:ae:23:38:7e:3b:74:00:cc: fa:72:40:08:b6:e2:52:42:1b:70:b4:22:0a:68:72: 04:63:6c:5a:41:bb:e5:04:2f:07:4f:7a:cd:20:95: ac:27:1a:6f:a9:cc:24:4f:ec:53:d6:1c:d2:d1:54: 79:cc:64:72:2d:a7:83:0b:79:1d:1d:95:ff:03:d2: fc:39:92:db:64:21:26:0c:84:dd:fb:ce:e1:36:38: 32:78:55:20:2a:61:cb:75:3c:c7:15:10:00:f6:21: eb:d4:8b:65:a5:12:11:81:7e:0b:ff:33:a8:2d:dd: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:89:5E:30:64:2C:A9:AB:2A:43:26:86:13:6D:65:C6:0F:CD:29:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec291f74-3af2-3b38-ade4-53f2d3066186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:37:97:4a:01:91:b1:ad:e9:89:cb:d0:fa:43:9c:46:ce:01: 55:a1:9b:52:4e:d0:4f:40:8d:f4:ee:e2:ea:1b:a8:e0:27:55: e0:59:c4:8f:1f:8d:b7:a8:02:0e:10:a2:2e:55:5f:28:86:d8: a9:0a:67:05:eb:15:e1:1f:98:74:71:2f:6f:da:f0:ea:cf:1b: 4a:28:06:80:ae:8f:52:66:84:c2:f8:ad:10:b3:03:55:b4:68: ef:ef:f7:ee:6b:ad:be:4f:81:5a:29:26:cb:dc:5a:57:12:5e: 3b:dc:fb:b0:11:eb:db:38:d5:69:58:11:f5:21:32:16:2e:3d: 69:73:9d:ad:26:e8:70:dd:87:c8:3e:f5:ed:34:5a:1b:74:6e: c1:b6:e0:6b:35:8e:77:b5:64:fe:50:7b:26:47:d9:7a:02:ff: e0:28:d6:c1:aa:41:3b:17:3f:0d:df:01:a4:c4:db:22:62:02: 41:7d:9f:e0:d5:59:61:ba:fb:94:11:fc:34:57:9c:2a:76:3b: 68:39:1b:98:63:01:7e:55:8f:05:91:2a:41:89:7a:27:00:5f: fc:5b:63:cb:bb:54:e7:ed:ee:94:8c:69:76:ca:a9:74:3a:7b: ff:57:01:99:da:94:0a:78:57:fa:e0:93:38:cc:f1:82:04:a7: 7d:d6:9e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZP0Sclu5zkaj38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk Y2JlNTQ2ZmUtZjAwZi00MDM3LTkwNWMtOTM5NzMxMmZkNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTf4v0aeIcCS7zeCtiomYEUW0kiU4rgKsdyH b0QdKDNF6nS1vPBMP26N4BadgNd2XiMmla90CyB+jqNk27E/P30rlO1EiN4xUO1T KDweLoR5ZPWxRsFvJ2sIUkRyICxdFXucnkO5ZOh8F/ABZmvbIm7F9hFnL6UKOMVN SpP1I4NGv44lsIiRVI6ZS21PriM4fjt0AMz6ckAItuJSQhtwtCIKaHIEY2xaQbvl BC8HT3rNIJWsJxpvqcwkT+xT1hzS0VR5zGRyLaeDC3kdHZX/A9L8OZLbZCEmDITd +87hNjgyeFUgKmHLdTzHFRAA9iHr1ItlpRIRgX4L/zOoLd1NxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCJXjBkLKmrKkMmhhNtZcYPzSnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWMyOTFmNzQtM2FmMi0z YjM4LWFkZTQtNTNmMmQzMDY2MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM3l0oBkbGt6YnL0PpDnEbOAVWhm1JO0E9AjfTu4uobqOAnVeBZxI8f jbeoAg4Qoi5VXyiG2KkKZwXrFeEfmHRxL2/a8OrPG0ooBoCuj1JmhML4rRCzA1W0 aO/v9+5rrb5PgVopJsvcWlcSXjvc+7AR69s41WlYEfUhMhYuPWlzna0m6HDdh8g+ 9e00Wht0bsG24Gs1jne1ZP5QeyZH2XoC/+Ao1sGqQTsXPw3fAaTE2yJiAkF9n+DV WWG6+5QR/DRXnCp2O2g5G5hjAX5VjwWRKkGJeicAX/xbY8u7VOft7pSMaXbKqXQ6 e/9XAZnalAp4V/rgkzjM8YIEp33Wnmc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:51:36 2025 by rpki-client