$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa File: f036f6d8-d97e-3966-b183-31069d2e0590.roa (raw, json) Hash identifier: mqZVehUqsGrOzPE3seaissQLIxvVMMHH+wr6lbEO2SQ= Subject key identifier: 68:F4:96:BD:6E:07:0C:0B:D3:95:46:BB:79:BB:05:47:8D:28:02:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E65510058D16A03E8D28C540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 104.31.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:10:05:8d:16:a0:3e:8d:28:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=3809b786-e5fa-4893-92e3-ea811c5d6869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5c:f4:35:36:35:00:48:0c:78:20:2a:74:32: 69:4b:5e:23:9a:4d:1f:84:42:51:5d:0c:01:ed:9f: 4c:ba:c6:a1:0e:74:e6:90:b3:b5:8c:44:ba:2d:69: c3:63:10:8f:1c:06:4f:02:cf:7e:b3:9e:dd:89:0b: a4:d6:d1:fc:0f:2f:ce:71:90:f9:38:27:ad:6f:fd: 80:1d:12:a0:3c:8f:d6:52:61:d1:ba:33:04:36:be: 28:96:5c:f7:80:9c:fa:1c:61:7b:8e:ec:19:27:25: ab:91:52:eb:60:0e:c6:9c:0b:63:ff:b5:76:87:d2: bd:07:5a:85:0b:ea:10:53:52:b8:49:a0:ec:42:00: 7b:db:48:e6:72:06:98:e0:b2:97:6e:d3:29:85:51: 0d:2e:6f:36:ef:7b:5d:0f:2e:18:51:27:5b:c6:a4: 98:53:c0:b0:55:4f:ed:04:dd:89:b5:89:c2:1f:58: ca:16:13:6e:33:36:71:ef:e1:50:e8:4b:d2:21:93: fe:41:8d:4b:64:d1:21:fa:76:01:d3:18:c7:b8:3d: 9d:6c:58:fb:c9:1c:f7:97:3f:60:a2:23:a1:26:6b: ce:89:98:d1:dc:c6:2a:46:06:25:25:59:e7:e6:73: 0d:5f:cd:c1:9e:a3:c7:32:55:cd:d2:b2:23:24:32: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:96:BD:6E:07:0C:0B:D3:95:46:BB:79:BB:05:47:8D:28:02:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.31.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cd:12:cf:cd:50:8a:f8:40:0b:1c:f5:45:1f:04:a2:57:b9: b6:d8:59:db:24:c7:28:18:08:2b:af:74:d2:ba:a2:f6:b6:62: 2f:1a:aa:ae:56:2d:e9:7a:d9:05:be:1f:69:d1:23:13:1c:95: fc:b5:86:63:1d:1e:76:c3:cb:d1:53:1f:26:80:94:7f:73:b8: d6:e2:2f:87:90:39:e2:62:65:12:28:19:c0:c5:c2:ec:fd:9f: 6c:b0:eb:55:fa:94:94:b6:61:a1:0e:d6:48:71:7e:86:e2:3c: f8:e9:c3:14:67:f5:12:f2:72:fd:af:db:92:3f:a6:f7:c1:c4: c9:00:44:22:fc:1a:ea:7d:5e:b3:ad:b8:e4:e1:3f:00:44:2d: 7d:d4:7c:cd:f6:eb:0f:d2:68:26:5c:0c:9d:28:15:64:08:51: c8:1b:2a:bf:2b:42:c6:57:74:50:a7:fb:65:96:64:ca:0a:99: 54:15:0f:79:ba:22:ac:7c:ea:8e:52:e2:7f:fe:7e:92:83:8f: 26:10:0c:50:7e:04:bc:33:1b:25:b0:6c:12:c7:27:90:9a:08: 62:79:10:6f:2f:74:d3:c6:6a:b7:6e:ea:50:10:8f:f6:b7:25: 86:d9:0e:d9:e3:07:5f:90:d7:43:56:ad:1a:33:d7:57:26:cf: cf:cd:c5:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVRAFjRagPo0oxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MzgwOWI3ODYtZTVmYS00ODkzLTkyZTMtZWE4MTFjNWQ2ODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1z0NTY1AEgMeCAqdDJpS14jmk0fhEJRXQwB 7Z9MusahDnTmkLO1jES6LWnDYxCPHAZPAs9+s57diQuk1tH8Dy/OcZD5OCetb/2A HRKgPI/WUmHRujMENr4ollz3gJz6HGF7juwZJyWrkVLrYA7GnAtj/7V2h9K9B1qF C+oQU1K4SaDsQgB720jmcgaY4LKXbtMphVENLm8273tdDy4YUSdbxqSYU8CwVU/t BN2JtYnCH1jKFhNuMzZx7+FQ6EvSIZP+QY1LZNEh+nYB0xjHuD2dbFj7yRz3lz9g oiOhJmvOiZjR3MYqRgYlJVnn5nMNX83BnqPHMlXN0rIjJDJW/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj0lr1uBwwL05VGu3m7BUeNKAJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjAzNmY2ZDgtZDk3ZS0z OTY2LWIxODMtMzEwNjlkMmUwNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTNEs/NUIr4QAsc9UUfBKJXubbYWdskxygYCCuvdNK6ova2Yi8aqq5W Lel62QW+H2nRIxMclfy1hmMdHnbDy9FTHyaAlH9zuNbiL4eQOeJiZRIoGcDFwuz9 n2yw61X6lJS2YaEO1khxfobiPPjpwxRn9RLycv2v25I/pvfBxMkARCL8Gup9XrOt uOThPwBELX3UfM326w/SaCZcDJ0oFWQIUcgbKr8rQsZXdFCn+2WWZMoKmVQVD3m6 Iqx86o5S4n/+fpKDjyYQDFB+BLwzGyWwbBLHJ5CaCGJ5EG8vdNPGardu6lAQj/a3 JYbZDtnjB1+Q10NWrRoz11cmz8/Nxdw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:55:23 2025 by rpki-client