$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa File: a153db53-9524-3f9c-af42-4f159128d889.roa (raw, json) Hash identifier: J/vkRQbr0BBCZSMTsG5C44YTIVwhaR1mCIRLP2Nrd6c= Subject key identifier: 66:E9:18:D8:B5:2A:28:C9:00:B9:61:66:24:F1:CD:0E:09:5E:C5:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858499D154527F0CB14ED8FDBD080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa Signing time: Tue 22 Apr 2025 19:18:36 +0000 ROA not before: Tue 22 Apr 2025 19:18:36 +0000 ROA not after: Mon 21 Jul 2025 19:18:36 +0000 asID: 13335 IP address blocks: 104.23.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:15:45:27:f0:cb:14:ed:8f:db:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 22 19:18:36 2025 GMT Not After : Jul 21 19:18:36 2025 GMT Subject: CN=46187099-e203-4987-ba62-bc9687ca66ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:e6:da:bf:73:62:2c:60:42:66:3b:ab:8a: 1f:14:a9:23:57:5c:36:66:ae:80:f2:ff:f0:66:bf: e5:cb:58:f8:04:88:da:6f:19:ef:4f:ae:51:2d:9c: 08:d6:57:3d:a0:89:31:a1:fd:b2:11:72:1a:95:9f: 49:ee:ff:a8:1e:80:7a:f4:01:c1:13:05:cf:2a:91: e3:1e:0e:f0:f7:f4:6f:75:59:d4:e8:45:2e:ed:71: 90:13:06:91:3d:a1:bd:c3:55:86:ce:69:db:2e:bf: 33:50:45:d1:be:89:51:c8:f5:19:a2:40:65:87:08: 61:58:03:7b:d6:3a:b3:ca:42:cd:f9:cd:34:08:92: 68:31:37:72:47:e3:6a:89:a6:f1:3e:1d:f2:2b:9d: 53:6b:f6:f2:4b:3d:9a:e7:e5:e4:1e:c1:fc:ea:eb: 20:88:29:7a:50:e4:23:4e:5f:c4:cb:57:02:af:de: 03:43:26:99:29:00:d0:fa:77:58:6a:66:b4:c5:08: bc:c1:50:39:cc:a7:94:00:ab:7f:f3:87:53:ee:2e: 14:13:2e:a1:2c:ef:5b:22:7b:6a:36:3d:a7:0c:64: 0a:3f:72:19:8d:85:56:06:77:8c:11:bd:05:47:6a: de:65:03:8a:d5:95:9f:c3:a9:c4:f3:00:a5:5e:96: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E9:18:D8:B5:2A:28:C9:00:B9:61:66:24:F1:CD:0E:09:5E:C5:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:9f:08:2f:29:0b:83:42:a6:da:a4:61:31:f4:57:0d:04:12: 3d:e7:fe:50:84:15:c5:a4:81:b7:ea:2a:e8:86:d8:42:61:ed: 08:4f:8a:48:06:eb:bf:54:b0:78:4b:72:d3:03:ef:10:eb:e7: c3:a0:63:0f:9a:f5:62:24:ca:1f:87:08:e2:c4:94:43:8b:77: 9b:ad:4c:29:98:1b:c4:65:4c:ba:c4:71:6a:f6:92:64:f9:30: c1:d1:e8:4b:a3:46:8b:c4:80:1f:60:f3:e5:a9:7c:48:81:84: 6d:69:34:5e:af:77:18:90:b9:8b:2f:1c:be:34:55:90:c9:cb: a5:f5:10:2d:ed:01:ab:98:ed:74:2a:bf:77:50:51:54:3a:97: a1:c9:e2:d0:03:42:b8:03:c9:fb:11:ae:4d:f2:8a:58:00:db: 74:87:f3:0a:3a:eb:6d:86:22:7a:e3:ff:6a:59:bc:91:d0:dd: 85:d9:79:fe:2f:af:27:86:54:dd:1f:70:21:21:6c:66:ef:2d: 8c:33:cd:66:30:21:82:ab:d3:ca:fa:69:de:bd:0f:c0:33:1c: d0:9b:35:92:88:e4:49:89:bf:37:30:92:71:94:11:d4:be:79: 3a:d6:1a:c1:99:80:2b:96:50:21:24:f1:e5:ae:7c:e4:48:38: 7c:be:98:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdFUUn8MsU7Y/b0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQyMjE5MTgzNloXDTI1MDcyMTE5MTgzNlowLzEtMCsGA1UEAxMk NDYxODcwOTktZTIwMy00OTg3LWJhNjItYmM5Njg3Y2E2NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdrm2r9zYixgQmY7q4ofFKkjV1w2Zq6A8v/w Zr/ly1j4BIjabxnvT65RLZwI1lc9oIkxof2yEXIalZ9J7v+oHoB69AHBEwXPKpHj Hg7w9/RvdVnU6EUu7XGQEwaRPaG9w1WGzmnbLr8zUEXRvolRyPUZokBlhwhhWAN7 1jqzykLN+c00CJJoMTdyR+NqiabxPh3yK51Ta/bySz2a5+XkHsH86usgiCl6UOQj Tl/Ey1cCr94DQyaZKQDQ+ndYama0xQi8wVA5zKeUAKt/84dT7i4UEy6hLO9bIntq Nj2nDGQKP3IZjYVWBneMEb0FR2reZQOK1ZWfw6nE8wClXpa0uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbpGNi1KijJALlhZiTxzQ4JXsV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE1M2RiNTMtOTUyNC0z ZjljLWFmNDItNGYxNTkxMjhkODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGfCC8pC4NCptqkYTH0Vw0EEj3n/lCEFcWkgbfqKuiG2EJh7QhPikgG 679UsHhLctMD7xDr58OgYw+a9WIkyh+HCOLElEOLd5utTCmYG8RlTLrEcWr2kmT5 MMHR6EujRovEgB9g8+WpfEiBhG1pNF6vdxiQuYsvHL40VZDJy6X1EC3tAauY7XQq v3dQUVQ6l6HJ4tADQrgDyfsRrk3yilgA23SH8wo6622GInrj/2pZvJHQ3YXZef4v ryeGVN0fcCEhbGbvLYwzzWYwIYKr08r6ad69D8AzHNCbNZKI5EmJvzcwknGUEdS+ eTrWGsGZgCuWUCEk8eWufORIOHy+mLs= -----END CERTIFICATE-----Generated at Fri May 9 18:50:41 2025 by rpki-client