$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa File: 29937129-8e48-32c7-aae7-869e514cab8d.roa (raw, json) Hash identifier: AaOJ62+NlflbEEeJbX8ZqO8KFYWVYWnRD1ef5iShyQs= Subject key identifier: BA:3F:A5:BD:C7:16:64:4C:54:53:74:0A:B2:4C:1C:38:C2:D0:26:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BC51E60BC9D74CB85480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.17.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bc:51:e6:0b:c9:d7:4c:b8:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=af04ff64-1b51-4a98-bc65-e962bc891a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:e6:f9:c8:f9:8d:58:61:fa:52:1f:c9:a0: bf:e4:40:a1:5d:3d:90:3c:bd:2a:5b:38:b2:39:11: 85:79:d7:91:f0:9e:b1:94:a4:a1:9b:7c:3d:cd:f4: 39:f5:29:59:d0:49:4f:29:41:e8:3b:d6:3f:ca:b1: d1:e0:1d:45:07:19:cf:fc:83:75:5e:c6:62:8f:47: 34:32:ec:1d:d4:b0:2b:98:87:35:15:75:1c:a1:21: 7a:a3:48:d9:46:9f:c7:e1:f4:79:db:34:fa:cb:eb: 00:d3:4b:9a:39:b0:75:2b:05:a7:cd:e7:64:91:18: 77:c2:2f:50:45:b1:45:2d:77:21:bb:76:b3:a5:d3: 27:c9:f5:41:27:8f:9e:a6:1d:52:5a:77:ec:b7:c6: 86:2a:31:5f:b8:ca:fb:8a:c5:e8:94:49:eb:17:75: 3b:1b:da:5c:52:7e:9b:cb:08:81:fa:18:94:8b:5d: 3a:d6:5f:52:cc:ad:37:00:c0:52:e1:92:a2:1e:fb: cf:ab:15:10:08:83:5a:12:d3:4c:79:01:f5:26:fc: 94:5b:d6:0a:6f:a5:5a:25:fc:59:bf:13:ea:02:55: 53:e5:1f:79:ce:70:97:ba:f1:b0:c0:c2:a6:4c:cd: 64:9f:2a:88:9f:e2:48:4b:b8:63:8e:7b:47:f1:27: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3F:A5:BD:C7:16:64:4C:54:53:74:0A:B2:4C:1C:38:C2:D0:26:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29937129-8e48-32c7-aae7-869e514cab8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.17.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5c:41:ce:f1:a6:09:b3:66:3d:6f:6d:55:42:fc:4a:ac:95: d5:1f:b2:f8:6b:31:fa:4e:d6:8f:18:5c:8f:64:0f:3a:6d:6f: 68:97:5b:c6:3e:84:11:5b:53:0b:2c:2d:c3:b0:ac:11:99:7b: 8d:cc:12:b6:55:fb:1d:a7:fe:06:cf:80:1e:34:d7:e5:49:1a: 27:07:53:6f:c8:7f:54:14:82:5d:50:dc:ad:ea:2a:88:f8:53: fc:28:9c:1d:70:0f:66:a8:d0:29:00:f9:6e:a4:74:c5:96:a2: 52:97:4d:76:5b:ac:93:24:31:07:1b:19:dc:62:41:b2:d6:3d: 1a:19:07:36:d5:86:49:89:69:57:f5:bb:e2:af:19:b1:23:f2: db:04:45:98:63:e2:09:3b:21:c6:a9:8e:06:31:15:e6:ed:ea: d5:94:5a:ca:e4:c8:65:1d:ce:07:db:e2:f8:87:15:a8:c9:fc: 07:ce:e5:93:5e:ba:e1:c0:77:d1:af:f4:7b:39:dd:b7:c7:11: 3b:9a:d8:92:30:48:e2:ed:f6:1e:b9:4b:67:aa:0c:96:97:88: 65:ee:74:84:8f:6f:5a:5c:83:1f:ff:1b:cf:23:33:d5:ec:79: 7a:c6:05:73:b6:71:c2:3b:50:29:59:4c:b0:5b:dd:62:3a:80: 06:74:dc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrxR5gvJ10y4VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YWYwNGZmNjQtMWI1MS00YTk4LWJjNjUtZTk2MmJjODkxYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Lm+cj5jVhh+lIfyaC/5EChXT2QPL0qWziy ORGFedeR8J6xlKShm3w9zfQ59SlZ0ElPKUHoO9Y/yrHR4B1FBxnP/IN1XsZij0c0 Muwd1LArmIc1FXUcoSF6o0jZRp/H4fR52zT6y+sA00uaObB1KwWnzedkkRh3wi9Q RbFFLXchu3azpdMnyfVBJ4+eph1SWnfst8aGKjFfuMr7isXolEnrF3U7G9pcUn6b ywiB+hiUi1061l9SzK03AMBS4ZKiHvvPqxUQCINaEtNMeQH1JvyUW9YKb6VaJfxZ vxPqAlVT5R95znCXuvGwwMKmTM1knyqIn+JIS7hjjntH8SdF3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo/pb3HFmRMVFN0CrJMHDjC0CaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjk5MzcxMjktOGU0OC0z MmM3LWFhZTctODY5ZTUxNGNhYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRcQc7xpgmzZj1vbVVC/EqsldUfsvhrMfpO1o8YXI9kDzptb2iXW8Y+ hBFbUwssLcOwrBGZe43MErZV+x2n/gbPgB401+VJGicHU2/If1QUgl1Q3K3qKoj4 U/wonB1wD2ao0CkA+W6kdMWWolKXTXZbrJMkMQcbGdxiQbLWPRoZBzbVhkmJaVf1 u+KvGbEj8tsERZhj4gk7IcapjgYxFebt6tWUWsrkyGUdzgfb4viHFajJ/AfO5ZNe uuHAd9Gv9Hs53bfHETua2JIwSOLt9h65S2eqDJaXiGXudISPb1pcgx//G88jM9Xs eXrGBXO2ccI7UClZTLBb3WI6gAZ03KQ= -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:22 2025 by rpki-client