$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa File: ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa (raw, json) Hash identifier: ruYwtzK+/a0SuFTrWurNTA1ynv2x+tkMDmGAHis5/V0= Subject key identifier: 1B:9D:ED:4C:42:47:A1:52:5F:EB:4F:32:4A:44:35:9C:BD:F5:27:3C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD460950F7444098B1700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.19.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d4:60:95:0f:74:44:09:8b:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=7ead6d57-c5d3-49c6-a4f4-d39112c463df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:81:56:86:ec:0c:2d:5d:2e:05:2c:78:b9:ee: 9b:18:11:05:da:9c:aa:62:47:89:4f:a2:a4:33:e2: f6:90:03:81:ff:c3:2c:72:81:9f:52:94:42:b6:c7: 45:68:64:77:c2:d5:db:62:45:cc:e8:7f:67:cc:ef: 99:a9:d9:5b:0b:99:cd:60:55:a8:ae:23:84:81:68: e1:a0:a8:07:ec:28:8e:98:d6:91:d0:ab:a2:be:40: 1f:f1:6f:ff:3c:7b:a8:ef:ec:5c:6b:26:09:6a:f4: 8b:b0:94:41:bb:4c:24:a3:74:75:03:f8:4b:0e:bd: 17:05:fd:3e:89:a6:48:10:d5:06:38:a5:23:c1:43: 3a:7b:0e:36:20:f3:bd:4a:b8:00:a1:9f:a6:bc:81: 9f:c4:01:b8:f4:22:be:7e:15:65:7a:26:28:c1:eb: 4c:ed:a7:ec:c7:81:c7:fb:7d:c5:bf:7f:b1:98:96: 98:57:e6:3f:32:03:c0:93:07:70:09:7e:ac:e6:35: 5e:ce:64:33:75:2d:3b:83:cc:fe:d8:da:df:b1:19: 00:ca:0c:5b:e0:7c:62:1c:a7:ed:7e:5e:0d:71:95: 93:00:10:e2:3d:4c:61:9b:f3:3d:e0:1c:2d:ff:2d: 92:e4:f6:e7:8c:33:5f:c4:af:a4:74:ee:61:63:2e: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9D:ED:4C:42:47:A1:52:5F:EB:4F:32:4A:44:35:9C:BD:F5:27:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:12:3a:33:1e:e5:40:2f:88:39:bd:b4:2c:bd:e3:79:a4:d9: b9:f4:84:bb:5d:a1:5b:9b:f9:ea:7e:bd:58:f9:81:c2:c9:24: 8e:a7:f5:4c:af:87:31:cb:3e:d8:bd:1f:67:77:be:a3:62:fb: 43:c7:e5:23:1b:f5:bf:86:78:ac:a0:19:32:7f:69:1f:c6:63: 57:49:62:dd:a8:1c:10:36:41:4f:2c:91:2c:60:6c:cf:81:3c: 30:98:8e:87:fe:a4:eb:33:ee:36:3b:15:3f:e9:a3:80:b8:37: 66:1d:c3:a4:68:b3:8a:c2:ec:9e:56:85:f1:da:8d:7f:cb:0c: 00:dd:60:2d:9e:f0:5b:ea:ff:5b:6a:a9:2b:89:65:d5:b1:8f: 1c:56:bb:d2:88:0b:25:fd:83:e2:fd:2a:fc:0a:43:3e:ce:bc: 8f:14:a3:d9:21:0d:98:ef:ba:d0:d9:5e:86:2e:63:cf:71:44: f3:1c:84:b0:a2:72:9a:52:18:fa:3b:a7:39:6f:0a:38:36:6f: 02:e6:26:4a:cc:1b:d9:99:59:1e:fe:12:16:4d:17:4a:14:59: 68:c8:bb:95:11:65:f3:7e:fb:cb:15:9a:f0:59:64:af:5c:84: 3d:15:85:8b:e9:90:06:80:22:66:63:00:78:0d:99:ec:06:7b: e2:4a:4a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79RglQ90RAmLFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk N2VhZDZkNTctYzVkMy00OWM2LWE0ZjQtZDM5MTEyYzQ2M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4FWhuwMLV0uBSx4ue6bGBEF2pyqYkeJT6Kk M+L2kAOB/8MscoGfUpRCtsdFaGR3wtXbYkXM6H9nzO+ZqdlbC5nNYFWoriOEgWjh oKgH7CiOmNaR0KuivkAf8W//PHuo7+xcayYJavSLsJRBu0wko3R1A/hLDr0XBf0+ iaZIENUGOKUjwUM6ew42IPO9SrgAoZ+mvIGfxAG49CK+fhVleiYowetM7afsx4HH +33Fv3+xmJaYV+Y/MgPAkwdwCX6s5jVezmQzdS07g8z+2NrfsRkAygxb4HxiHKft fl4NcZWTABDiPUxhm/M94Bwt/y2S5PbnjDNfxK+kdO5hYy40MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBud7UxCR6FSX+tPMkpENZy99Sc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmY0M2JiMjItNDEwMS0z OWZiLWEwZGYtMmUwZDBiM2FhMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoSOjMe5UAviDm9tCy943mk2bn0hLtdoVub+ep+vVj5gcLJJI6n9Uyv hzHLPti9H2d3vqNi+0PH5SMb9b+GeKygGTJ/aR/GY1dJYt2oHBA2QU8skSxgbM+B PDCYjof+pOsz7jY7FT/po4C4N2Ydw6Ros4rC7J5WhfHajX/LDADdYC2e8Fvq/1tq qSuJZdWxjxxWu9KICyX9g+L9KvwKQz7OvI8Uo9khDZjvutDZXoYuY89xRPMchLCi cppSGPo7pzlvCjg2bwLmJkrMG9mZWR7+EhZNF0oUWWjIu5URZfN++8sVmvBZZK9c hD0VhYvpkAaAImZjAHgNmewGe+JKShk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:04 2025 by rpki-client