$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa File: ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa (raw, json) Hash identifier: EO6x6mYT/OlCR/myBavQfN120bla2D+canrbxgQsbq8= Subject key identifier: DB:17:7D:08:0E:94:F6:B9:84:E0:FE:37:7A:6F:C8:97:A5:16:09:2E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C35C5C1E24F4822D6940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.19.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c3:5c:5c:1e:24:f4:82:2d:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=51804eeb-3cc9-47dc-b340-a2ccd8cc5586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:67:f1:78:15:86:2b:c5:94:02:2f:8d:b4: fa:92:2e:64:05:4f:e6:ff:11:63:da:c3:97:72:4a: 28:68:e7:36:f3:23:7e:99:8d:98:03:62:75:c7:4b: 37:ea:b4:8e:05:52:2e:29:8d:d3:d8:8f:a1:6a:36: 10:7b:87:20:9f:a9:71:9e:9d:2a:28:22:99:b0:37: 84:4c:0a:30:74:8a:93:c4:d9:cf:56:ea:da:d8:6c: b6:94:50:06:7c:9b:7a:8d:6c:f0:8d:bb:84:64:dc: 17:f9:a9:e9:33:7e:05:d1:e0:74:7d:5b:c5:cb:ed: fd:7e:36:41:ac:fc:fd:d9:84:65:b9:96:9d:3c:6c: 42:45:db:ab:9d:62:8b:37:dc:56:52:aa:ca:1e:ac: 29:0f:af:36:a9:97:1c:31:5f:aa:23:61:e2:3f:6b: 44:9e:06:94:db:f4:c1:e4:85:97:57:da:3f:4f:b9: e5:84:39:3e:35:78:9e:c3:80:d6:c3:7c:61:f4:2b: 33:89:0a:9c:7f:e7:f7:b8:73:12:50:57:52:23:09: 0f:3d:f2:56:82:84:dc:bf:4b:db:4c:1e:00:d4:cb: 8a:fe:4e:43:18:36:51:4f:fa:ed:1b:f5:6d:34:13: 02:93:a9:f3:98:10:76:5e:bb:91:25:96:12:63:a8: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:17:7D:08:0E:94:F6:B9:84:E0:FE:37:7A:6F:C8:97:A5:16:09:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:91:a4:09:89:0b:1b:33:06:04:23:87:2f:77:e2:37:83:23: 98:18:46:c4:87:f9:7d:35:e6:4c:e1:a2:6b:c1:20:d1:80:0a: ed:51:16:36:77:b7:82:60:df:99:9d:6d:3a:7a:89:c3:02:45: 6e:a7:63:b1:15:1e:4e:a9:bb:7c:a0:7b:b3:4b:6d:b2:a0:f6: 66:01:60:fa:93:96:f4:49:19:88:c5:24:0b:b9:04:f1:78:b0: 60:f8:de:34:c5:fa:02:00:52:94:95:e6:92:00:29:af:41:f6: 48:c3:2c:ab:2b:d6:19:df:7f:a0:e3:73:e7:37:bb:f8:8b:02: c5:b8:15:7c:9f:22:e3:28:30:42:f4:5e:85:a1:5f:ee:de:50: e0:84:01:24:44:f0:67:1e:f3:75:54:0b:3a:fb:8b:ba:2e:c8: 25:67:46:64:0d:eb:a6:5a:40:5f:09:8d:a5:69:9c:78:d9:15: fe:69:b8:f0:90:bd:61:6b:85:10:eb:b2:28:f3:9b:02:64:8e: 1e:d6:63:f6:1e:30:63:1d:af:66:e5:a0:6d:3d:f6:17:07:c6: 66:03:77:65:60:71:54:07:0a:69:d5:d1:d3:45:66:fb:dd:e8: cf:a5:80:12:1a:52:0f:dc:af:15:33:77:48:0e:f9:86:eb:6e: db:6b:84:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsNcXB4k9IItaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NTE4MDRlZWItM2NjOS00N2RjLWIzNDAtYTJjY2Q4Y2M1NTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ln8XgVhivFlAIvjbT6ki5kBU/m/xFj2sOX ckooaOc28yN+mY2YA2J1x0s36rSOBVIuKY3T2I+hajYQe4cgn6lxnp0qKCKZsDeE TAowdIqTxNnPVura2Gy2lFAGfJt6jWzwjbuEZNwX+anpM34F0eB0fVvFy+39fjZB rPz92YRluZadPGxCRdurnWKLN9xWUqrKHqwpD682qZccMV+qI2HiP2tEngaU2/TB 5IWXV9o/T7nlhDk+NXiew4DWw3xh9CsziQqcf+f3uHMSUFdSIwkPPfJWgoTcv0vb TB4A1MuK/k5DGDZRT/rtG/VtNBMCk6nzmBB2XruRJZYSY6jpBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsXfQgOlPa5hOD+N3pvyJelFgkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmY0M2JiMjItNDEwMS0z OWZiLWEwZGYtMmUwZDBiM2FhMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGRpAmJCxszBgQjhy934jeDI5gYRsSH+X015kzhomvBINGACu1RFjZ3 t4Jg35mdbTp6icMCRW6nY7EVHk6pu3yge7NLbbKg9mYBYPqTlvRJGYjFJAu5BPF4 sGD43jTF+gIAUpSV5pIAKa9B9kjDLKsr1hnff6Djc+c3u/iLAsW4FXyfIuMoMEL0 XoWhX+7eUOCEASRE8Gce83VUCzr7i7ouyCVnRmQN66ZaQF8JjaVpnHjZFf5puPCQ vWFrhRDrsijzmwJkjh7WY/YeMGMdr2bloG099hcHxmYDd2VgcVQHCmnV0dNFZvvd 6M+lgBIaUg/crxUzd0gO+YbrbttrhL8= -----END CERTIFICATE-----Generated at Tue May 6 18:41:33 2025 by rpki-client