$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa File: 2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa (raw, json) Hash identifier: xiaK3cZPH5xqL4iuR0OggwV7RpV11PNF3b+FAblC+g4= Subject key identifier: 6D:3D:D6:68:CD:AC:2E:59:C4:3D:65:20:F5:AF:26:90:B7:71:15:B0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCE0F82D7A74AD2E29E40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.29.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:ce:0f:82:d7:a7:4a:d2:e2:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=5c5b1f84-8ec3-4aee-806d-7655bb5ce1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:09:4d:1b:42:52:39:9c:fc:6e:ee:6c:e5: d5:79:ca:87:db:fb:47:1d:af:71:e0:91:b0:3a:47: 74:7e:48:f8:5a:13:3b:8d:53:e1:21:2d:94:2d:fa: 3d:e7:97:28:0d:c7:22:f9:ff:49:af:cf:66:e0:e2: f2:94:a1:f1:08:4b:fb:ba:71:35:27:5a:1a:3f:53: 18:95:40:6b:26:7d:c2:d0:48:30:6d:61:a2:10:3f: 33:78:4d:de:af:d2:ef:f5:5f:0b:e6:af:ee:29:91: f8:fa:bb:1f:bf:3b:f9:dd:d6:c5:c7:71:7a:66:5e: 56:aa:ec:4a:11:bb:24:b0:2c:99:89:98:87:ec:29: c6:94:91:31:c3:13:b5:13:3b:f1:ec:1c:bf:73:42: 1b:b3:93:7d:dd:b6:96:ff:4d:cc:d0:49:18:4e:84: 94:8b:a3:33:85:00:db:53:04:96:69:c5:09:7c:d2: 34:39:65:a4:4c:c5:fa:6d:64:32:4d:24:5f:44:5c: e5:cd:c9:b5:0f:f3:24:e6:58:98:5e:f6:f5:98:00: 7f:e3:a4:92:46:72:b3:bf:bd:a2:71:91:a4:b5:a4: 27:da:56:15:43:17:b3:55:5e:a7:f2:54:34:a8:56: ff:8e:2f:dd:f9:ee:3e:dd:b1:0f:88:3a:08:a7:f3: 02:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3D:D6:68:CD:AC:2E:59:C4:3D:65:20:F5:AF:26:90:B7:71:15:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cae8bd8-e38a-34f6-9c41-2db8978558fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c1:35:0b:0d:04:66:39:cd:f2:5e:a3:aa:19:2b:30:7b:36: 17:06:f4:af:58:01:59:59:54:30:52:61:42:66:dd:d6:dc:19: 8c:7a:c8:64:fc:4b:55:db:91:55:a7:f7:8d:88:1d:b2:59:8b: 54:72:e9:b6:8a:94:dc:76:ac:2a:79:49:30:17:8c:62:38:4d: 37:da:e1:51:48:c9:cb:57:17:1b:ae:db:93:55:f7:cf:42:8f: 06:85:aa:6e:d9:39:f6:c8:9f:64:e5:60:4a:16:53:a4:3c:73: 21:c3:61:1a:80:34:4c:54:d0:a8:37:1e:44:be:70:4e:c5:e0: 37:90:60:ef:8e:7b:b4:ed:67:12:5e:f8:fa:35:1f:d6:ae:39: 8a:82:10:06:fc:9b:9a:14:50:79:74:79:6c:40:f5:bc:c9:90: 47:b6:a0:9f:c6:32:0f:35:b7:1b:4f:32:fd:bc:ca:42:18:df: 84:d0:b7:3a:f3:b0:59:9c:f8:83:ed:ec:7c:a8:d1:02:41:9f: 03:a1:da:7a:85:ce:8c:51:cb:f9:bc:da:70:12:8d:a1:8b:6d: e8:62:3a:57:0b:67:ea:91:44:97:3c:e5:a3:c6:7d:02:d0:ef: e3:36:5a:7b:09:3d:2c:03:ba:1c:7c:12:88:40:89:25:47:64: 70:c2:08:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk784PgtenStLinkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NWM1YjFmODQtOGVjMy00YWVlLTgwNmQtNzY1NWJiNWNlMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/EJTRtCUjmc/G7ubOXVecqH2/tHHa9x4JGw Okd0fkj4WhM7jVPhIS2ULfo955coDcci+f9Jr89m4OLylKHxCEv7unE1J1oaP1MY lUBrJn3C0EgwbWGiED8zeE3er9Lv9V8L5q/uKZH4+rsfvzv53dbFx3F6Zl5WquxK EbsksCyZiZiH7CnGlJExwxO1Ezvx7By/c0Ibs5N93baW/03M0EkYToSUi6MzhQDb UwSWacUJfNI0OWWkTMX6bWQyTSRfRFzlzcm1D/Mk5liYXvb1mAB/46SSRnKzv72i cZGktaQn2lYVQxezVV6n8lQ0qFb/ji/d+e4+3bEPiDoIp/MCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG091mjNrC5ZxD1lIPWvJpC3cRWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmNhZThiZDgtZTM4YS0z NGY2LTljNDEtMmRiODk3ODU1OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjBNQsNBGY5zfJeo6oZKzB7NhcG9K9YAVlZVDBSYUJm3dbcGYx6yGT8 S1XbkVWn942IHbJZi1Ry6baKlNx2rCp5STAXjGI4TTfa4VFIyctXFxuu25NV989C jwaFqm7ZOfbIn2TlYEoWU6Q8cyHDYRqANExU0Kg3HkS+cE7F4DeQYO+Oe7TtZxJe +Po1H9auOYqCEAb8m5oUUHl0eWxA9bzJkEe2oJ/GMg81txtPMv28ykIY34TQtzrz sFmc+IPt7Hyo0QJBnwOh2nqFzoxRy/m82nASjaGLbehiOlcLZ+qRRJc85aPGfQLQ 7+M2WnsJPSwDuhx8EohAiSVHZHDCCMg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:52 2025 by rpki-client