$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa File: 3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa (raw, json) Hash identifier: 6UNifzu+pQyDn7Zn6M7pPrp3X3LDWrT6YyHlGsYs6KM= Subject key identifier: 11:88:C3:97:D2:7A:25:EE:06:50:4C:2C:3D:9B:1B:7C:13:CD:3D:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF7F5C022142BCAE7D580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.29.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f7:f5:c0:22:14:2b:ca:e7:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=caf38e41-2ebe-4c3b-80fa-11fe0a59f398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b3:36:9a:f0:31:20:5d:90:71:e6:ba:a4:2c: 9f:9b:e6:a7:c1:2b:5b:76:ba:06:a3:0a:da:12:66: 5e:54:eb:57:09:41:10:22:b9:d6:b4:c8:45:4d:87: 5d:d5:db:d7:b8:e0:bf:24:7c:84:5a:3c:53:e8:a1: db:18:eb:b6:91:5b:82:14:8b:3a:8b:3e:76:e5:37: aa:ac:fd:2a:3a:38:e5:30:1e:19:99:b6:47:fb:1b: 6e:8c:54:32:64:ae:c8:3f:1f:ae:19:fa:de:ba:56: 7c:19:b0:85:d1:81:1f:c7:37:52:42:2d:64:8c:c6: 4e:6e:61:cb:20:a5:a7:3a:d6:b0:88:e6:72:e7:9d: bb:04:a9:82:7b:3f:f1:dc:46:ca:0c:f7:93:07:df: 18:4c:35:e1:59:42:bc:9b:8a:67:38:00:81:b2:16: 2b:95:bd:59:34:0c:0d:c4:b9:90:dc:c0:d5:86:d4: 17:a9:95:b6:20:55:15:a2:8f:6f:42:cd:92:77:7f: a0:6b:a2:94:76:9c:10:82:bb:23:24:ef:4b:2c:a9: 26:3a:2c:0d:0d:c1:a3:0b:61:d4:9a:84:73:4c:7a: 1f:33:35:c1:7a:6d:70:84:0d:c9:60:bb:e9:88:97: b7:42:3e:46:6d:6d:6a:4d:c0:96:5b:98:e8:85:7f: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:C3:97:D2:7A:25:EE:06:50:4C:2C:3D:9B:1B:7C:13:CD:3D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b2da0a1-eca7-377c-8aa6-d86f09c984da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:07:8d:b4:47:78:f8:96:fd:09:03:99:bc:d7:fe:90:26:bd: 4f:ce:0e:60:30:3d:8b:aa:cf:ab:60:c0:67:6e:43:d0:fe:54: 0e:a9:0d:bc:42:49:f0:12:60:8f:bb:6e:60:4b:fc:50:00:17: 1b:9d:c8:8e:ea:5a:0d:b8:5c:4c:a3:6c:c5:a0:a3:5c:c5:9a: c9:8a:f4:e7:40:28:dc:be:6f:aa:a0:60:dd:32:be:42:96:8d: 5d:e6:1e:ce:3e:7d:ec:ec:d8:a6:30:8c:26:1d:32:ab:d5:9b: 86:26:20:dc:55:cd:2c:36:85:d3:42:cf:8c:3f:be:09:7c:94: 0e:26:6b:4a:92:a8:83:ef:42:e6:51:88:98:9c:ee:0d:2c:a0: 1d:47:38:e3:4f:e5:97:a0:70:55:65:15:79:92:d7:fb:5f:e9: d9:e7:55:f3:3b:60:d2:2a:b8:9a:6d:8a:12:ae:b2:9c:b9:72: bb:9f:a9:92:60:f4:a9:5e:cd:99:ff:83:fb:1a:c0:df:62:93: 83:8a:14:3c:c7:93:c6:f9:d8:ba:c0:9a:dd:7e:87:46:ea:3b: 67:6e:b2:3b:2e:2e:a0:96:33:cd:15:b9:1a:08:45:a2:ab:ec: 27:78:c2:e2:ea:0d:05:de:19:d8:fe:03:dc:b4:4a:a1:0a:73: 67:fd:c9:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/f1wCIUK8rn1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk Y2FmMzhlNDEtMmViZS00YzNiLTgwZmEtMTFmZTBhNTlmMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7M2mvAxIF2Qcea6pCyfm+anwStbdroGowra EmZeVOtXCUEQIrnWtMhFTYdd1dvXuOC/JHyEWjxT6KHbGOu2kVuCFIs6iz525Teq rP0qOjjlMB4ZmbZH+xtujFQyZK7IPx+uGfreulZ8GbCF0YEfxzdSQi1kjMZObmHL IKWnOtawiOZy5527BKmCez/x3EbKDPeTB98YTDXhWUK8m4pnOACBshYrlb1ZNAwN xLmQ3MDVhtQXqZW2IFUVoo9vQs2Sd3+ga6KUdpwQgrsjJO9LLKkmOiwNDcGjC2HU moRzTHofMzXBem1whA3JYLvpiJe3Qj5GbW1qTcCWW5johX/4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGIw5fSeiXuBlBMLD2bG3wTzT29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2IyZGEwYTEtZWNhNy0z NzdjLThhYTYtZDg2ZjA5Yzk4NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkHjbRHePiW/QkDmbzX/pAmvU/ODmAwPYuqz6tgwGduQ9D+VA6pDbxC SfASYI+7bmBL/FAAFxudyI7qWg24XEyjbMWgo1zFmsmK9OdAKNy+b6qgYN0yvkKW jV3mHs4+fezs2KYwjCYdMqvVm4YmINxVzSw2hdNCz4w/vgl8lA4ma0qSqIPvQuZR iJic7g0soB1HOONP5ZegcFVlFXmS1/tf6dnnVfM7YNIquJptihKuspy5crufqZJg 9KlezZn/g/sawN9ik4OKFDzHk8b52LrAmt1+h0bqO2dusjsuLqCWM80VuRoIRaKr 7Cd4wuLqDQXeGdj+A9y0SqEKc2f9ydE= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:22 2025 by rpki-client