$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa File: f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa (raw, json) Hash identifier: 12wFxLVUOC9nr+g1VLri5dMJvYNHk4rO+kgJGH1wEz0= Subject key identifier: AB:11:C1:56:73:2B:9A:C9:E6:E3:77:23:00:E9:FE:44:70:B6:D1:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858491261B2C562E39C080D48EB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa Signing time: Tue 04 Mar 2025 02:55:13 +0000 ROA not before: Tue 04 Mar 2025 02:55:13 +0000 ROA not after: Mon 02 Jun 2025 01:55:13 +0000 asID: 13335 IP address blocks: 104.23.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:61:b2:c5:62:e3:9c:08:0d:48:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 4 02:55:13 2025 GMT Not After : Jun 2 01:55:13 2025 GMT Subject: CN=2042e3e6-642f-4536-a387-81917792f9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:ff:ad:a6:23:51:39:f3:a7:21:07:8b:f8: 15:b1:3e:77:fd:1b:7a:a8:28:81:f8:e8:71:a1:51: ca:5f:f1:ff:62:cb:f5:61:a6:09:75:b0:4a:72:29: 21:49:d7:00:b9:b2:98:1d:24:9c:d3:df:b6:7b:56: 8f:2f:ea:2c:e4:d0:8a:88:f9:b5:7b:51:47:7d:87: b0:be:a6:85:1c:66:79:29:d4:05:8f:ad:3b:c0:29: 49:a9:3d:8d:9c:04:b4:22:16:1b:07:36:21:82:7e: a3:8b:32:da:ad:aa:f3:ac:70:03:f5:c4:1c:0d:f3: 20:d4:c1:83:5f:2d:0d:c5:ce:e4:b6:d7:80:a6:d9: 35:d4:c2:1f:98:e4:29:8b:7e:17:77:7a:f6:fd:7a: 20:c8:4c:b0:bf:cd:0a:46:5d:e4:ac:79:9f:67:17: 91:72:96:42:93:69:a2:3b:47:16:63:18:7a:3c:bd: 12:d0:32:b0:45:f7:70:a3:69:15:3b:3f:cc:e8:9c: 2e:d0:09:0c:cd:07:f9:b5:2e:b3:24:ae:0f:f8:f4: ad:5b:66:d5:75:e1:aa:22:99:b2:f2:0a:e9:5c:1f: 36:76:82:d3:fe:9e:95:2b:5f:25:23:0e:51:c4:34: 0f:49:4f:3a:57:7c:6d:90:80:77:52:53:5c:02:5b: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:11:C1:56:73:2B:9A:C9:E6:E3:77:23:00:E9:FE:44:70:B6:D1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7eba624-a59c-3fcc-8ad1-7798519dc3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3a:39:6a:5b:cc:ee:8c:0e:26:0f:5e:92:55:f2:a4:15:97: 6a:62:30:02:3f:b4:be:53:83:68:67:34:d7:b0:c9:cf:e4:2c: 30:45:93:c7:3f:44:77:4e:67:50:c7:82:30:9a:6c:9f:71:96: 9d:a7:e1:7b:35:20:9f:58:c9:2a:39:ac:00:92:4e:c1:3b:29: f0:f0:a7:f3:86:be:20:e8:90:79:5e:3b:e2:0c:14:9a:6f:28: 04:bd:05:d7:96:fb:97:80:29:d2:d6:31:3c:da:12:d5:3c:e1: 2b:c4:a7:e6:f1:e8:c5:d3:00:d4:c7:1d:63:16:b4:73:b8:21: ac:aa:88:ee:2b:bf:81:91:14:fd:42:4b:3e:2a:eb:5b:98:74: a0:af:3e:e9:81:4b:90:1c:b7:d2:4b:da:b5:a6:bd:3f:43:33: ed:c2:9a:dd:a3:76:7a:11:84:e8:c5:9e:d0:5b:82:8d:79:5d: 70:46:62:b4:f5:0c:c3:97:8f:ce:9e:90:61:b1:63:9a:75:76: 4f:7d:97:a6:46:31:04:4b:a3:ad:af:15:bb:64:13:6e:4e:63: 00:33:33:8e:b8:3a:12:e8:38:74:56:66:b3:84:41:4a:ce:d0: e4:bc:5f:41:a8:ba:2b:16:73:ca:74:66:6a:c0:a9:b5:59:35: 21:06:d6:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSYbLFYuOcCA1I6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNDAyNTUxM1oXDTI1MDYwMjAxNTUxM1owLzEtMCsGA1UEAxMk MjA0MmUzZTYtNjQyZi00NTM2LWEzODctODE5MTc3OTJmOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrb/raYjUTnzpyEHi/gVsT53/Rt6qCiB+Ohx oVHKX/H/Ysv1YaYJdbBKcikhSdcAubKYHSSc09+2e1aPL+os5NCKiPm1e1FHfYew vqaFHGZ5KdQFj607wClJqT2NnAS0IhYbBzYhgn6jizLararzrHAD9cQcDfMg1MGD Xy0Nxc7ktteAptk11MIfmOQpi34Xd3r2/XogyEywv80KRl3krHmfZxeRcpZCk2mi O0cWYxh6PL0S0DKwRfdwo2kVOz/M6Jwu0AkMzQf5tS6zJK4P+PStW2bVdeGqIpmy 8grpXB82doLT/p6VK18lIw5RxDQPSU86V3xtkIB3UlNcAls1YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsRwVZzK5rJ5uN3IwDp/kRwttHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjdlYmE2MjQtYTU5Yy0z ZmNjLThhZDEtNzc5ODUxOWRjM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY6OWpbzO6MDiYPXpJV8qQVl2piMAI/tL5Tg2hnNNewyc/kLDBFk8c/ RHdOZ1DHgjCabJ9xlp2n4Xs1IJ9YySo5rACSTsE7KfDwp/OGviDokHleO+IMFJpv KAS9BdeW+5eAKdLWMTzaEtU84SvEp+bx6MXTANTHHWMWtHO4IayqiO4rv4GRFP1C Sz4q61uYdKCvPumBS5Act9JL2rWmvT9DM+3Cmt2jdnoRhOjFntBbgo15XXBGYrT1 DMOXj86ekGGxY5p1dk99l6ZGMQRLo62vFbtkE25OYwAzM464OhLoOHRWZrOEQUrO 0OS8X0GouisWc8p0ZmrAqbVZNSEG1pI= -----END CERTIFICATE-----Generated at Sat Apr 5 07:34:17 2025 by rpki-client