$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d879e2d-0780-38be-9bac-6bc948f1da4b.roa File: 1d879e2d-0780-38be-9bac-6bc948f1da4b.roa (raw, json) Hash identifier: X3rPxtqsin8FBmtDOWtsFP3TC2DhAYk0NImM80e8/dA= Subject key identifier: 85:42:C7:E9:C2:9D:8B:11:3B:55:F1:1E:F8:C1:E4:30:58:5D:1B:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849C96CD97350A18279076E2E6E Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d879e2d-0780-38be-9bac-6bc948f1da4b.roa Signing time: Thu 08 May 2025 16:30:37 +0000 ROA not before: Thu 08 May 2025 16:30:37 +0000 ROA not after: Wed 06 Aug 2025 16:30:37 +0000 asID: 13335 IP address blocks: 104.23.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:6c:d9:73:50:a1:82:79:07:6e:2e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 8 16:30:37 2025 GMT Not After : Aug 6 16:30:37 2025 GMT Subject: CN=00f050ec-4920-4e1b-be23-cf5e934cecc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:38:e3:09:e3:ba:a1:a7:fa:3f:4f:d3:87: 6e:bd:3a:c2:0c:0f:2e:4e:2a:25:19:93:da:4c:27: 68:f2:3f:51:b5:f6:ec:43:be:ce:22:15:84:18:f5: 2f:5b:40:b7:f7:ba:49:96:17:eb:e4:39:6f:cf:30: 2c:17:1a:51:e3:ef:a3:32:08:82:63:77:89:06:6a: 7c:55:16:ef:8f:0e:99:87:40:c2:46:12:7f:ae:98: c3:6b:75:35:b8:a0:7b:8d:86:dc:34:8d:d2:85:34: b6:3c:3d:81:7b:ee:ff:93:20:89:08:6a:b1:7d:42: 97:b5:eb:56:ee:1d:65:06:e9:2b:71:13:8c:ed:b2: e2:a3:e4:79:5d:8a:ac:d4:94:36:a8:ab:27:e6:64: b6:fe:b1:41:2d:b0:51:fb:2a:4b:d0:2b:5e:f3:12: 37:13:55:51:31:5f:10:84:86:f8:f1:59:c9:e5:be: d8:5c:ba:ea:ab:9a:96:4a:84:b6:59:1e:6c:c9:15: bb:cf:1f:f0:a7:07:b4:81:da:07:3e:bf:71:6d:74: 51:99:b4:e1:31:35:fd:92:8e:4b:13:6c:21:d7:11: d8:3f:5b:d9:87:ed:d2:d5:ee:d2:35:05:72:76:ad: 5d:6b:68:d8:70:45:22:d8:72:52:07:aa:19:e7:59: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:42:C7:E9:C2:9D:8B:11:3B:55:F1:1E:F8:C1:E4:30:58:5D:1B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d879e2d-0780-38be-9bac-6bc948f1da4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4e:d5:50:f2:d6:f9:bc:11:ac:78:a3:33:22:54:d5:50:55: 23:db:8b:4e:a1:44:80:ac:ed:48:c3:9f:df:51:f6:13:6c:a4: cb:2d:b1:80:13:fd:2e:a9:ab:89:ec:82:a4:33:fb:d4:14:ea: c3:37:ed:42:4f:05:b2:02:30:bf:dd:c8:8f:66:fb:f7:c6:e2: bc:e1:0d:f3:86:a9:5f:b4:03:b3:6e:ae:c5:75:bd:19:aa:9e: bd:a0:76:14:86:4d:10:b0:99:3d:df:a0:00:1d:36:e9:ba:5b: 81:7c:7d:ec:07:0e:4a:0d:df:5c:4e:6d:61:0a:2d:f6:0d:0f: f4:91:c9:7f:c6:0f:ca:29:ce:4d:e2:a6:9c:a9:ee:4c:9e:d8: c2:72:79:43:67:95:bb:85:6d:1f:6a:6b:94:57:46:19:17:07: 69:d2:aa:f0:b5:53:67:7d:78:e0:28:3e:cb:ab:61:59:66:fd: 02:83:56:23:d6:83:49:6d:f7:66:f2:c0:2f:4e:d6:5b:4f:55: d2:fb:31:77:c7:74:fd:35:4d:2d:fe:0d:a7:83:6a:4d:78:8c: 3e:87:15:3d:72:39:5b:46:2f:25:bf:4c:de:3e:5f:45:61:e4: f3:db:39:05:44:f4:89:4e:8b:f8:65:a1:cf:68:f9:bf:81:e5: 78:bb:17:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJbNlzUKGCeQduLm4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUwODE2MzAzN1oXDTI1MDgwNjE2MzAzN1owLzEtMCsGA1UEAxMk MDBmMDUwZWMtNDkyMC00ZTFiLWJlMjMtY2Y1ZTkzNGNlY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAQ44wnjuqGn+j9P04duvTrCDA8uTiolGZPa TCdo8j9RtfbsQ77OIhWEGPUvW0C397pJlhfr5DlvzzAsFxpR4++jMgiCY3eJBmp8 VRbvjw6Zh0DCRhJ/rpjDa3U1uKB7jYbcNI3ShTS2PD2Be+7/kyCJCGqxfUKXtetW 7h1lBukrcROM7bLio+R5XYqs1JQ2qKsn5mS2/rFBLbBR+ypL0Cte8xI3E1VRMV8Q hIb48VnJ5b7YXLrqq5qWSoS2WR5syRW7zx/wpwe0gdoHPr9xbXRRmbThMTX9ko5L E2wh1xHYP1vZh+3S1e7SNQVydq1da2jYcEUi2HJSB6oZ51lV/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVCx+nCnYsRO1XxHvjB5DBYXRvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWQ4NzllMmQtMDc4MC0z OGJlLTliYWMtNmJjOTQ4ZjFkYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJO1VDy1vm8Eax4ozMiVNVQVSPbi06hRICs7UjDn99R9hNspMstsYAT /S6pq4nsgqQz+9QU6sM37UJPBbICML/dyI9m+/fG4rzhDfOGqV+0A7NursV1vRmq nr2gdhSGTRCwmT3foAAdNum6W4F8fewHDkoN31xObWEKLfYND/SRyX/GD8opzk3i ppyp7kye2MJyeUNnlbuFbR9qa5RXRhkXB2nSqvC1U2d9eOAoPsurYVlm/QKDViPW g0lt92bywC9O1ltPVdL7MXfHdP01TS3+DaeDak14jD6HFT1yOVtGLyW/TN4+X0Vh 5PPbOQVE9IlOi/hloc9o+b+B5Xi7Fyw= -----END CERTIFICATE-----Generated at Sun May 11 09:22:20 2025 by rpki-client