$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa File: afe83c0a-1cc3-335f-877d-d278e5800174.roa (raw, json) Hash identifier: UctooBV3a16hoBE7X+y34JnpLXaemYmFC46h1/uuLBM= Subject key identifier: EA:C0:9C:5D:82:ED:BB:F2:D7:C6:45:D5:DD:E0:3F:F1:BE:43:02:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD840ABB0A0F3F4B1B000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.29.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d8:40:ab:b0:a0:f3:f4:b1:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=fc02011f-31fa-493e-a07b-ce1f9b34ee9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:25:49:f8:bf:ed:da:c5:63:35:c4:21:08: 6f:da:8b:bc:8e:ef:c1:b8:7f:f9:5b:16:e6:6f:aa: 06:dc:10:97:12:e3:c4:2c:42:c5:ba:26:5a:cc:b2: 3d:46:6b:2b:81:0f:17:10:3d:99:d0:09:0c:91:19: 66:5c:59:b7:24:86:bd:70:5c:2d:19:86:0e:81:3b: 16:2b:d5:0d:97:57:bf:13:93:23:4b:0e:dc:70:a9: ec:85:7b:24:85:bd:4e:fe:13:6d:26:4f:91:61:ed: 69:e3:f5:17:b8:76:0a:68:6e:79:cd:09:41:7c:dd: f7:78:89:34:21:e1:43:d8:5e:5c:e1:81:2b:87:27: 90:97:22:5a:8f:ee:93:0f:73:28:69:ac:00:52:cd: 96:8e:97:d3:6b:2c:e4:6e:a0:97:0f:17:cb:f4:f7: 50:4f:47:91:8b:9a:ff:f1:74:1a:da:7c:25:e9:02: c5:b1:06:ba:28:29:d3:f5:6e:e4:5d:1c:ad:61:e7: bf:d2:85:05:a7:b4:c6:3c:94:cf:61:ae:54:8a:55: 29:1d:43:7a:7b:4d:f5:ec:5e:79:15:a3:23:cc:32: 09:67:9f:05:20:86:7a:1f:65:fd:8a:bb:75:31:21: 89:3d:8b:bf:7a:0c:e9:50:df:a4:5c:ea:91:e3:13: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:9C:5D:82:ED:BB:F2:D7:C6:45:D5:DD:E0:3F:F1:BE:43:02:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afe83c0a-1cc3-335f-877d-d278e5800174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5e:0e:8b:9b:d1:9b:9b:c5:2c:24:28:21:0d:80:77:4d:61: 6d:63:06:47:9f:74:18:07:f5:9a:3d:39:be:11:41:2a:6f:a0: a7:ca:97:9d:8a:fe:2d:bf:c5:6d:10:9e:3e:7c:54:e0:70:7e: 80:3a:40:f7:15:44:4f:15:10:ed:68:5b:1b:94:ef:91:33:64: 44:bc:fb:33:a9:f2:b1:14:e1:a6:d2:1a:5f:55:ae:ed:22:7d: 89:b3:15:aa:12:49:9c:07:87:fb:89:9f:fd:fa:0a:6c:68:71: 49:72:6a:41:9f:9c:69:9e:48:89:fa:ef:8d:41:20:33:a1:ae: b7:60:e2:25:70:b0:86:66:f5:a7:51:eb:a7:6b:a2:ce:62:f4: 8c:67:f6:92:a9:bb:eb:21:6a:51:d5:3c:03:ef:b0:74:a7:50: d1:f3:91:ca:92:c5:1a:7c:2b:9b:49:12:b5:22:c0:15:e3:da: a8:dd:0e:74:36:67:80:de:2e:29:03:55:87:49:19:6d:da:6d: 78:de:29:c6:7d:10:e3:d4:37:68:85:20:7c:b4:e7:20:a0:de: 0b:b1:da:ae:58:32:3f:7d:86:3e:c7:15:dc:f5:9f:9b:ed:58: 12:45:9d:1f:6f:3a:34:e0:0f:b2:88:44:02:1e:26:99:88:d3: c3:c4:c9:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79hAq7Cg8/SxsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZmMwMjAxMWYtMzFmYS00OTNlLWEwN2ItY2UxZjliMzRlZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71AlSfi/7drFYzXEIQhv2ou8ju/BuH/5Wxbm b6oG3BCXEuPELELFuiZazLI9RmsrgQ8XED2Z0AkMkRlmXFm3JIa9cFwtGYYOgTsW K9UNl1e/E5MjSw7ccKnshXskhb1O/hNtJk+RYe1p4/UXuHYKaG55zQlBfN33eIk0 IeFD2F5c4YErhyeQlyJaj+6TD3MoaawAUs2WjpfTayzkbqCXDxfL9PdQT0eRi5r/ 8XQa2nwl6QLFsQa6KCnT9W7kXRytYee/0oUFp7TGPJTPYa5UilUpHUN6e0317F55 FaMjzDIJZ58FIIZ6H2X9irt1MSGJPYu/egzpUN+kXOqR4xOzcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrAnF2C7bvy18ZF1d3gP/G+QwIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZlODNjMGEtMWNjMy0z MzVmLTg3N2QtZDI3OGU1ODAwMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZeDoub0ZubxSwkKCENgHdNYW1jBkefdBgH9Zo9Ob4RQSpvoKfKl52K /i2/xW0Qnj58VOBwfoA6QPcVRE8VEO1oWxuU75EzZES8+zOp8rEU4abSGl9Vru0i fYmzFaoSSZwHh/uJn/36CmxocUlyakGfnGmeSIn6741BIDOhrrdg4iVwsIZm9adR 66dros5i9Ixn9pKpu+shalHVPAPvsHSnUNHzkcqSxRp8K5tJErUiwBXj2qjdDnQ2 Z4DeLikDVYdJGW3abXjeKcZ9EOPUN2iFIHy05yCg3gux2q5YMj99hj7HFdz1n5vt WBJFnR9vOjTgD7KIRAIeJpmI08PEyRk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:51 2025 by rpki-client