$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002e0a74-eeff-33a8-b35b-6d1dbe58840c.roa File: 002e0a74-eeff-33a8-b35b-6d1dbe58840c.roa (raw, json) Hash identifier: S/MxpZk9EMEzHZEr3I7P0J/dXtCqh4CW7QVsAsAapH0= Subject key identifier: 87:7D:2E:F9:09:90:D4:7C:86:D8:C2:53:A1:B2:8C:B3:D6:88:05:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD9B035C4130560175B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002e0a74-eeff-33a8-b35b-6d1dbe58840c.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.29.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d9:b0:35:c4:13:05:60:17:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=3918f140-16fe-4280-b892-b5f9cf71ee34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:72:40:4d:e1:09:56:bb:29:9f:b8:05:c7: d7:16:55:a9:76:3a:a5:73:3c:21:77:84:f4:e0:2b: 34:e4:bd:33:51:48:74:0e:d4:ce:77:cb:83:c5:b9: cf:8e:fa:58:81:69:70:aa:ce:d1:75:9a:f1:78:51: 0d:f4:0c:5e:09:85:f4:ab:fc:05:71:f7:fa:e2:98: 72:b9:87:c9:a0:eb:95:be:31:b1:4e:ac:e6:4e:72: 72:aa:57:99:4c:21:ff:27:f2:8d:36:36:17:aa:53: d8:9f:92:cc:2a:07:d9:c7:e0:68:7c:bd:d7:fb:33: 2b:88:fc:37:bd:f6:66:6d:5f:f3:e5:88:2f:1b:2a: cd:64:63:25:0d:d6:59:1a:e6:45:02:f6:18:54:a7: 45:94:05:7a:5c:f2:11:f9:04:4d:af:e7:21:a4:ec: d8:18:bf:e2:06:07:e9:d3:ff:64:ab:69:1c:ad:2e: 3e:9e:23:53:6b:a7:b6:37:f6:b6:c1:e3:b6:94:a1: 3a:e0:0d:d2:45:13:05:d6:c1:36:48:7f:72:9d:40: bd:1f:43:9e:fa:fd:ad:4d:32:c2:7c:0c:29:fc:b4: 54:58:9f:de:44:91:e9:1a:ea:88:26:88:01:05:56: 47:be:b2:c0:3b:ca:76:ec:81:fc:08:44:97:23:4e: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:2E:F9:09:90:D4:7C:86:D8:C2:53:A1:B2:8C:B3:D6:88:05:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002e0a74-eeff-33a8-b35b-6d1dbe58840c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d3:75:c1:d1:ff:74:de:d0:ad:57:95:98:b8:7b:09:26:c4: 5f:2b:92:23:f4:07:ff:7e:13:52:14:94:fd:a9:e4:d2:92:7c: 6e:55:d5:de:a0:78:31:0b:6c:d2:5c:7e:cc:ab:a8:12:22:35: 8d:92:c1:dc:6e:7e:99:ad:b0:c2:21:f2:a4:c0:1a:47:28:4a: 4b:47:e3:b1:2a:8b:ef:a5:bb:f4:e1:42:61:a6:d1:7f:69:61: 4b:46:99:d2:4d:ca:5a:cb:9e:84:bc:ac:ba:90:e1:b2:26:46: 79:dc:e6:24:87:8b:16:4e:54:9a:4a:55:85:80:bb:61:10:8a: 90:22:ca:6c:f8:52:c7:f8:23:73:d0:62:2e:79:e5:a4:9e:0d: 00:36:40:ab:ae:ab:0c:ee:5b:07:bb:6c:c2:45:ef:23:dd:54: d1:a4:63:e8:67:0b:dd:a3:ba:16:7b:e7:bc:f9:54:2d:14:14: 9e:4e:99:43:37:ca:e8:e8:d1:71:d2:a0:44:9a:3d:7d:df:af: 81:11:55:58:c5:4d:a0:ea:11:2a:ba:6c:76:fd:72:86:0c:80: 4e:b6:e0:b4:34:0c:74:94:be:c7:a9:61:29:c6:49:bf:d9:56: e1:80:41:f5:8a:d3:43:d2:67:2e:4d:98:e3:c7:51:26:5a:df: 36:02:91:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79mwNcQTBWAXWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzkxOGYxNDAtMTZmZS00MjgwLWI4OTItYjVmOWNmNzFlZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsxyQE3hCVa7KZ+4BcfXFlWpdjqlczwhd4T0 4Cs05L0zUUh0DtTOd8uDxbnPjvpYgWlwqs7RdZrxeFEN9AxeCYX0q/wFcff64phy uYfJoOuVvjGxTqzmTnJyqleZTCH/J/KNNjYXqlPYn5LMKgfZx+BofL3X+zMriPw3 vfZmbV/z5YgvGyrNZGMlDdZZGuZFAvYYVKdFlAV6XPIR+QRNr+chpOzYGL/iBgfp 0/9kq2kcrS4+niNTa6e2N/a2weO2lKE64A3SRRMF1sE2SH9ynUC9H0Oe+v2tTTLC fAwp/LRUWJ/eRJHpGuqIJogBBVZHvrLAO8p27IH8CESXI07csQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId9LvkJkNR8htjCU6GyjLPWiAW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDAyZTBhNzQtZWVmZi0z M2E4LWIzNWItNmQxZGJlNTg4NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfTdcHR/3Te0K1XlZi4ewkmxF8rkiP0B/9+E1IUlP2p5NKSfG5V1d6g eDELbNJcfsyrqBIiNY2SwdxufpmtsMIh8qTAGkcoSktH47Eqi++lu/ThQmGm0X9p YUtGmdJNylrLnoS8rLqQ4bImRnnc5iSHixZOVJpKVYWAu2EQipAiymz4Usf4I3PQ Yi555aSeDQA2QKuuqwzuWwe7bMJF7yPdVNGkY+hnC92juhZ757z5VC0UFJ5OmUM3 yujo0XHSoESaPX3fr4ERVVjFTaDqESq6bHb9coYMgE624LQ0DHSUvsepYSnGSb/Z VuGAQfWK00PSZy5NmOPHUSZa3zYCkdg= -----END CERTIFICATE-----Generated at Sat Jun 7 17:24:29 2025 by rpki-client