$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa File: 7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa (raw, json) Hash identifier: kwIiwKCTO4k1OEzwuuOnfgtI8bQY+SNljtiYG/+sQqQ= Subject key identifier: D9:13:E8:5C:4D:A1:12:34:4B:C5:5B:E4:E8:3D:89:3E:0D:CD:63:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550D7E4AAB7AA7BEA3C400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 104.29.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0d:7e:4a:ab:7a:a7:be:a3:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=5af510c1-a739-49f5-9fb7-333827cf67a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:50:06:1a:75:f3:58:54:5b:ff:2d:0c:f7:e4: 55:fa:81:db:03:fb:21:85:42:0c:9d:b0:9b:6b:24: a1:0f:27:09:3f:7c:78:f5:cc:fc:fc:cf:92:63:1d: 55:fd:75:f6:a6:21:5f:d7:8b:e1:bd:1e:94:8a:e9: 1b:c3:25:66:8e:f8:48:7c:3e:07:24:30:82:bb:58: c6:27:e7:bb:6b:a2:73:ec:8a:14:1f:df:f7:a5:28: 8c:ab:09:d6:d6:a4:8b:d5:48:e6:d0:d9:6e:81:40: 10:d2:6a:09:d1:4d:12:ec:70:8d:57:17:cc:7e:a9: 5c:97:5e:fc:ee:b0:3e:4f:af:cd:f1:f6:f3:d8:07: cc:e5:c0:6e:2f:35:84:2c:9b:97:99:19:5d:04:0e: ee:5b:b0:97:64:ff:47:b3:95:b6:b2:bf:40:d6:16: cf:8c:8f:e7:9e:f8:89:03:fc:b3:1b:cb:7a:a7:b5: 44:62:e1:02:66:92:a1:34:af:c9:57:3e:f1:83:19: 39:1c:98:31:ab:84:5e:0d:67:d5:f8:65:79:2c:fe: e9:ad:eb:49:17:d7:d9:1d:7d:bf:3e:bf:4e:4d:89: 93:74:3b:0c:50:95:35:fc:3b:0f:16:f7:1e:70:81: cd:4d:ac:e9:26:ec:3e:c0:c8:46:f3:f5:0c:55:55: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:13:E8:5C:4D:A1:12:34:4B:C5:5B:E4:E8:3D:89:3E:0D:CD:63:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a8fdfc7-9f4b-32c1-acb5-417f7b9e16b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d3:a4:4e:c9:70:93:f6:51:db:07:ef:3e:bd:f2:ae:c4:95: c0:06:9c:2b:f1:66:72:56:d7:06:b3:a5:a0:6f:e0:54:83:37: f1:a1:d1:ab:1d:e1:24:f9:c2:40:18:ee:1f:2c:c9:89:a8:d3: 9c:6e:f9:51:43:89:6b:9d:30:08:d0:ea:a4:16:33:5b:06:48: cc:09:ef:0a:59:ea:16:a9:2e:56:04:29:0f:3e:f4:34:8b:c2: 23:44:54:36:31:fa:2d:aa:a0:fe:c5:a1:1c:6f:0b:b7:67:ce: 60:c8:75:d6:d2:7c:dd:8c:0a:16:3c:e4:f1:0d:de:b9:fa:c9: 2b:98:2e:43:9b:b6:82:05:39:74:36:0b:23:0c:e0:a6:dc:9a: fe:36:a8:04:8a:32:98:3c:c8:31:df:14:c6:47:60:e2:3b:df: 49:83:9b:7c:f0:00:6b:54:c7:df:5d:89:4b:61:10:36:41:79: 61:e3:ec:32:f3:ac:ee:98:ee:35:fe:60:ce:fa:78:1a:e3:c6: e0:33:1c:bd:46:2b:bb:ac:1b:45:df:e4:85:36:f4:b5:35:3a: 1c:da:a9:a5:e3:ce:d6:d0:23:1b:ca:b7:91:7d:56:b2:f0:a2: eb:c5:ec:dd:5a:ba:2d:75:69:3a:58:77:41:47:b5:fd:27:19: 34:eb:4f:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ1+Sqt6p76jxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk NWFmNTEwYzEtYTczOS00OWY1LTlmYjctMzMzODI3Y2Y2N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVAGGnXzWFRb/y0M9+RV+oHbA/shhUIMnbCb ayShDycJP3x49cz8/M+SYx1V/XX2piFf14vhvR6UiukbwyVmjvhIfD4HJDCCu1jG J+e7a6Jz7IoUH9/3pSiMqwnW1qSL1Ujm0NlugUAQ0moJ0U0S7HCNVxfMfqlcl178 7rA+T6/N8fbz2AfM5cBuLzWELJuXmRldBA7uW7CXZP9Hs5W2sr9A1hbPjI/nnviJ A/yzG8t6p7VEYuECZpKhNK/JVz7xgxk5HJgxq4ReDWfV+GV5LP7pretJF9fZHX2/ Pr9OTYmTdDsMUJU1/DsPFvcecIHNTazpJuw+wMhG8/UMVVWS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkT6FxNoRI0S8Vb5Og9iT4NzWPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2E4ZmRmYzctOWY0Yi0z MmMxLWFjYjUtNDE3ZjdiOWUxNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3TpE7JcJP2UdsH7z698q7ElcAGnCvxZnJW1wazpaBv4FSDN/Gh0asd 4ST5wkAY7h8syYmo05xu+VFDiWudMAjQ6qQWM1sGSMwJ7wpZ6hapLlYEKQ8+9DSL wiNEVDYx+i2qoP7FoRxvC7dnzmDIddbSfN2MChY85PEN3rn6ySuYLkObtoIFOXQ2 CyMM4Kbcmv42qASKMpg8yDHfFMZHYOI730mDm3zwAGtUx99diUthEDZBeWHj7DLz rO6Y7jX+YM76eBrjxuAzHL1GK7usG0Xf5IU29LU1OhzaqaXjztbQIxvKt5F9VrLw ouvF7N1aui11aTpYd0FHtf0nGTTrTw4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:26 2025 by rpki-client