$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02956d87-d34a-3fd1-8443-95b67d9092f4.roa File: 02956d87-d34a-3fd1-8443-95b67d9092f4.roa (raw, json) Hash identifier: nkPBHkh7Z7DVm7DDlV3pSF/NVeJlTm8h+7/UnvUjnyw= Subject key identifier: 45:F1:A0:51:C9:1C:BA:76:51:05:72:1C:D7:24:A5:D8:8B:99:10:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CC4132335BB0DCAA8080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02956d87-d34a-3fd1-8443-95b67d9092f4.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.29.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cc:41:32:33:5b:b0:dc:aa:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=6337fb78-c555-48a4-9fd1-c08cfd3d9184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:90:e1:ef:6b:b8:4e:64:42:76:79:93:2c:8a: ba:ba:31:af:18:d6:cb:cb:91:2b:47:0a:91:3b:e9: 7a:c2:e5:e7:85:d2:f6:bb:72:4f:10:dd:5d:c2:43: 73:fc:b3:f6:42:83:87:2a:1a:b4:48:a9:b2:99:d9: 8c:aa:8f:11:48:73:48:3f:b8:4d:69:bf:4c:d3:11: d2:50:80:40:d5:9d:b4:47:b7:d5:7e:51:d5:6c:1b: ca:a5:ff:dd:ce:fb:46:ad:4b:36:45:1f:a3:3d:e5: 6b:c2:85:45:70:5d:3a:61:f1:20:33:93:72:af:de: 0b:14:87:80:3c:d2:6f:42:17:63:e6:b3:9c:1c:ec: 04:13:97:79:cb:d8:5c:85:93:13:f7:f5:0f:5b:0b: bb:23:58:86:27:10:39:98:08:bf:9c:fb:33:04:52: 4a:f5:bd:c4:40:20:c2:37:28:6b:84:67:7e:55:44: 7c:9d:e7:5f:11:5d:3e:bf:f5:5e:e4:32:72:3a:1a: b4:8d:9f:77:35:cd:1a:f3:85:78:cb:93:d0:6f:71: cd:e0:35:dd:26:61:72:18:e6:c8:5a:94:06:b7:cf: c1:8f:ed:ed:fa:6b:83:8c:6d:43:9e:63:49:fb:66: 82:33:ac:27:be:2b:d8:64:b7:d2:99:61:e9:03:38: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F1:A0:51:C9:1C:BA:76:51:05:72:1C:D7:24:A5:D8:8B:99:10:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02956d87-d34a-3fd1-8443-95b67d9092f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a7:c7:79:a5:b6:c3:36:79:55:3f:f7:d0:81:79:89:61:74: cb:d4:91:70:07:57:f5:7d:2a:fd:4d:46:a6:dd:8c:9d:49:ce: cc:c8:fb:b4:7f:f1:5d:c0:2e:a3:69:aa:0c:9b:73:c7:df:d6: b6:4c:c0:58:da:bf:ab:d5:72:4d:8d:78:3c:6e:4c:24:00:1e: 02:91:7f:bd:91:2d:2a:fc:51:62:4b:e6:10:d4:a1:e6:aa:7a: 18:ff:5e:6c:2f:78:8e:65:4b:ed:fd:20:fa:e4:28:53:2c:d7: b7:7c:87:de:db:df:95:31:f1:47:7e:36:db:54:63:46:9b:fb: a0:db:c5:ea:79:ba:0d:52:c3:88:9a:f4:2e:79:0d:fe:94:7f: 31:bb:f3:fc:d1:d7:db:92:89:7a:c3:dc:77:79:67:23:5d:c1: 57:74:34:00:16:02:6b:08:7d:06:a3:c6:11:f7:f9:39:82:10: 76:58:71:58:4b:90:80:3b:e4:47:e5:66:fa:ff:6d:ce:89:ed: 06:c0:09:bf:7d:6f:c3:3c:03:75:dc:9f:9b:8a:8f:92:d7:0a: 28:7e:f3:64:40:7a:d6:66:94:83:90:be:5c:aa:56:b0:9e:01: 5f:ab:13:8c:d5:45:4b:3c:b8:fc:74:f6:62:85:84:d7:35:ff: b1:15:bd:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsxBMjNbsNyqgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NjMzN2ZiNzgtYzU1NS00OGE0LTlmZDEtYzA4Y2ZkM2Q5MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JDh72u4TmRCdnmTLIq6ujGvGNbLy5ErRwqR O+l6wuXnhdL2u3JPEN1dwkNz/LP2QoOHKhq0SKmymdmMqo8RSHNIP7hNab9M0xHS UIBA1Z20R7fVflHVbBvKpf/dzvtGrUs2RR+jPeVrwoVFcF06YfEgM5Nyr94LFIeA PNJvQhdj5rOcHOwEE5d5y9hchZMT9/UPWwu7I1iGJxA5mAi/nPszBFJK9b3EQCDC NyhrhGd+VUR8nedfEV0+v/Ve5DJyOhq0jZ93Nc0a84V4y5PQb3HN4DXdJmFyGObI WpQGt8/Bj+3t+muDjG1DnmNJ+2aCM6wnvivYZLfSmWHpAzjktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXxoFHJHLp2UQVyHNckpdiLmRCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDI5NTZkODctZDM0YS0z ZmQxLTg0NDMtOTViNjdkOTA5MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOnx3mltsM2eVU/99CBeYlhdMvUkXAHV/V9Kv1NRqbdjJ1JzszI+7R/ 8V3ALqNpqgybc8ff1rZMwFjav6vVck2NeDxuTCQAHgKRf72RLSr8UWJL5hDUoeaq ehj/XmwveI5lS+39IPrkKFMs17d8h97b35Ux8Ud+NttUY0ab+6Dbxep5ug1Sw4ia 9C55Df6UfzG78/zR19uSiXrD3Hd5ZyNdwVd0NAAWAmsIfQajxhH3+TmCEHZYcVhL kIA75EflZvr/bc6J7QbACb99b8M8A3Xcn5uKj5LXCih+82RAetZmlIOQvlyqVrCe AV+rE4zVRUs8uPx09mKFhNc1/7EVvR4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:56:57 2025 by rpki-client