$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa File: 44dc2154-dfb0-3282-ae78-26a93970380b.roa (raw, json) Hash identifier: eMGqJ/IWkcLL/Qwt9pkgFZLaTC3J/aarkEDj6YlYB2Q= Subject key identifier: 33:C5:BD:30:12:BD:12:F3:63:D7:9E:8B:E9:71:64:8D:17:E8:57:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CCB4262E30A09ABE2F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.29.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cc:b4:26:2e:30:a0:9a:be:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=49974cdd-5c12-4d6a-93e1-8ca21d2b1b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:48:47:ee:64:62:96:9a:62:e5:29:cf:79: 9c:f7:b3:79:5d:4c:70:b7:1e:88:83:f3:a2:ac:e3: 45:05:79:d5:70:85:86:7c:26:c9:8e:34:66:54:27: 1f:ea:07:c2:48:12:f3:26:95:53:30:32:87:2c:0c: 3a:56:d7:ab:f3:e7:ca:dc:07:15:b1:d6:eb:42:ca: 43:ff:e1:3d:8a:27:4f:44:ac:64:bd:da:f0:64:8d: a2:8b:b6:f9:f2:cb:2a:a7:a6:16:f9:ef:7a:85:fa: c9:2e:71:05:d0:49:4b:a2:9a:15:bd:b8:09:a2:83: 46:2d:f5:dd:0c:1c:15:b7:34:59:71:56:a5:9c:dc: ba:a2:49:e8:25:17:e3:ca:d1:a3:22:88:88:4c:66: 74:9c:6a:85:7d:c5:36:b9:b9:0f:8b:fb:4a:67:d0: 4a:b3:11:ad:fe:10:05:52:76:90:3b:aa:e2:09:7f: 71:42:21:d6:d5:f5:a1:63:2f:18:90:9c:f2:15:07: 52:61:61:e3:44:80:88:94:e9:9b:98:d4:30:9b:5c: 5b:35:2e:ee:83:78:26:ba:9b:91:d6:a8:c7:0b:b0: c2:09:52:79:a1:2b:33:08:03:c2:bc:74:03:c6:e0: 0c:61:8b:08:b0:30:0d:7f:8a:eb:c9:2b:43:d9:d8: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C5:BD:30:12:BD:12:F3:63:D7:9E:8B:E9:71:64:8D:17:E8:57:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44dc2154-dfb0-3282-ae78-26a93970380b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d0:7f:7f:6c:a1:0f:ca:09:49:4c:a0:5d:0a:22:28:3e:50: 1e:c8:e5:96:de:62:7b:37:ac:52:d8:78:98:01:a6:53:09:5f: 82:2d:4f:7d:d7:2c:88:43:31:92:dd:e7:5a:16:22:89:cc:00: 95:92:7c:a9:5e:c7:f5:ee:94:55:5a:4a:d6:2a:d7:48:8f:e0: 9e:1a:18:67:c3:12:4d:54:7c:fb:36:ef:44:1d:f2:09:6e:fa: 81:03:98:84:45:06:95:b7:d2:81:ec:3a:bc:a3:bb:30:99:b9: 2f:f3:f8:0f:70:a0:6a:0b:da:f3:9f:42:e0:40:fd:c7:59:f4: 52:da:91:04:16:26:b6:29:74:35:41:01:8c:23:4b:9e:93:44: 69:77:b6:4d:9f:5a:e0:87:2c:b3:75:b5:c3:24:66:50:34:f7: 5c:1e:bf:99:ec:4a:a6:4f:7e:fe:cd:ad:d0:bd:9a:f9:a3:96: f4:d8:e2:fa:c6:92:60:02:b4:a6:6b:fa:cb:0b:36:d4:97:fd: 25:ad:d7:47:46:c7:1b:4e:1a:72:7a:c1:fa:ed:13:99:19:52: eb:f0:5d:61:4a:e3:08:a7:aa:5a:6d:00:32:b8:c6:9d:78:e0: 0f:b2:7b:b0:31:ca:fc:60:b5:e7:c2:a1:dd:60:45:6e:f1:01: e7:0d:8d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsy0Ji4woJq+LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NDk5NzRjZGQtNWMxMi00ZDZhLTkzZTEtOGNhMjFkMmIxYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVJIR+5kYpaaYuUpz3mc97N5XUxwtx6Ig/Oi rONFBXnVcIWGfCbJjjRmVCcf6gfCSBLzJpVTMDKHLAw6Vter8+fK3AcVsdbrQspD /+E9iidPRKxkvdrwZI2ii7b58ssqp6YW+e96hfrJLnEF0ElLopoVvbgJooNGLfXd DBwVtzRZcValnNy6oknoJRfjytGjIoiITGZ0nGqFfcU2ubkPi/tKZ9BKsxGt/hAF UnaQO6riCX9xQiHW1fWhYy8YkJzyFQdSYWHjRICIlOmbmNQwm1xbNS7ug3gmupuR 1qjHC7DCCVJ5oSszCAPCvHQDxuAMYYsIsDANf4rryStD2dgtCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPFvTASvRLzY9eei+lxZI0X6FfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDRkYzIxNTQtZGZiMC0z MjgyLWFlNzgtMjZhOTM5NzAzODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHQf39soQ/KCUlMoF0KIig+UB7I5ZbeYns3rFLYeJgBplMJX4ItT33X LIhDMZLd51oWIonMAJWSfKlex/XulFVaStYq10iP4J4aGGfDEk1UfPs270Qd8glu +oEDmIRFBpW30oHsOryjuzCZuS/z+A9woGoL2vOfQuBA/cdZ9FLakQQWJrYpdDVB AYwjS56TRGl3tk2fWuCHLLN1tcMkZlA091wev5nsSqZPfv7NrdC9mvmjlvTY4vrG kmACtKZr+ssLNtSX/SWt10dGxxtOGnJ6wfrtE5kZUuvwXWFK4winqlptADK4xp14 4A+ye7AxyvxgtefCod1gRW7xAecNjZo= -----END CERTIFICATE-----Generated at Sat Apr 5 09:59:41 2025 by rpki-client