$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa File: ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa (raw, json) Hash identifier: gzMsFaPy5cvgXXtOwvyUtucf/KoXa99HXAJ4JLMxjSM= Subject key identifier: 92:CE:33:59:BD:50:26:A0:A5:96:F6:A6:35:2F:79:EF:28:04:1E:9D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD1292C53887C8F91B000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.16.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d1:29:2c:53:88:7c:8f:91:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=7e7ddf3e-8a2d-4c73-9857-79deed2b64ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:0b:3f:d7:53:f1:c8:cf:55:08:dd:2d:db: 74:e1:ed:a1:5f:8c:d5:19:33:50:c6:13:eb:03:f5: c4:2b:9a:30:7d:f6:96:9d:fe:fb:7d:67:f9:b0:cd: b9:26:ef:ee:45:59:10:11:44:cc:ca:86:09:b6:1f: 03:21:fd:03:1b:19:02:ba:0a:dc:d9:60:e7:b4:85: a4:c4:cb:ef:b9:04:1d:97:06:ed:fb:da:af:3b:06: 50:33:c0:04:62:54:b6:a5:11:e2:34:4f:cb:91:e8: eb:e1:df:cd:ce:f2:4e:64:6e:8e:bc:ec:e3:f8:5f: 95:59:50:20:e3:a8:04:67:d5:c3:93:48:10:2d:25: a6:b2:b1:cb:0d:33:82:02:8f:d9:e6:35:76:07:7c: 7e:a7:cd:d4:11:ab:e5:fd:ab:dc:48:2e:ab:68:57: d2:7c:d5:39:91:2f:27:dd:70:60:e1:0a:af:fd:21: c9:64:e0:32:ed:d4:c6:bb:03:4a:62:99:37:6e:34: ad:3b:2d:8c:09:17:9c:36:0b:11:ac:0e:39:ad:a4: 44:4c:e5:04:8f:7a:3a:3c:e0:89:48:03:a4:33:c2: dd:e4:a7:ef:82:71:1f:ac:60:40:3e:27:63:e7:10: f4:d0:9d:86:e5:5b:ef:8b:1f:50:03:e5:5d:2e:b0: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CE:33:59:BD:50:26:A0:A5:96:F6:A6:35:2F:79:EF:28:04:1E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff25105c-a981-3b7e-98cf-aaaffef1c69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d8:ae:df:55:b6:0c:da:38:34:e9:07:40:f5:72:83:49:7e: 18:49:70:31:f0:f1:59:b0:be:df:30:a9:4c:fa:b5:69:d5:19: 54:9f:d5:70:5c:6a:f2:30:cd:58:d9:58:45:f6:5c:41:fb:2b: 66:f8:12:0d:b5:0f:44:7e:64:ca:d1:b1:b9:32:87:01:8d:1f: 8f:22:0a:b9:60:66:21:7b:06:2d:fd:08:eb:c8:27:c9:42:6e: f4:7b:98:fb:b2:df:9f:18:17:8a:75:f7:6a:3d:8a:8c:bb:5f: e8:7f:8c:7f:03:63:47:34:b0:62:dc:4d:47:af:87:d7:fb:88: a8:e9:39:d8:b9:10:36:2f:b3:e2:78:a8:6f:a4:41:dc:76:f1: c6:d2:c8:00:7d:54:19:8a:0d:86:f6:99:31:23:82:06:cb:e6: f6:27:e8:85:e6:61:d0:14:66:5c:9c:5e:c0:c9:84:6f:09:4a: f1:45:01:26:f9:ed:85:fe:a9:83:5c:a6:75:7b:b0:f1:d9:be: 24:3a:e0:5d:0b:b8:b8:27:2d:f3:ee:04:99:01:31:81:34:58: 11:95:10:72:c8:cb:bd:34:7e:f5:b7:77:9e:30:16:50:fa:59: 5b:1a:c6:aa:eb:d5:e6:cf:8e:20:88:0d:a9:d8:42:00:ca:7a: 0f:5c:9d:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79EpLFOIfI+RsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk N2U3ZGRmM2UtOGEyZC00YzczLTk4NTctNzlkZWVkMmI2NGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU0LP9dT8cjPVQjdLdt04e2hX4zVGTNQxhPr A/XEK5owffaWnf77fWf5sM25Ju/uRVkQEUTMyoYJth8DIf0DGxkCugrc2WDntIWk xMvvuQQdlwbt+9qvOwZQM8AEYlS2pRHiNE/Lkejr4d/NzvJOZG6OvOzj+F+VWVAg 46gEZ9XDk0gQLSWmsrHLDTOCAo/Z5jV2B3x+p83UEavl/avcSC6raFfSfNU5kS8n 3XBg4Qqv/SHJZOAy7dTGuwNKYpk3bjStOy2MCRecNgsRrA45raRETOUEj3o6POCJ SAOkM8Ld5KfvgnEfrGBAPidj5xD00J2G5Vvvix9QA+VdLrBOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLOM1m9UCagpZb2pjUvee8oBB6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmYyNTEwNWMtYTk4MS0z YjdlLTk4Y2YtYWFhZmZlZjFjNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHYrt9VtgzaODTpB0D1coNJfhhJcDHw8Vmwvt8wqUz6tWnVGVSf1XBc avIwzVjZWEX2XEH7K2b4Eg21D0R+ZMrRsbkyhwGNH48iCrlgZiF7Bi39COvIJ8lC bvR7mPuy358YF4p192o9ioy7X+h/jH8DY0c0sGLcTUevh9f7iKjpOdi5EDYvs+J4 qG+kQdx28cbSyAB9VBmKDYb2mTEjggbL5vYn6IXmYdAUZlycXsDJhG8JSvFFASb5 7YX+qYNcpnV7sPHZviQ64F0LuLgnLfPuBJkBMYE0WBGVEHLIy700fvW3d54wFlD6 WVsaxqrr1ebPjiCIDanYQgDKeg9cnY4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:48 2025 by rpki-client