$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa File: f48deab7-a013-392b-a803-389dfad110a3.roa (raw, json) Hash identifier: BXk7ukBXCQj2KXSTzIjQsXAhQD2uZRTTDnyWsjNHqUY= Subject key identifier: DB:71:14:76:3A:B5:A3:23:59:C7:DA:02:47:4A:5C:CA:1A:68:CC:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC78F3E6674499767FA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.16.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c7:8f:3e:66:74:49:97:67:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=de5bef46-62c0-4692-ab2e-0e7337fb1a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:84:10:4d:99:25:22:6c:f9:a5:69:f0:ae: 65:16:18:e0:6a:32:2b:ed:25:1d:80:05:66:62:05: a1:08:45:95:38:89:96:c7:90:d8:fe:70:ef:c9:92: d4:c2:42:58:38:e4:e3:8a:b4:78:89:71:39:9f:bb: e0:e1:d1:3a:9c:dc:bf:07:24:f8:28:b1:25:29:92: 1b:83:97:51:03:5a:d2:9c:9b:a9:cd:dd:6a:93:a0: e7:f1:60:43:c6:f0:ed:9a:36:d9:cf:87:91:ae:a6: 98:39:1b:ff:d2:74:da:05:0a:d0:3f:45:53:0a:42: 05:1a:b3:e6:63:cf:b5:da:9e:42:89:e3:c2:b2:4e: 2e:49:43:28:9c:91:ce:a0:f1:2a:a6:20:19:88:50: 8f:1a:2e:e9:a1:92:3d:ae:e2:25:4c:a6:50:b4:96: 88:af:d1:f7:68:63:fb:97:30:1e:58:7b:0c:78:eb: 45:0a:40:69:d4:c5:06:51:3e:2f:13:f8:ea:5d:91: 3d:b3:46:80:c4:0e:d9:69:b8:4f:41:d1:60:d0:4e: e6:27:a6:ef:b1:bf:0d:a6:0e:a5:08:0c:be:f8:3d: 17:5f:b6:2f:c4:be:21:36:6a:bb:f1:2e:f9:7b:0c: b3:9e:78:e8:0a:6e:e9:a5:d7:c2:5d:2e:92:96:1e: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:71:14:76:3A:B5:A3:23:59:C7:DA:02:47:4A:5C:CA:1A:68:CC:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9b:8e:f8:8c:fa:4d:26:21:2c:ae:d2:21:ac:ef:fa:68:97: e0:5c:38:41:81:4d:6a:42:d9:c1:25:db:cb:52:96:c5:85:c3: 98:66:16:17:48:09:b7:10:32:b7:56:25:60:b6:ed:19:9e:6d: 57:d7:1e:fc:f2:ac:79:fe:37:f7:69:3f:d5:d8:32:95:53:78: 31:98:07:27:46:29:38:a1:2b:f0:12:e5:65:5c:cf:68:c4:6d: a9:f2:55:f5:4f:0a:6d:55:d3:01:6c:b0:70:38:ef:fe:be:bd: 32:37:bb:2e:45:78:3e:5a:87:1c:4a:42:eb:e0:d8:08:d4:14: c9:67:e5:27:1b:c4:76:27:fe:86:19:7a:f9:f5:bd:8b:f9:85: 8a:ba:d0:33:79:38:21:6a:63:e1:e3:71:0e:3b:ee:fc:e2:95: 99:75:47:86:1f:f8:1f:a5:48:ab:ff:94:bf:39:aa:33:13:77: b7:87:73:43:f6:69:b9:04:20:28:ff:de:70:40:07:9b:fd:06: ab:3f:44:71:0b:5f:6e:d9:fb:7c:bc:46:ab:ce:bd:d2:81:ef: 53:23:f6:96:d3:45:11:9f:db:6f:4b:05:15:28:cf:75:9b:bb: 78:e4:24:16:48:92:41:01:d8:c4:b6:f4:a1:c2:b4:a5:d8:be: 9d:92:de:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78ePPmZ0SZdn+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZGU1YmVmNDYtNjJjMC00NjkyLWFiMmUtMGU3MzM3ZmIxYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5eEEE2ZJSJs+aVp8K5lFhjgajIr7SUdgAVm YgWhCEWVOImWx5DY/nDvyZLUwkJYOOTjirR4iXE5n7vg4dE6nNy/ByT4KLElKZIb g5dRA1rSnJupzd1qk6Dn8WBDxvDtmjbZz4eRrqaYORv/0nTaBQrQP0VTCkIFGrPm Y8+12p5CiePCsk4uSUMonJHOoPEqpiAZiFCPGi7poZI9ruIlTKZQtJaIr9H3aGP7 lzAeWHsMeOtFCkBp1MUGUT4vE/jqXZE9s0aAxA7ZabhPQdFg0E7mJ6bvsb8Npg6l CAy++D0XX7YvxL4hNmq78S75ewyznnjoCm7ppdfCXS6Slh5YqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtxFHY6taMjWcfaAkdKXMoaaMwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQ4ZGVhYjctYTAxMy0z OTJiLWE4MDMtMzg5ZGZhZDExMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWbjviM+k0mISyu0iGs7/pol+BcOEGBTWpC2cEl28tSlsWFw5hmFhdI CbcQMrdWJWC27RmebVfXHvzyrHn+N/dpP9XYMpVTeDGYBydGKTihK/AS5WVcz2jE banyVfVPCm1V0wFssHA47/6+vTI3uy5FeD5ahxxKQuvg2AjUFMln5ScbxHYn/oYZ evn1vYv5hYq60DN5OCFqY+HjcQ477vzilZl1R4Yf+B+lSKv/lL85qjMTd7eHc0P2 abkEICj/3nBAB5v9Bqs/RHELX27Z+3y8RqvOvdKB71Mj9pbTRRGf229LBRUoz3Wb u3jkJBZIkkEB2MS29KHCtKXYvp2S3kM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:59 2025 by rpki-client