$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa File: fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa (raw, json) Hash identifier: AZ7HS/vXSESzW5946cXu0t2NJZyAY4Fwmiqt1oYIEcc= Subject key identifier: 11:E6:76:94:9F:59:75:25:04:D6:AF:2C:FD:71:C0:1D:D2:6E:A9:B7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD6ED49C47C4E11048C40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.25.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d6:ed:49:c4:7c:4e:11:04:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=ac2187e1-cbe2-4868-a1d7-1f640773ae0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:1f:97:45:1b:3b:aa:2e:81:52:ce:c5:6e: 86:ec:6a:1b:9c:04:9d:fa:df:4f:1d:e7:d5:a5:0a: 01:5b:47:27:0f:5a:a0:3b:85:10:ec:7f:36:a2:00: e8:7c:06:e8:77:b1:32:d7:4c:f1:22:a7:8c:0e:36: d0:82:07:7b:43:c3:5f:cd:86:e0:9c:b2:88:9a:e7: 73:11:4f:3b:33:08:4c:c6:b4:6c:d0:75:a0:e7:71: 89:e4:77:63:d9:c0:7b:e0:ef:eb:17:ef:d7:b0:94: b3:bc:cf:3d:22:1e:0b:b5:7a:42:37:07:cd:24:91: c0:78:90:69:7c:b0:d7:f6:57:cc:46:c2:84:af:21: a3:3e:1e:27:2f:f9:de:41:5b:86:b0:4a:6a:35:89: 0b:bb:df:9f:48:f8:b3:85:08:b1:b1:bb:d8:8b:3f: 12:5d:7d:eb:9d:32:c8:98:35:9d:19:ad:1e:eb:42: 33:de:c2:1d:9b:d9:ba:55:43:64:42:14:3b:3c:48: ef:36:93:f6:14:79:ca:b1:5d:b2:3c:de:7f:c9:db: d9:ad:85:60:19:27:7d:9e:a9:ea:7d:16:46:3a:c5: d2:1b:58:d4:fb:77:25:77:57:1a:15:fc:f3:ae:e2: f8:5b:cb:df:83:4c:20:59:77:41:c3:cc:b7:d6:b8: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:76:94:9F:59:75:25:04:D6:AF:2C:FD:71:C0:1D:D2:6E:A9:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fdfcafda-91f5-37c2-983e-7f9ba1324a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0c:f6:2d:1a:c3:74:63:40:32:8c:07:b4:ab:e6:8a:14:b9: d0:64:a3:f8:3b:7c:ff:f9:ec:1e:36:ba:7b:b2:a0:c3:91:b7: 78:e1:b3:bd:e0:95:65:72:f0:55:4d:64:13:d1:a8:34:0e:95: 98:38:84:9c:e1:10:ac:e1:d8:1f:08:f0:42:3f:01:09:93:58: 95:9e:b9:e2:d0:9b:c2:c7:f0:50:8e:78:1a:bd:26:6b:4d:4f: 57:c0:03:b9:4f:eb:16:ec:5a:31:59:72:a3:26:25:2c:cb:49: 02:9f:18:98:e5:af:f6:35:7c:25:96:dd:3c:cc:21:80:de:3c: 94:f8:5e:a2:71:ec:77:11:94:05:b3:0e:60:ba:4b:14:0e:9b: 40:49:ba:e7:c9:db:c2:af:24:76:51:ca:a9:dc:4f:9a:24:45: f0:d5:bd:f0:08:18:68:43:bd:ee:d8:41:0f:f9:78:9b:d9:1f: 4d:d1:1a:56:f0:51:43:0a:ae:96:4b:6a:62:c9:ab:7d:7b:f9: e6:5a:fc:f3:63:79:d4:41:aa:00:d2:c3:45:4f:a8:2a:bb:37: 7d:fc:a5:d8:48:d9:b8:21:5e:30:e8:11:0a:77:8b:98:ff:65: 2e:4f:5a:3a:48:2f:6e:b5:e2:4e:69:59:26:47:d0:ad:cd:36: 90:c0:fb:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79btScR8ThEEjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YWMyMTg3ZTEtY2JlMi00ODY4LWExZDctMWY2NDA3NzNhZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrQfl0UbO6ougVLOxW6G7GobnASd+t9PHefV pQoBW0cnD1qgO4UQ7H82ogDofAbod7Ey10zxIqeMDjbQggd7Q8NfzYbgnLKImudz EU87MwhMxrRs0HWg53GJ5Hdj2cB74O/rF+/XsJSzvM89Ih4LtXpCNwfNJJHAeJBp fLDX9lfMRsKEryGjPh4nL/neQVuGsEpqNYkLu9+fSPizhQixsbvYiz8SXX3rnTLI mDWdGa0e60Iz3sIdm9m6VUNkQhQ7PEjvNpP2FHnKsV2yPN5/ydvZrYVgGSd9nqnq fRZGOsXSG1jU+3cld1caFfzzruL4W8vfg0wgWXdBw8y31ri5uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHmdpSfWXUlBNavLP1xwB3Sbqm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmRmY2FmZGEtOTFmNS0z N2MyLTk4M2UtN2Y5YmExMzI0YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0M9i0aw3RjQDKMB7Sr5ooUudBko/g7fP/57B42unuyoMORt3jhs73g lWVy8FVNZBPRqDQOlZg4hJzhEKzh2B8I8EI/AQmTWJWeueLQm8LH8FCOeBq9JmtN T1fAA7lP6xbsWjFZcqMmJSzLSQKfGJjlr/Y1fCWW3TzMIYDePJT4XqJx7HcRlAWz DmC6SxQOm0BJuufJ28KvJHZRyqncT5okRfDVvfAIGGhDve7YQQ/5eJvZH03RGlbw UUMKrpZLamLJq317+eZa/PNjedRBqgDSw0VPqCq7N338pdhI2bghXjDoEQp3i5j/ ZS5PWjpIL2614k5pWSZH0K3NNpDA+yA= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:46 2025 by rpki-client