$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/980d012f-651f-32dc-ae76-5a8308bfcdd5.roa File: 980d012f-651f-32dc-ae76-5a8308bfcdd5.roa (raw, json) Hash identifier: qKEcn1HxR1Z3nFpAiYR+bdH+FRr6nzKsant9cfh5yRk= Subject key identifier: A0:2B:00:21:5F:DE:AB:0B:CA:43:2C:CA:1B:5A:66:B2:E7:8B:67:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD86018F150D19E2D2E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/980d012f-651f-32dc-ae76-5a8308bfcdd5.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.29.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d8:60:18:f1:50:d1:9e:2d:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=29f098b2-d4de-4e41-8202-adeb1eba893b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:3a:c6:a0:3f:db:f0:3c:ca:94:c6:f6:0e: 86:d2:d6:29:13:0e:02:48:1c:1f:8c:71:95:ce:79: 7a:25:b2:fc:4a:9d:96:2d:44:81:4f:37:42:f7:3b: 1a:8b:79:49:c0:9c:72:23:97:1f:c7:d7:6f:17:a9: 31:55:54:0a:9e:71:97:9e:9b:3e:66:d4:e0:d7:56: 29:80:d8:6b:60:86:ce:4d:e2:c9:d1:48:6e:1f:4a: 6f:37:ea:87:5c:c9:1a:dc:92:18:63:28:7b:f2:ca: 3c:2a:de:f5:3e:b6:03:42:4e:9e:cb:f7:16:ec:8e: a3:a0:73:11:cf:ce:4d:f8:f2:66:cf:95:2d:29:4d: 2a:9d:76:fb:a2:3e:f4:6c:3c:47:6a:5e:c5:b6:c3: f0:4b:03:d5:7c:87:b7:a2:84:61:e7:6e:b6:f1:66: 1c:c3:d3:6d:55:ad:3b:ab:91:4a:6f:49:56:fc:2e: b6:c2:a5:1c:e2:55:18:72:6e:34:bf:2b:8a:30:6b: 93:4b:e0:e6:d3:a5:9b:89:76:ca:8f:14:2c:50:21: 26:a7:8d:12:c2:35:0d:77:70:20:3d:9d:cf:8b:47: 20:d1:90:62:14:fe:95:a9:9e:f3:f2:83:9f:96:ea: 24:e2:59:bc:72:d4:e3:5b:13:63:95:3a:c6:96:3e: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2B:00:21:5F:DE:AB:0B:CA:43:2C:CA:1B:5A:66:B2:E7:8B:67:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/980d012f-651f-32dc-ae76-5a8308bfcdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:70:e7:a8:a6:02:52:17:24:69:ce:c7:34:e0:22:e3:cf:9a: 96:58:83:1e:c6:b5:7c:15:60:3a:f2:a9:13:9d:77:08:9c:1e: 46:7f:a7:12:6b:df:77:67:cd:12:96:7d:e5:6a:40:10:71:f0: ec:13:1e:e5:ca:5d:b7:27:a2:d6:ab:f9:47:38:29:30:b7:94: 65:f6:42:a1:02:b7:23:ee:2d:da:5a:0d:7e:b2:1d:a9:ab:5c: ab:4f:1f:ff:a2:33:16:65:e5:91:80:f0:9f:f4:db:eb:21:10: f8:32:87:cb:16:96:86:02:c7:93:65:f8:79:35:6b:5b:77:44: 12:09:c7:35:8d:fa:f8:b8:a9:36:72:98:72:15:c1:b4:0c:eb: d1:95:5b:d0:ac:ee:14:2e:fc:9a:cd:99:e6:ef:7e:84:bf:e0: 17:90:1c:c4:37:b7:fc:e3:7d:6a:a8:ca:8b:f3:3d:6a:c4:e8: 25:9e:58:c6:bc:a3:4b:53:e9:e8:ac:7e:89:88:34:e2:fe:e9: 30:b6:40:06:e6:1e:a7:cd:98:da:4f:4e:73:15:9e:3f:4d:e5: f3:3f:6c:e5:9c:05:81:10:c8:45:8b:21:58:66:3b:29:ee:f0: bd:ff:a2:1c:df:9a:53:57:f5:d5:59:14:5e:da:77:77:8b:5e: 54:98:ed:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79hgGPFQ0Z4tLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MjlmMDk4YjItZDRkZS00ZTQxLTgyMDItYWRlYjFlYmE4OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxY6xqA/2/A8ypTG9g6G0tYpEw4CSBwfjHGV znl6JbL8Sp2WLUSBTzdC9zsai3lJwJxyI5cfx9dvF6kxVVQKnnGXnps+ZtTg11Yp gNhrYIbOTeLJ0UhuH0pvN+qHXMka3JIYYyh78so8Kt71PrYDQk6ey/cW7I6joHMR z85N+PJmz5UtKU0qnXb7oj70bDxHal7FtsPwSwPVfIe3ooRh52628WYcw9NtVa07 q5FKb0lW/C62wqUc4lUYcm40vyuKMGuTS+Dm06WbiXbKjxQsUCEmp40SwjUNd3Ag PZ3Pi0cg0ZBiFP6VqZ7z8oOfluok4lm8ctTjWxNjlTrGlj4psQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKArACFf3qsLykMsyhtaZrLni2dHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTgwZDAxMmYtNjUxZi0z MmRjLWFlNzYtNWE4MzA4YmZjZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhw56imAlIXJGnOxzTgIuPPmpZYgx7GtXwVYDryqROddwicHkZ/pxJr 33dnzRKWfeVqQBBx8OwTHuXKXbcnotar+Uc4KTC3lGX2QqECtyPuLdpaDX6yHamr XKtPH/+iMxZl5ZGA8J/02+shEPgyh8sWloYCx5Nl+Hk1a1t3RBIJxzWN+vi4qTZy mHIVwbQM69GVW9Cs7hQu/JrNmebvfoS/4BeQHMQ3t/zjfWqoyovzPWrE6CWeWMa8 o0tT6eisfomINOL+6TC2QAbmHqfNmNpPTnMVnj9N5fM/bOWcBYEQyEWLIVhmOynu 8L3/ohzfmlNX9dVZFF7ad3eLXlSY7V8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:53:22 2025 by rpki-client