$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa File: 4caa04d7-8937-30a0-9987-0d8e972b0598.roa (raw, json) Hash identifier: Gomq5JhqR9NFSzS9PgDNP7SBpUsMkruBhYaXjuIykow= Subject key identifier: B7:B3:AD:DB:F6:4E:1C:53:03:D2:12:68:30:11:CD:50:0C:00:3D:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285848DEA132F49A1887F9AD1E88A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 13335 IP address blocks: 104.29.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:32:f4:9a:18:87:f9:ad:1e:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=70ac1437-f40a-4cae-856d-ea8fb7b84f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:14:a9:cc:fb:bc:08:01:19:9c:e2:8f:0c: 4f:cf:fd:de:b2:d0:20:5c:a0:27:77:31:e2:0f:6d: 74:66:59:2d:91:cc:8d:a5:b4:2b:85:ff:82:54:5c: 13:6b:70:37:de:e5:20:97:aa:90:f9:13:d6:59:6d: 91:42:85:ab:2a:07:a4:83:43:44:15:53:ea:2c:00: 45:bd:e4:ca:10:ca:63:61:e4:a2:ed:e1:d0:73:aa: 0e:cb:5a:d1:13:42:bd:0d:0a:76:d5:67:ec:01:6a: 21:1b:92:b7:ea:1a:4f:06:b5:8d:90:cc:2f:4f:9b: a5:74:f1:a5:36:81:66:ac:aa:17:cf:cf:e4:7f:c3: 05:08:a4:d3:9b:4a:3b:a8:a9:d8:d1:75:cd:91:57: 1b:dc:e5:3e:4d:6a:3e:38:8a:96:4c:f2:0f:96:58: 46:0b:40:0b:86:ef:b5:84:da:7f:6e:6f:88:22:57: 20:30:de:35:8f:3e:6b:b4:64:98:3a:41:6a:6a:46: b6:42:53:3e:f9:0e:da:91:50:46:a9:8b:39:bf:60: f9:fb:69:1c:67:77:4b:63:0e:f7:08:c4:87:bf:12: e0:2f:92:4c:f5:66:1d:50:45:db:77:b3:80:f7:20: a1:15:f5:d4:15:d4:4a:90:63:32:28:09:e5:dd:45: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B3:AD:DB:F6:4E:1C:53:03:D2:12:68:30:11:CD:50:0C:00:3D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4caa04d7-8937-30a0-9987-0d8e972b0598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:71:40:1f:ce:5e:9c:ca:a5:aa:3b:c1:63:0a:7c:38:f8:b1: 7e:53:c4:40:cd:58:d4:fb:2d:1a:38:e3:18:ce:2d:f8:92:b6: bc:42:4a:9e:05:65:e5:56:45:cd:8c:3e:c0:77:44:0b:60:77: 26:df:16:33:d1:d1:50:48:eb:c0:e7:74:38:07:6d:60:50:fe: 2e:50:d8:be:28:99:41:e2:e5:08:fa:25:0a:cd:e2:49:e4:80: cc:06:09:0a:62:89:f5:40:3d:ec:e1:8f:db:b3:53:63:c1:23: da:50:19:59:78:35:c3:61:4d:30:15:1a:0c:78:46:b2:da:fe: 23:e9:07:c2:d5:f7:c4:5b:27:aa:fc:9d:82:57:00:8c:78:b8: 56:d0:66:fd:69:3a:9c:6f:60:6a:76:b9:a6:18:20:16:a2:ae: ea:13:41:aa:32:77:c6:b9:02:27:4f:19:bd:4c:c3:78:c1:a8: e4:c9:bc:1a:89:e1:8f:43:f9:e8:5a:3a:14:46:97:4c:10:30: 83:63:f9:9c:39:40:bb:57:63:ee:c9:ff:e3:68:38:1c:8b:1c: 95:77:de:15:66:ce:d7:96:0f:89:e5:e4:b0:76:54:76:41:fc: 24:00:3e:46:91:75:f6:fa:92:71:f3:e2:80:e9:9e:2c:b0:76: b0:66:f6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTL0mhiH+a0eiKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NzBhYzE0MzctZjQwYS00Y2FlLTg1NmQtZWE4ZmI3Yjg0ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRgUqcz7vAgBGZzijwxPz/3estAgXKAndzHi D210ZlktkcyNpbQrhf+CVFwTa3A33uUgl6qQ+RPWWW2RQoWrKgekg0NEFVPqLABF veTKEMpjYeSi7eHQc6oOy1rRE0K9DQp21WfsAWohG5K36hpPBrWNkMwvT5uldPGl NoFmrKoXz8/kf8MFCKTTm0o7qKnY0XXNkVcb3OU+TWo+OIqWTPIPllhGC0ALhu+1 hNp/bm+IIlcgMN41jz5rtGSYOkFqaka2QlM++Q7akVBGqYs5v2D5+2kcZ3dLYw73 CMSHvxLgL5JM9WYdUEXbd7OA9yChFfXUFdRKkGMyKAnl3UXlOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLezrdv2ThxTA9ISaDARzVAMAD2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGNhYTA0ZDctODkzNy0z MGEwLTk5ODctMGQ4ZTk3MmIwNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFxQB/OXpzKpao7wWMKfDj4sX5TxEDNWNT7LRo44xjOLfiStrxCSp4F ZeVWRc2MPsB3RAtgdybfFjPR0VBI68DndDgHbWBQ/i5Q2L4omUHi5Qj6JQrN4knk gMwGCQpiifVAPezhj9uzU2PBI9pQGVl4NcNhTTAVGgx4RrLa/iPpB8LV98RbJ6r8 nYJXAIx4uFbQZv1pOpxvYGp2uaYYIBairuoTQaoyd8a5AidPGb1Mw3jBqOTJvBqJ 4Y9D+ehaOhRGl0wQMINj+Zw5QLtXY+7J/+NoOByLHJV33hVmzteWD4nl5LB2VHZB /CQAPkaRdfb6knHz4oDpniywdrBm9sk= -----END CERTIFICATE-----Generated at Sat Apr 5 07:59:38 2025 by rpki-client