$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa File: ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa (raw, json) Hash identifier: 2dfyVrnrmePn83FxlgrfvNXnvx2HeOAevy2apy5HtOw= Subject key identifier: 86:2E:11:A0:21:04:AB:52:AF:E7:C3:DE:81:F1:FB:6C:3A:62:D6:1F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BB939903ADF22A898440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.16.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bb:93:99:03:ad:f2:2a:89:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=5a180316-8471-4eaf-8cc4-b8eb53c7f12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:24:be:05:8b:fc:7a:1f:da:4c:bb:f2:62: fe:64:6a:ab:44:43:96:53:c2:dc:33:2c:bf:7f:70: d5:35:fe:55:54:e2:cd:79:bf:74:70:ad:3c:ac:b6: 8c:d2:d7:2a:31:4b:33:e2:12:13:be:9e:34:70:e3: 47:f8:51:a3:ea:bc:f6:16:81:64:a9:4a:86:fc:0a: 15:f8:47:a5:25:99:66:bf:31:95:47:4f:74:2c:08: 29:60:80:06:a1:d6:f2:43:95:ea:2d:be:00:6d:86: 54:a6:cb:44:c2:63:95:34:71:b5:8f:43:a0:81:00: 77:33:e8:4b:03:a0:66:29:d3:42:2b:d5:e7:f3:cc: 54:0e:71:15:10:16:b4:31:b8:b7:55:e5:1a:8b:69: 43:6b:f8:6b:29:8c:b0:ef:73:34:c3:49:2b:ed:0e: 7e:3e:2a:79:da:fe:2c:41:b0:92:ed:eb:ed:62:a9: ff:29:4d:94:5e:26:b4:72:de:8b:24:0c:ce:8d:45: 4f:06:47:7e:c2:57:e3:85:c3:69:01:5b:71:ea:65: fe:9f:fb:7c:3c:ee:1f:85:45:e0:e9:b9:e7:c3:c6: 82:1f:3f:85:c8:fa:3b:86:d5:f9:40:7d:20:a8:80: df:34:3a:d4:19:e9:b3:05:67:24:f2:b4:46:7f:9a: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2E:11:A0:21:04:AB:52:AF:E7:C3:DE:81:F1:FB:6C:3A:62:D6:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:eb:1a:a5:4c:3b:6c:71:92:52:7c:35:f9:3f:30:2f:3e:ca: cb:64:e2:30:f1:26:c7:41:fa:22:a5:02:20:88:4a:88:89:4c: e4:7f:f7:99:ac:24:bc:78:4c:09:02:f4:cc:3e:a5:6e:b3:12: c9:4c:37:fa:18:a5:a1:1d:8a:a5:bc:f7:45:99:fb:41:4d:38: bd:52:5d:10:51:4a:9c:78:7b:32:08:0a:80:b7:87:b6:41:7f: 00:59:21:d2:27:4d:93:51:44:ea:91:b9:1c:f7:31:3d:c0:4a: 4d:1d:3b:59:4b:05:cf:e9:88:76:d1:46:aa:80:9d:3e:82:e7: 6c:f5:ba:ad:db:63:22:63:d2:64:e2:f4:b6:fd:10:00:50:7a: aa:86:92:75:bc:27:0b:26:7f:fc:ec:ec:e1:8a:4a:ec:34:f5: 87:04:25:ab:28:07:a7:07:74:d1:9d:7c:7d:89:ce:d1:91:a0: 4e:97:69:c1:d3:00:b3:1b:9a:51:bc:fe:94:4f:ee:f4:0e:f1: 17:fe:34:2f:68:b3:72:80:1e:e6:f3:0f:63:ff:53:f9:28:3c: cc:b8:fb:9d:e6:40:ea:38:26:1a:2f:51:2b:76:08:e1:c6:89: 38:df:5a:cd:03:91:c9:b4:4e:f4:17:b6:34:19:66:53:99:59: 53:ff:65:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtruTmQOt8iqJhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NWExODAzMTYtODQ3MS00ZWFmLThjYzQtYjhlYjUzYzdmMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uMkvgWL/Hof2ky78mL+ZGqrREOWU8LcMyy/ f3DVNf5VVOLNeb90cK08rLaM0tcqMUsz4hITvp40cONH+FGj6rz2FoFkqUqG/AoV +EelJZlmvzGVR090LAgpYIAGodbyQ5XqLb4AbYZUpstEwmOVNHG1j0OggQB3M+hL A6BmKdNCK9Xn88xUDnEVEBa0Mbi3VeUai2lDa/hrKYyw73M0w0kr7Q5+Pip52v4s QbCS7evtYqn/KU2UXia0ct6LJAzOjUVPBkd+wlfjhcNpAVtx6mX+n/t8PO4fhUXg 6bnnw8aCHz+FyPo7htX5QH0gqIDfNDrUGemzBWck8rRGf5qXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYuEaAhBKtSr+fD3oHx+2w6YtYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmYyNTEwNWMtYTk4MS0z YjdlLTk4Y2YtYWFhZmZlZjFjNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXrGqVMO2xxklJ8Nfk/MC8+ystk4jDxJsdB+iKlAiCISoiJTOR/95ms JLx4TAkC9Mw+pW6zEslMN/oYpaEdiqW890WZ+0FNOL1SXRBRSpx4ezIICoC3h7ZB fwBZIdInTZNRROqRuRz3MT3ASk0dO1lLBc/piHbRRqqAnT6C52z1uq3bYyJj0mTi 9Lb9EABQeqqGknW8Jwsmf/zs7OGKSuw09YcEJasoB6cHdNGdfH2JztGRoE6XacHT ALMbmlG8/pRP7vQO8Rf+NC9os3KAHubzD2P/U/koPMy4+53mQOo4JhovUSt2COHG iTjfWs0Dkcm0TvQXtjQZZlOZWVP/Zag= -----END CERTIFICATE-----Generated at Sat Apr 5 04:34:12 2025 by rpki-client