$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa File: b833d3b3-a64d-3401-a451-0e437bc93ba4.roa (raw, json) Hash identifier: mbP/o5XdH8P2GlyltS7RHNqHv9e9FK6OJ8mEBOe+/zo= Subject key identifier: 08:BB:D7:D4:C1:49:FB:E3:51:32:A4:8C:8F:06:F5:B6:3D:29:7D:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF7C69E4C1C5E55A98D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.29.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f7:c6:9e:4c:1c:5e:55:a9:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=d94b52b3-bd12-4764-93e7-ab6a4a611171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:b7:4c:b0:14:39:13:6a:12:ba:ab:4f:12: 6d:4d:c4:86:bc:f1:77:0a:79:a8:cb:2b:79:68:c4: 7b:59:6e:84:2c:69:fd:0f:cf:85:a2:dd:89:b8:b1: b5:9f:14:a5:d0:8f:3b:7a:c8:d2:5b:88:5f:6c:a1: 01:c5:72:94:18:78:97:02:d2:f1:27:48:80:7a:e6: 26:25:ca:f8:f9:f1:e6:18:45:a1:3c:bd:c2:7b:6a: bd:94:c6:28:d2:f2:52:85:43:37:cb:d1:a8:74:45: 79:94:70:cc:e9:ad:ed:9e:d7:5e:4c:1d:73:ec:85: 7c:2c:28:ea:5d:96:43:eb:e5:c9:76:e0:8c:c5:f7: 0e:dc:9a:cc:2c:b6:93:ef:ee:3f:20:9b:65:85:28: 7a:63:9e:19:b0:f4:96:3a:02:22:aa:81:68:65:62: 73:c3:20:45:76:e6:8a:3f:d3:68:1e:68:f0:43:8b: 8a:b7:9a:de:bb:39:17:68:32:4a:ad:83:67:32:46: 29:8a:02:1a:84:82:67:79:ca:d4:fb:ec:df:8a:01: b8:95:8a:ee:27:25:f2:5d:6a:e0:d5:d5:1b:60:1a: 83:8f:89:42:05:d4:6e:1b:80:fb:38:84:81:65:70: 48:73:da:d8:c6:25:77:cc:80:39:5a:75:25:da:dd: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BB:D7:D4:C1:49:FB:E3:51:32:A4:8C:8F:06:F5:B6:3D:29:7D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c1:cb:22:dd:42:b5:22:82:05:fd:5d:fe:03:ca:59:4f:e5: c4:de:db:4e:98:1e:08:7a:ee:72:08:e7:8a:58:0b:92:c2:0f: 92:74:1a:78:0d:e0:9c:51:fa:ba:92:db:f7:75:a3:6d:19:e8: 94:fb:78:98:1b:e3:55:49:15:db:d6:e0:7f:d4:72:ea:72:bd: f8:ea:a2:50:b9:8f:df:96:1f:f7:9d:fd:4f:de:f8:7f:95:ba: f0:cf:65:05:e6:eb:dd:0f:26:3d:f2:00:e2:5f:3d:25:f6:91: da:f5:25:cd:3a:33:20:22:ef:4c:d8:66:32:ac:7f:53:1c:86: 48:7f:ce:b4:86:7a:7d:99:09:ce:d2:35:a7:c5:21:49:6c:36: 17:db:ec:73:ee:f6:54:0a:83:fa:7d:81:a3:49:11:8c:5c:cc: d9:be:45:d6:cd:6e:0e:9f:cd:b4:1b:2a:82:cc:06:5a:3b:81: 5b:ea:21:5f:83:d0:56:fd:03:c2:e3:8f:b3:98:e8:fc:ae:01: 12:57:33:4d:af:e0:38:f6:bd:46:2c:62:e5:18:33:98:c6:da: 72:12:fd:8b:a2:c5:e5:9d:85:fa:22:92:7f:31:50:2c:4e:bd: 68:37:81:18:b6:03:6e:b3:c2:ca:58:0c:e6:98:51:93:a0:2e: ac:3d:4b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/fGnkwcXlWpjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZDk0YjUyYjMtYmQxMi00NzY0LTkzZTctYWI2YTRhNjExMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fa3TLAUORNqErqrTxJtTcSGvPF3Cnmoyyt5 aMR7WW6ELGn9D8+Fot2JuLG1nxSl0I87esjSW4hfbKEBxXKUGHiXAtLxJ0iAeuYm Jcr4+fHmGEWhPL3Ce2q9lMYo0vJShUM3y9GodEV5lHDM6a3tntdeTB1z7IV8LCjq XZZD6+XJduCMxfcO3JrMLLaT7+4/IJtlhSh6Y54ZsPSWOgIiqoFoZWJzwyBFduaK P9NoHmjwQ4uKt5reuzkXaDJKrYNnMkYpigIahIJnecrU++zfigG4lYruJyXyXWrg 1dUbYBqDj4lCBdRuG4D7OISBZXBIc9rYxiV3zIA5WnUl2t09XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi719TBSfvjUTKkjI8G9bY9KX1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjgzM2QzYjMtYTY0ZC0z NDAxLWE0NTEtMGU0MzdiYzkzYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDByyLdQrUiggX9Xf4DyllP5cTe206YHgh67nII54pYC5LCD5J0GngN 4JxR+rqS2/d1o20Z6JT7eJgb41VJFdvW4H/UcupyvfjqolC5j9+WH/ed/U/e+H+V uvDPZQXm690PJj3yAOJfPSX2kdr1Jc06MyAi70zYZjKsf1Mchkh/zrSGen2ZCc7S NafFIUlsNhfb7HPu9lQKg/p9gaNJEYxczNm+RdbNbg6fzbQbKoLMBlo7gVvqIV+D 0Fb9A8Ljj7OY6PyuARJXM02v4Dj2vUYsYuUYM5jG2nIS/YuixeWdhfoikn8xUCxO vWg3gRi2A26zwspYDOaYUZOgLqw9SzE= -----END CERTIFICATE-----Generated at Sun Apr 6 11:54:55 2025 by rpki-client