$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa File: a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa (raw, json) Hash identifier: gtMlk2sY04+iX/FZMd3ECfRPU756vbaQqr1JuyTfFiU= Subject key identifier: 9C:3C:5C:8D:0F:72:D7:B0:58:21:08:1C:2D:57:CC:63:F0:EB:05:7D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD9BCA39A089840941200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.29.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d9:bc:a3:9a:08:98:40:94:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=eedd8824-80e7-4ae9-9d45-84bb830bd47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:92:e2:90:ba:26:73:cb:3a:18:37:21:48: 1f:bb:fd:22:e0:3d:3c:0a:6c:dc:3f:47:b3:77:e3: 6d:34:b2:4c:d5:d6:58:81:cd:f8:85:e1:15:00:54: e7:ce:59:a1:2f:0e:08:af:2e:34:a8:be:30:34:2e: b4:d9:21:19:d9:50:e9:4b:3b:da:74:b1:ca:d7:df: 2f:37:ee:e4:24:2f:42:a7:a6:ed:75:ca:27:63:f5: d6:25:93:5a:de:cc:eb:3e:04:16:84:e0:36:b6:13: 61:65:ea:8d:9b:12:39:37:40:07:91:af:3f:31:d5: 46:b9:40:61:39:39:22:48:1a:80:1e:41:2e:ae:61: 79:cd:93:26:05:8f:44:36:20:0f:b4:3f:0a:cb:00: af:7d:62:fd:b9:84:c4:2c:39:a5:58:0f:91:b9:88: cb:f0:b8:3e:5c:71:8b:d4:85:83:e1:e6:f6:61:df: 22:ff:11:44:79:18:a8:b3:6a:c5:42:41:8d:3c:e2: c8:c8:df:b7:e8:12:67:06:0f:18:f8:9d:62:60:61: a0:57:ef:c0:2e:c5:17:5e:44:8e:c9:16:e6:92:df: ec:82:2b:88:57:1b:ba:0c:99:1a:c1:c2:fd:fe:95: 67:a4:b9:f9:3a:b4:4d:21:e4:fe:13:a5:8e:8d:9c: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:5C:8D:0F:72:D7:B0:58:21:08:1C:2D:57:CC:63:F0:EB:05:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:47:aa:fe:4e:8b:f0:1a:b1:ad:da:49:38:d4:44:bb:f4:27: 89:80:9d:b3:db:05:8f:c0:4b:05:12:2b:65:cf:1a:fe:fb:e1: b6:27:0a:75:f8:6d:0f:ba:c0:92:67:02:81:cc:38:4b:be:c0: 15:4d:a4:26:8e:cb:5f:38:21:49:7c:26:37:63:a7:63:44:88: 46:71:6b:cf:93:33:c9:5d:20:c3:f9:36:53:93:83:01:b8:b1: 24:7f:bb:53:fd:fc:3b:77:e7:2b:0b:ab:15:2a:77:76:fa:c5: 27:b9:cd:51:ff:eb:cf:08:9b:85:fc:bc:6d:58:81:0d:ef:a2: a2:f0:00:9b:a9:3d:ea:27:81:b5:4a:a1:a3:40:47:08:d1:49: 09:0c:6a:8d:37:c9:07:96:73:0d:b8:d0:c3:d8:aa:aa:08:5b: cc:2f:b3:3c:3a:e2:c5:a8:0f:70:3c:60:1f:5a:a2:e8:1e:2f: c2:0d:f3:1c:71:35:56:4a:f0:a4:77:e7:7d:89:e6:bb:67:14: 40:78:6d:20:f0:7b:5a:72:47:13:ed:4f:4d:49:36:87:34:38: ff:b9:c2:4b:8d:45:31:25:c0:15:f1:6b:fe:a1:a3:13:73:b7: 5f:c3:5b:35:cb:ef:10:e7:1e:43:4e:c5:9b:9f:a6:27:89:e4: 62:9e:99:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79m8o5oImECUEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZWVkZDg4MjQtODBlNy00YWU5LTlkNDUtODRiYjgzMGJkNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTaS4pC6JnPLOhg3IUgfu/0i4D08CmzcP0ez d+NtNLJM1dZYgc34heEVAFTnzlmhLw4Iry40qL4wNC602SEZ2VDpSzvadLHK198v N+7kJC9Cp6btdconY/XWJZNa3szrPgQWhOA2thNhZeqNmxI5N0AHka8/MdVGuUBh OTkiSBqAHkEurmF5zZMmBY9ENiAPtD8KywCvfWL9uYTELDmlWA+RuYjL8Lg+XHGL 1IWD4eb2Yd8i/xFEeRios2rFQkGNPOLIyN+36BJnBg8Y+J1iYGGgV+/ALsUXXkSO yRbmkt/sgiuIVxu6DJkawcL9/pVnpLn5OrRNIeT+E6WOjZxUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw8XI0PctewWCEIHC1XzGPw6wV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTlhMWU2YmYtY2FjYi0z MGYyLWJhNGQtOTEwY2QzN2Q0ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRHqv5Oi/Aasa3aSTjURLv0J4mAnbPbBY/ASwUSK2XPGv774bYnCnX4 bQ+6wJJnAoHMOEu+wBVNpCaOy184IUl8Jjdjp2NEiEZxa8+TM8ldIMP5NlOTgwG4 sSR/u1P9/Dt35ysLqxUqd3b6xSe5zVH/688Im4X8vG1YgQ3voqLwAJupPeongbVK oaNARwjRSQkMao03yQeWcw240MPYqqoIW8wvszw64sWoD3A8YB9aougeL8IN8xxx NVZK8KR3532J5rtnFEB4bSDwe1pyRxPtT01JNoc0OP+5wkuNRTElwBXxa/6hoxNz t1/DWzXL7xDnHkNOxZufpieJ5GKema0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:45 2025 by rpki-client