$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa File: 64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa (raw, json) Hash identifier: RUvBAN3HQILNIz4GH/ZJpWIms8pJ9vMB6edQjSHutKo= Subject key identifier: D1:2B:54:EA:D3:92:F4:5E:94:7E:18:BE:B5:F5:2A:8B:52:06:B9:1E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CB6E4DA6278714364B70 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cb:6e:4d:a6:27:87:14:36:4b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=ba77b00f-aece-4246-a9a4-c48b91339280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:ce:7c:90:c8:cf:af:c2:e0:63:87:72:3e: 64:89:9f:f5:77:6b:95:1f:4e:c8:c8:7c:53:9c:68: 19:63:d7:f7:98:c5:dc:de:22:04:a0:8c:ac:1b:e6: 5b:b4:d7:b8:37:a7:14:fe:7e:90:9a:f2:fc:85:84: 64:4e:25:77:8f:a4:80:18:a9:d5:fa:96:e0:21:d6: d2:7e:67:37:0e:09:cb:aa:34:c5:71:bc:31:c5:a2: b5:86:0d:97:42:47:16:b8:56:a2:4c:fd:2b:41:fc: 92:03:01:4c:2f:c1:30:50:39:d2:47:e8:73:3c:f4: 2c:f5:1a:19:13:44:f6:a9:06:8a:8f:57:0b:8c:e7: 4f:04:78:de:f4:6c:85:ba:32:01:30:69:eb:08:2b: f0:e4:2e:00:e7:2c:10:48:44:fe:9e:c8:a8:a7:2b: ca:50:80:75:2a:60:35:d4:da:38:f6:5b:39:70:1d: 00:c8:8f:ec:80:4f:03:20:12:e2:9c:03:78:f9:97: 00:40:00:bd:af:4e:c5:b4:f2:d7:48:d7:80:41:76: 91:1b:68:da:21:38:09:46:c9:6b:ae:dc:54:a8:d2: 06:3c:f7:56:51:95:67:f7:28:bb:a7:16:85:d2:ec: 8d:50:7f:61:37:f4:5a:b8:cf:ea:2e:65:0f:30:d6: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2B:54:EA:D3:92:F4:5E:94:7E:18:BE:B5:F5:2A:8B:52:06:B9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2f:3c:d8:f4:03:85:89:e7:69:14:36:1c:01:22:28:b1:01: 67:1c:dc:06:87:3d:2e:9c:33:7d:ea:c4:6c:7b:45:6b:51:b2: 9d:c0:cc:2d:f0:6b:05:9f:a7:72:3b:4e:78:12:c9:11:31:17: 75:eb:ae:4a:d0:66:70:35:a6:6e:4d:c1:22:29:02:b8:a1:1e: 8a:8c:22:40:df:26:4b:20:96:50:99:e2:d9:64:67:6c:31:4d: 3d:b3:8c:78:5a:97:e4:22:38:7e:a8:27:ad:27:c2:c6:47:dd: b2:f9:fb:78:56:88:72:c3:a1:ed:7f:4f:0c:8e:4c:cd:f8:0a: 45:a6:06:db:2c:38:70:c8:70:b3:26:34:d0:9a:bb:24:e6:75: 52:5b:49:af:35:ae:0a:6d:07:a6:76:4b:73:1f:a6:43:7b:af: 99:b6:06:d7:e6:26:cf:20:33:16:b4:86:5b:d3:5f:d6:d3:69: 81:67:ce:cc:ef:35:ef:43:de:43:6f:6f:91:31:67:49:bd:1a: f2:86:d7:4f:5e:73:85:2b:cc:60:4d:a8:5f:f2:50:af:80:ad: 99:4c:b0:f6:6b:67:23:06:ae:60:2c:e7:8c:94:12:dd:cd:13: 07:12:84:c9:2b:69:5a:2d:eb:b6:9e:57:ee:6c:af:4c:1a:36: d0:9e:55:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtstuTaYnhxQ2S3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YmE3N2IwMGYtYWVjZS00MjQ2LWE5YTQtYzQ4YjkxMzM5MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzbOfJDIz6/C4GOHcj5kiZ/1d2uVH07IyHxT nGgZY9f3mMXc3iIEoIysG+ZbtNe4N6cU/n6QmvL8hYRkTiV3j6SAGKnV+pbgIdbS fmc3DgnLqjTFcbwxxaK1hg2XQkcWuFaiTP0rQfySAwFML8EwUDnSR+hzPPQs9RoZ E0T2qQaKj1cLjOdPBHje9GyFujIBMGnrCCvw5C4A5ywQSET+nsiopyvKUIB1KmA1 1No49ls5cB0AyI/sgE8DIBLinAN4+ZcAQAC9r07FtPLXSNeAQXaRG2jaITgJRslr rtxUqNIGPPdWUZVn9yi7pxaF0uyNUH9hN/RauM/qLmUPMNbYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNErVOrTkvRelH4YvrX1KotSBrkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjRkZjZjOWMtZDYzZC0z ZTIyLThmNTktOWE2NjdhMWZlZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQvPNj0A4WJ52kUNhwBIiixAWcc3AaHPS6cM33qxGx7RWtRsp3AzC3w awWfp3I7TngSyRExF3XrrkrQZnA1pm5NwSIpArihHoqMIkDfJksgllCZ4tlkZ2wx TT2zjHhal+QiOH6oJ60nwsZH3bL5+3hWiHLDoe1/TwyOTM34CkWmBtssOHDIcLMm NNCauyTmdVJbSa81rgptB6Z2S3MfpkN7r5m2BtfmJs8gMxa0hlvTX9bTaYFnzszv Ne9D3kNvb5ExZ0m9GvKG109ec4UrzGBNqF/yUK+ArZlMsPZrZyMGrmAs54yUEt3N EwcShMkraVot67aeV+5sr0waNtCeVR0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:33 2025 by rpki-client