$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa File: 29937129-8e48-32c7-aae7-869e514cab8d.roa (raw, json) Hash identifier: l+amXTAuI/Piv8X3p9/x+U4qahcn4V7JMd99h4LY1mc= Subject key identifier: 49:2B:98:8D:98:37:93:28:7D:28:E8:8A:C8:57:61:8E:47:49:97:0F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC7D15F54E0819FABE56A Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.17.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c7:d1:5f:54:e0:81:9f:ab:e5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=4920a451-1f82-409e-81be-11c6162410bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:bc:1a:e0:72:be:c4:bc:bd:10:a5:aa:83: a9:2d:81:3a:81:23:dd:51:2a:05:92:ee:8b:ef:68: 33:9b:31:6b:c1:69:b5:8b:81:2e:d0:54:1f:67:8a: fd:9c:ac:47:44:65:d4:5e:b1:27:33:3d:8a:bf:29: 33:d7:04:a3:fd:6b:a8:89:4e:c5:98:61:98:c4:9b: 80:37:ea:3b:be:dc:5b:59:3e:43:0d:b4:39:ee:4a: a6:6c:ea:bc:52:70:84:e6:bf:cb:0d:c0:55:9d:d2: 4e:8e:85:8a:f6:21:2d:5f:b5:0a:99:60:fe:83:7b: cc:90:89:c2:28:0e:6b:59:35:b4:77:0f:63:31:be: c0:16:1c:4c:17:36:31:6e:f7:99:83:6f:3b:5d:31: 99:b3:7f:c5:03:3e:e7:57:65:96:2b:38:76:2a:81: 72:c6:da:4b:9e:a7:da:21:fe:c9:db:ea:1b:31:ad: ed:61:86:ae:c9:5e:81:f0:7e:b7:ca:5e:0e:35:51: 67:00:db:d5:3d:ac:11:d2:e1:74:e4:63:7b:dd:bc: 44:bb:03:3a:90:ef:66:e1:a8:25:b6:2c:0e:9d:cb: c3:35:22:a9:e3:71:32:64:7e:83:81:b8:b4:22:c9: 93:ba:27:21:ef:d6:d3:7a:01:29:fb:ee:bf:1e:85: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2B:98:8D:98:37:93:28:7D:28:E8:8A:C8:57:61:8E:47:49:97:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3f:0f:f9:0e:57:0e:64:82:3b:1c:0b:2f:4e:72:2a:42:d0: 47:ad:c2:f4:d7:56:82:04:b6:eb:bd:57:aa:ba:d8:40:6b:d0: 99:de:20:bf:29:ec:7a:65:97:5b:16:d6:00:64:4d:bd:33:43: b5:ea:0f:73:ab:68:d6:73:c8:a2:d3:59:a0:5e:78:da:22:69: 50:93:4b:e8:08:c7:c1:88:06:ed:10:03:0b:27:a4:37:1b:42: b7:0b:0e:6b:79:e4:47:0e:15:53:8b:c7:39:a7:d4:c4:a7:c8: fb:a3:70:e4:7e:84:ef:b0:21:23:45:f9:0b:87:67:94:8b:ce: e4:b0:f0:2d:61:b3:0a:66:0c:8c:b8:6e:49:9d:6a:a2:01:15: 4d:36:9c:86:9f:f9:51:78:99:eb:4e:3b:37:ce:0a:6b:b2:24: 3a:66:40:12:15:8a:c4:79:b9:82:74:90:0c:95:c2:18:31:b0: e1:28:43:0c:d9:3f:5b:ca:37:2a:c4:d8:16:9d:98:7a:8b:ce: 98:5a:a3:b9:1c:db:53:9e:28:96:e8:cd:23:e6:a3:77:e9:41: 66:b7:b4:d5:ba:2d:6e:fa:f8:46:01:84:ac:71:9d:21:4c:3f: 20:f5:0c:5d:e7:3e:f5:d2:fa:37:d0:a4:a1:66:58:1a:51:3c: 96:35:4d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78fRX1TggZ+r5WowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NDkyMGE0NTEtMWY4Mi00MDllLTgxYmUtMTFjNjE2MjQxMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlde8GuByvsS8vRClqoOpLYE6gSPdUSoFku6L 72gzmzFrwWm1i4Eu0FQfZ4r9nKxHRGXUXrEnMz2Kvykz1wSj/WuoiU7FmGGYxJuA N+o7vtxbWT5DDbQ57kqmbOq8UnCE5r/LDcBVndJOjoWK9iEtX7UKmWD+g3vMkInC KA5rWTW0dw9jMb7AFhxMFzYxbveZg287XTGZs3/FAz7nV2WWKzh2KoFyxtpLnqfa If7J2+obMa3tYYauyV6B8H63yl4ONVFnANvVPawR0uF05GN73bxEuwM6kO9m4agl tiwOncvDNSKp43EyZH6Dgbi0IsmTuich79bTegEp++6/HoUDUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkrmI2YN5MofSjoishXYY5HSZcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjk5MzcxMjktOGU0OC0z MmM3LWFhZTctODY5ZTUxNGNhYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo/D/kOVw5kgjscCy9OcipC0EetwvTXVoIEtuu9V6q62EBr0JneIL8p 7Hpll1sW1gBkTb0zQ7XqD3OraNZzyKLTWaBeeNoiaVCTS+gIx8GIBu0QAwsnpDcb QrcLDmt55EcOFVOLxzmn1MSnyPujcOR+hO+wISNF+QuHZ5SLzuSw8C1hswpmDIy4 bkmdaqIBFU02nIaf+VF4metOOzfOCmuyJDpmQBIVisR5uYJ0kAyVwhgxsOEoQwzZ P1vKNyrE2BadmHqLzphao7kc21OeKJbozSPmo3fpQWa3tNW6LW76+EYBhKxxnSFM PyD1DF3nPvXS+jfQpKFmWBpRPJY1TQg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:43:24 2025 by rpki-client