$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa File: 2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa (raw, json) Hash identifier: 26fz7IW5GY1aUvOtc6KE/OZ2RTG9urg01tL22fD7FyY= Subject key identifier: 22:2C:6E:87:20:64:C6:86:93:F5:E7:B6:74:6D:8E:C7:8B:23:D0:AC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCDB3549941F3940F7A74 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.29.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cd:b3:54:99:41:f3:94:0f:7a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=9762c4db-9448-47b0-a611-be4530c741f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:f3:e4:7c:dc:f6:09:54:81:a2:e4:fd:96: 22:3c:91:82:10:38:57:cc:1a:af:91:0c:61:d0:53: fd:b8:3a:69:ee:84:c6:b5:5e:17:e7:7b:37:19:5a: 0b:8b:43:68:b0:6d:a6:f4:65:88:40:49:02:78:30: d8:36:94:db:41:65:74:f6:ae:40:df:27:3e:9d:94: 75:c9:ea:a1:79:f3:86:a7:6a:34:f1:d6:b6:0d:97: f7:b5:19:6d:fb:a0:6f:08:2a:da:32:45:ea:15:0f: fa:43:8e:56:e7:66:b4:6b:42:c4:23:ff:51:e2:26: 21:dc:be:7f:cd:15:6d:89:66:7b:c9:56:81:95:00: 5e:4c:62:db:e9:97:7e:15:6d:64:11:90:4d:30:5d: 4f:a2:44:e6:f1:ef:bd:d9:40:f1:e2:5a:42:f3:86: 42:a0:08:7d:be:f5:a4:59:bd:58:c8:ed:8d:02:f9: 4c:5c:9d:33:7f:48:e1:f2:4c:c6:7c:60:45:7c:36: 01:67:89:e6:35:81:0e:03:05:f9:c3:0a:8d:48:a0: 6f:4d:77:b7:98:c6:a5:53:3b:aa:74:86:1a:1e:42: 75:5f:b9:13:cd:78:ca:7e:69:85:f2:8a:bd:1b:8a: 5a:d7:68:67:29:aa:b7:83:88:8b:a3:07:44:67:2c: ce:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:6E:87:20:64:C6:86:93:F5:E7:B6:74:6D:8E:C7:8B:23:D0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c89da82-7c13-378a-bfb2-f8f1de940e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:1a:75:b6:20:95:28:8a:c0:73:95:8c:79:e7:0b:4c:d3:62: ec:a7:41:79:4e:f0:89:ff:75:c3:c5:bc:c4:a4:30:fa:f7:6e: 3f:1c:03:c6:d2:74:98:92:e7:ec:b4:7c:2c:dc:b6:75:ab:9d: aa:9b:3e:af:98:b9:a9:36:d3:9b:2c:07:2d:d6:32:c8:a9:00: f3:ed:08:31:81:d2:f1:1b:50:37:91:d0:9a:21:a0:c1:bd:0f: c0:35:b0:a1:5e:a1:fe:19:a0:e8:ad:07:3c:35:40:88:dc:4c: 25:5e:c1:62:1b:a0:2a:bf:d7:eb:5c:d7:46:d3:6a:91:64:d6: 74:91:c3:36:a8:7f:cd:50:b0:b5:4c:26:34:31:f7:8d:c3:e5: 01:61:fc:26:48:a4:ff:77:28:c3:3c:8a:11:e7:ae:ce:73:a3: 0c:f2:d4:e6:3f:98:68:b8:e3:59:c0:41:7e:2d:ee:17:d7:c2: b2:0e:ca:21:b1:72:cd:ec:f6:4c:30:d3:b2:84:53:1f:e4:8b: 10:8c:3a:90:95:5e:a7:aa:4f:e2:37:74:db:1a:ef:da:30:81: f1:48:0c:ce:a0:47:01:c3:bd:46:57:fa:88:c4:b4:47:e7:b3: d0:f3:45:76:69:b2:23:4b:6b:3f:54:47:57:e1:e6:19:0a:a2: c3:fc:a0:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk782zVJlB85QPenQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTc2MmM0ZGItOTQ0OC00N2IwLWE2MTEtYmU0NTMwYzc0MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZTz5Hzc9glUgaLk/ZYiPJGCEDhXzBqvkQxh 0FP9uDpp7oTGtV4X53s3GVoLi0NosG2m9GWIQEkCeDDYNpTbQWV09q5A3yc+nZR1 yeqhefOGp2o08da2DZf3tRlt+6BvCCraMkXqFQ/6Q45W52a0a0LEI/9R4iYh3L5/ zRVtiWZ7yVaBlQBeTGLb6Zd+FW1kEZBNMF1PokTm8e+92UDx4lpC84ZCoAh9vvWk Wb1YyO2NAvlMXJ0zf0jh8kzGfGBFfDYBZ4nmNYEOAwX5wwqNSKBvTXe3mMalUzuq dIYaHkJ1X7kTzXjKfmmF8oq9G4pa12hnKaq3g4iLowdEZyzOXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIsbocgZMaGk/XntnRtjseLI9CsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM4OWRhODItN2MxMy0z NzhhLWJmYjItZjhmMWRlOTQwZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4adbYglSiKwHOVjHnnC0zTYuynQXlO8In/dcPFvMSkMPr3bj8cA8bS dJiS5+y0fCzctnWrnaqbPq+Yuak205ssBy3WMsipAPPtCDGB0vEbUDeR0JohoMG9 D8A1sKFeof4ZoOitBzw1QIjcTCVewWIboCq/1+tc10bTapFk1nSRwzaof81QsLVM JjQx943D5QFh/CZIpP93KMM8ihHnrs5zowzy1OY/mGi441nAQX4t7hfXwrIOyiGx cs3s9kww07KEUx/kixCMOpCVXqeqT+I3dNsa79owgfFIDM6gRwHDvUZX+ojEtEfn s9DzRXZpsiNLaz9UR1fh5hkKosP8oBY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:09 2025 by rpki-client