$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa File: 5390d515-f56d-3bfc-9fdd-f680b36665ae.roa (raw, json) Hash identifier: qorNXlwsHLqRMV7jPjG9fOQKRriSZwDfg4kcAGoWnAk= Subject key identifier: F6:B0:5A:3C:D0:CE:68:AE:24:07:63:70:60:18:9E:52:8F:81:12:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCB4C9AFFBD5F221965C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.20.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cb:4c:9a:ff:bd:5f:22:19:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=89ec80b9-0e9c-49c7-843a-3d6a6e494887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:fb:61:5c:a5:44:c5:ee:31:21:04:4e:20: c4:8c:f6:13:de:26:ca:c7:6d:a4:05:0e:02:c5:0e: 6d:15:6e:13:b0:d2:af:33:e4:b9:fa:ce:d3:9b:18: ca:e8:a1:9f:76:00:45:29:2b:2a:49:2f:b5:5c:e7: a9:a0:43:aa:cb:58:8c:ba:13:0f:85:17:e4:0e:56: a1:78:9a:3b:1e:8a:13:b1:ab:23:53:64:4b:66:7c: 35:11:d0:25:93:3f:50:2b:f4:23:af:82:86:27:c3: a7:90:09:31:ef:ac:6d:db:68:08:b2:fb:5d:ad:5d: 7f:8a:0f:6c:ae:6b:80:13:0e:7a:a0:23:a8:a4:ac: be:92:49:01:5a:cd:b7:28:16:1a:cb:09:3b:4c:4a: 6d:62:a5:2b:a0:5d:c4:92:8b:82:43:a9:3e:69:9c: 2d:b5:2d:5c:e1:3d:4d:56:10:d1:5b:54:f6:cd:ef: 58:68:35:73:c0:64:1f:3f:1b:79:ee:cf:6e:c0:5a: 53:db:df:d4:c5:14:bb:5f:5b:a5:f3:c3:21:48:d8: 91:db:c9:2f:04:4a:f2:1e:82:98:0b:4e:cd:ba:f9: 18:43:ba:92:9c:ca:f2:96:52:de:1d:25:c3:e1:9b: 89:2b:5e:61:da:36:99:ed:6e:30:01:bf:30:b4:38: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B0:5A:3C:D0:CE:68:AE:24:07:63:70:60:18:9E:52:8F:81:12:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5390d515-f56d-3bfc-9fdd-f680b36665ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4d:b1:8d:fd:bd:eb:b6:69:25:f1:32:df:db:58:d6:ef:b5: ee:31:35:11:e5:c8:8c:bb:84:f4:5b:7b:d5:ff:ea:de:39:da: e2:82:f6:86:14:97:9d:1b:b7:bd:0d:69:84:ec:95:02:10:a7: 00:5b:16:5c:43:8a:cd:6a:43:4e:88:14:ce:62:e8:3b:1a:55: 75:2a:df:ac:d8:49:ef:d8:be:9f:a6:7c:d0:07:60:5e:2b:cb: 62:80:60:c6:01:c8:ca:ea:1b:3c:ed:34:24:98:18:b9:b9:7f: 99:e3:4d:49:1b:9c:e3:f6:91:41:72:7c:86:f4:d9:1e:55:d6: 38:dc:94:6b:e3:78:0f:88:ad:61:3b:d4:5d:5e:b1:fa:b7:bd: b5:f5:42:e0:db:cf:4b:28:39:06:1b:1d:77:85:9c:45:5b:5a: f6:97:ab:4e:3e:c3:59:e4:81:25:da:3d:b9:35:e5:d1:4d:e8: 2c:bc:48:f8:83:8a:ca:3b:fd:ad:41:26:8b:a6:40:1f:cb:28: a8:32:07:db:45:54:e1:d8:6b:11:76:b3:85:5a:53:7a:13:e1: 77:7a:87:9b:8a:c1:cc:bf:6d:ea:61:d5:88:48:56:23:8a:82: 62:9f:31:b8:29:2b:b8:4e:c7:ea:c0:68:4b:8c:ab:63:ad:4c: c2:28:2f:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78tMmv+9XyIZZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ODllYzgwYjktMGU5Yy00OWM3LTg0M2EtM2Q2YTZlNDk0ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPj7YVylRMXuMSEETiDEjPYT3ibKx22kBQ4C xQ5tFW4TsNKvM+S5+s7TmxjK6KGfdgBFKSsqSS+1XOepoEOqy1iMuhMPhRfkDlah eJo7HooTsasjU2RLZnw1EdAlkz9QK/Qjr4KGJ8OnkAkx76xt22gIsvtdrV1/ig9s rmuAEw56oCOopKy+kkkBWs23KBYaywk7TEptYqUroF3EkouCQ6k+aZwttS1c4T1N VhDRW1T2ze9YaDVzwGQfPxt57s9uwFpT29/UxRS7X1ul88MhSNiR28kvBEryHoKY C07NuvkYQ7qSnMryllLeHSXD4ZuJK15h2jaZ7W4wAb8wtDhg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPawWjzQzmiuJAdjcGAYnlKPgRL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTM5MGQ1MTUtZjU2ZC0z YmZjLTlmZGQtZjY4MGIzNjY2NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExNsY39veu2aSXxMt/bWNbvte4xNRHlyIy7hPRbe9X/6t452uKC9oYU l50bt70NaYTslQIQpwBbFlxDis1qQ06IFM5i6DsaVXUq36zYSe/Yvp+mfNAHYF4r y2KAYMYByMrqGzztNCSYGLm5f5njTUkbnOP2kUFyfIb02R5V1jjclGvjeA+IrWE7 1F1esfq3vbX1QuDbz0soOQYbHXeFnEVbWvaXq04+w1nkgSXaPbk15dFN6Cy8SPiD iso7/a1BJoumQB/LKKgyB9tFVOHYaxF2s4VaU3oT4Xd6h5uKwcy/beph1YhIViOK gmKfMbgpK7hOx+rAaEuMq2OtTMIoL4o= -----END CERTIFICATE-----Generated at Tue Jul 1 10:05:52 2025 by rpki-client