$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70ca3cfc-0d8c-3281-a71d-816e306d7cd8.roa File: 70ca3cfc-0d8c-3281-a71d-816e306d7cd8.roa (raw, json) Hash identifier: 8WJzz8ayoxcWr1MYHlGUetaRsfxrf16WtCNxQEYHgaE= Subject key identifier: 7B:99:62:28:80:4D:D6:4B:7E:C2:65:22:07:78:B4:89:37:67:48:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BFDB5903121155C5CFC40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70ca3cfc-0d8c-3281-a71d-816e306d7cd8.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.29.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:fd:b5:90:31:21:15:5c:5c:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=9ee844cf-87cd-4418-8ad4-5cea8d96fa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:27:76:07:c0:e8:41:75:13:bf:5d:c4:b7: e9:fa:02:9d:fb:e7:8e:d9:18:e1:ee:b8:d4:6e:93: d7:65:ba:81:8c:11:91:03:a8:63:ae:2b:68:f9:67: 9b:3f:7f:a9:88:89:04:e5:1d:b4:90:f7:7e:83:53: f0:71:73:7a:e1:b9:12:21:1d:f4:95:27:8d:7f:7c: e2:96:8b:fd:20:c3:0c:59:5f:64:47:47:69:c2:d9: d8:a1:8a:f9:63:ee:9f:4c:ec:4f:9b:2a:15:1f:2d: 2a:55:0c:d5:66:cd:be:e5:da:59:e3:d6:03:cb:41: 80:7e:79:50:29:59:f5:6b:c8:db:aa:07:b7:b6:7d: 0a:96:03:79:32:1d:b4:ea:df:f5:9e:ad:aa:56:93: 18:ce:5b:97:ea:40:43:91:35:5a:3c:24:ed:1e:a0: cf:17:32:47:27:58:3d:a4:78:c5:ba:19:cd:27:07: a5:c4:f3:62:1c:30:25:94:c5:b9:72:c2:50:38:f4: a8:e5:cd:fb:b3:8b:75:bb:f0:0f:72:c8:bd:43:92: 96:91:d8:7a:d9:47:51:42:19:45:28:15:97:b5:0c: 8d:b9:92:6e:54:75:c4:d6:1b:12:6d:ae:7d:f2:a6: 47:67:bf:7f:c7:5c:90:1e:52:4c:41:be:a3:07:43: 7f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:99:62:28:80:4D:D6:4B:7E:C2:65:22:07:78:B4:89:37:67:48:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70ca3cfc-0d8c-3281-a71d-816e306d7cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:29:96:09:88:f7:a4:af:b6:43:60:2b:4a:fa:00:0d:ef:c9: 73:7d:b4:3d:43:c9:59:cc:9e:1e:a2:e8:71:ed:05:b2:9d:4e: e8:ab:21:82:2d:c4:4a:d3:53:75:30:ae:f9:d7:0c:bf:f1:e9: 91:f1:f8:eb:f9:18:8e:43:ff:08:53:4c:69:97:bb:2b:67:32: 3d:33:02:21:9a:40:67:57:55:a7:9d:d4:a9:6a:16:6f:1e:f4: b8:f0:55:41:eb:1d:a0:a6:97:bd:ac:47:c6:f5:a2:37:8f:a2: ab:47:3c:49:ca:b6:13:a6:9a:a7:ac:ee:a8:0f:84:08:9e:fd: 67:88:46:c4:1a:a9:db:c2:b4:81:28:68:f1:61:0a:e3:3c:40: 27:f8:86:21:84:b0:1c:ac:5c:81:9b:3c:f0:1f:2a:b5:41:ad: 5b:3a:47:4a:df:9a:6e:bb:db:66:73:b8:a1:11:22:5a:de:0b: 03:8c:64:5d:ef:c9:78:a1:bd:22:d1:90:58:d3:11:2d:cb:d7: 9d:07:6b:eb:16:49:8f:64:6f:a1:45:20:6c:7d:22:42:a2:62: 40:b0:a2:b3:1a:ee:a1:6e:c1:a1:c4:e0:db:4d:f1:ee:e0:8b: fc:17:aa:c3:1a:43:5b:84:8b:33:0e:a4:58:cd:c0:89:31:e4: c0:61:0a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/21kDEhFVxc/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk OWVlODQ0Y2YtODdjZC00NDE4LThhZDQtNWNlYThkOTZmYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFUndgfA6EF1E79dxLfp+gKd++eO2Rjh7rjU bpPXZbqBjBGRA6hjrito+WebP3+piIkE5R20kPd+g1PwcXN64bkSIR30lSeNf3zi lov9IMMMWV9kR0dpwtnYoYr5Y+6fTOxPmyoVHy0qVQzVZs2+5dpZ49YDy0GAfnlQ KVn1a8jbqge3tn0KlgN5Mh206t/1nq2qVpMYzluX6kBDkTVaPCTtHqDPFzJHJ1g9 pHjFuhnNJwelxPNiHDAllMW5csJQOPSo5c37s4t1u/APcsi9Q5KWkdh62UdRQhlF KBWXtQyNuZJuVHXE1hsSba598qZHZ79/x1yQHlJMQb6jB0N/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuZYiiATdZLfsJlIgd4tIk3Z0jIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzBjYTNjZmMtMGQ4Yy0z MjgxLWE3MWQtODE2ZTMwNmQ3Y2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8plgmI96SvtkNgK0r6AA3vyXN9tD1DyVnMnh6i6HHtBbKdTuirIYIt xErTU3UwrvnXDL/x6ZHx+Ov5GI5D/whTTGmXuytnMj0zAiGaQGdXVaed1KlqFm8e 9LjwVUHrHaCml72sR8b1ojePoqtHPEnKthOmmqes7qgPhAie/WeIRsQaqdvCtIEo aPFhCuM8QCf4hiGEsBysXIGbPPAfKrVBrVs6R0rfmm6722ZzuKERIlreCwOMZF3v yXihvSLRkFjTES3L150Ha+sWSY9kb6FFIGx9IkKiYkCworMa7qFuwaHE4NtN8e7g i/wXqsMaQ1uEizMOpFjNwIkx5MBhClU= -----END CERTIFICATE-----Generated at Sat Apr 5 06:43:52 2025 by rpki-client