$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa File: f48deab7-a013-392b-a803-389dfad110a3.roa (raw, json) Hash identifier: 2ucMo0qHOo9ixE42vasIPrHKitfo/PbN/DUCTno0BxQ= Subject key identifier: 28:B5:71:14:28:D8:9E:60:27:0E:0C:52:2F:13:70:1C:FD:DA:1A:F6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BBF52E2D9E0E0690B4A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.16.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bb:f5:2e:2d:9e:0e:06:90:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=0564b772-ae8d-4a86-962a-fd906edc643d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:50:39:d0:05:fa:4d:88:c5:09:09:08:47:42: d6:72:03:05:f7:5e:71:fb:1f:ad:25:32:d2:41:2b: ea:bf:91:99:70:3b:c7:70:88:74:f2:85:f7:79:35: d4:a1:ca:09:a4:dc:99:2d:a0:58:48:8d:a9:cc:ba: c9:19:bc:ee:a8:81:52:31:16:fb:88:3f:90:93:66: 27:c4:1e:a6:e8:08:41:a1:ef:a6:dd:50:4e:82:15: 6e:48:d5:bf:6e:8f:34:68:83:fe:1b:1a:2a:22:bc: ee:9d:f1:b4:cf:1a:7d:80:d0:33:a5:64:db:35:11: 86:64:6c:56:be:2d:76:be:e5:96:da:2d:dd:3a:8e: 17:80:dc:58:f2:d3:b7:4f:f0:a8:b6:07:96:c4:49: d0:a6:5e:f0:78:dc:f1:6e:f6:94:02:74:c4:79:f8: a2:39:41:8f:b8:13:f9:c6:c8:5c:52:87:6b:6c:9f: 17:23:82:de:70:87:d0:47:a7:ac:b2:9a:a9:da:2c: e8:b8:68:d7:7e:a1:03:ae:2e:cb:05:13:8b:6e:81: f6:71:de:c7:ae:ba:ef:bc:34:54:8e:ac:90:a9:73: c0:83:11:99:96:ac:e5:54:f7:4c:20:ff:8b:52:da: cc:be:45:61:d2:84:91:52:d6:b0:bf:03:ec:fe:81: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:71:14:28:D8:9E:60:27:0E:0C:52:2F:13:70:1C:FD:DA:1A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.16.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c8:59:67:c6:25:40:0d:9e:cc:6f:b9:fa:8a:61:46:10:26: 62:bf:0f:cf:35:4d:d6:c1:51:bc:18:bd:70:2e:a6:0f:d7:e7: 96:b0:c0:75:1e:cf:f4:98:b1:a3:07:45:9f:2e:08:b2:05:36: c5:e7:35:c2:50:65:94:c7:0a:db:a5:c1:4a:42:80:22:0e:75: de:67:b4:4c:4a:4f:c3:57:07:d5:a1:2e:5f:6a:e5:fc:c0:3e: d8:46:33:92:ba:e0:57:18:be:85:72:7d:8f:db:01:49:4b:9b: 75:77:ed:0f:b3:46:77:31:47:78:04:4c:91:c2:d8:0f:92:00: dd:dd:a0:be:a4:cb:7f:ea:24:75:ce:31:5d:d7:f6:f9:47:7b: 8e:32:f5:56:d8:ef:ce:51:1e:54:4f:6c:bb:20:c8:83:ec:b9: a4:df:70:fc:25:8f:5b:3e:53:a9:8a:01:5c:42:08:57:45:e0: 47:91:14:f2:d0:5d:12:f1:73:7a:44:bb:65:1b:3e:ad:dc:45: 6a:5b:27:00:c6:e9:7a:84:d8:16:93:fb:58:d1:e1:e7:ca:28: 31:8d:ab:e1:55:98:7d:73:d6:3e:50:f2:6b:ee:ba:aa:b4:de: d6:ce:23:cf:25:a3:cb:b8:03:c7:bb:93:2f:dd:1a:84:cd:e4: dd:0c:5e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrv1Li2eDgaQtKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MDU2NGI3NzItYWU4ZC00YTg2LTk2MmEtZmQ5MDZlZGM2NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlA50AX6TYjFCQkIR0LWcgMF915x+x+tJTLS QSvqv5GZcDvHcIh08oX3eTXUocoJpNyZLaBYSI2pzLrJGbzuqIFSMRb7iD+Qk2Yn xB6m6AhBoe+m3VBOghVuSNW/bo80aIP+GxoqIrzunfG0zxp9gNAzpWTbNRGGZGxW vi12vuWW2i3dOo4XgNxY8tO3T/CotgeWxEnQpl7weNzxbvaUAnTEefiiOUGPuBP5 xshcUodrbJ8XI4LecIfQR6esspqp2izouGjXfqEDri7LBROLboH2cd7HrrrvvDRU jqyQqXPAgxGZlqzlVPdMIP+LUtrMvkVh0oSRUtawvwPs/oEJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi1cRQo2J5gJw4MUi8TcBz92hr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQ4ZGVhYjctYTAxMy0z OTJiLWE4MDMtMzg5ZGZhZDExMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbIWWfGJUANnsxvufqKYUYQJmK/D881TdbBUbwYvXAupg/X55awwHUe z/SYsaMHRZ8uCLIFNsXnNcJQZZTHCtulwUpCgCIOdd5ntExKT8NXB9WhLl9q5fzA PthGM5K64FcYvoVyfY/bAUlLm3V37Q+zRncxR3gETJHC2A+SAN3doL6ky3/qJHXO MV3X9vlHe44y9VbY785RHlRPbLsgyIPsuaTfcPwlj1s+U6mKAVxCCFdF4EeRFPLQ XRLxc3pEu2UbPq3cRWpbJwDG6XqE2BaT+1jR4efKKDGNq+FVmH1z1j5Q8mvuuqq0 3tbOI88lo8u4A8e7ky/dGoTN5N0MXl8= -----END CERTIFICATE-----Generated at Sat May 10 19:00:36 2025 by rpki-client