$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa File: c6f54f63-56ea-3839-a951-dd30fc3f2557.roa (raw, json) Hash identifier: Swmo3fVvtvheXYejZ4CFfHsuz/wdsKQzBAIYgfGHt1E= Subject key identifier: 7A:D7:B9:51:3A:E0:0E:78:7C:D3:CD:F9:C3:2E:E2:11:61:DE:66:0D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BFC50DD5E3849D233CA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.29.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:fc:50:dd:5e:38:49:d2:33:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=a246f694-4530-4480-960c-fa2ee58aa4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:65:15:a8:11:3c:93:28:f5:9c:95:d2:a1: 72:4d:48:ce:43:4f:58:c5:ae:fc:7e:a7:08:a1:93: ac:4c:e3:c3:a0:69:2c:09:1c:8a:a0:d4:e7:79:05: c6:f5:a2:dc:6e:10:56:82:08:53:1d:2e:90:7d:2d: d1:85:1a:a6:22:71:8c:6e:28:3e:1e:48:b1:d7:58: cc:be:57:30:e4:a8:17:65:8c:5f:4f:9e:18:03:fa: 45:07:5e:3a:c6:38:af:28:74:d3:de:f2:bf:4a:e1: e6:cc:ef:da:57:70:77:d4:0f:91:59:9b:36:5c:51: 48:8f:22:71:93:e9:9c:8c:86:9a:01:bb:b7:a6:d5: 50:0d:23:03:8c:92:ba:3d:ef:bd:ab:73:65:49:3b: 11:7f:d3:b8:33:af:12:21:84:2c:5b:94:e8:ed:55: 57:cf:60:ed:81:f8:17:b5:88:1a:8a:af:24:46:17: 33:8f:b2:c6:54:c8:78:11:3d:77:71:f8:31:12:31: b0:72:9c:57:ff:f1:52:c9:0c:34:c0:c6:fd:10:f8: e6:5b:cc:36:31:6b:75:83:19:b6:e7:5e:0a:f3:11: d0:61:a9:e8:67:16:fa:93:6a:f4:cb:67:42:20:73: 74:e7:be:c0:86:c8:45:96:f8:b7:28:92:93:18:01: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D7:B9:51:3A:E0:0E:78:7C:D3:CD:F9:C3:2E:E2:11:61:DE:66:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b8:84:a4:d1:62:65:af:94:2a:6a:fc:45:2a:88:b1:96:a3: ec:4b:5f:8c:b9:55:12:0d:9a:a7:d0:b4:18:69:3b:7a:cd:6b: fa:aa:9e:fa:2f:b7:de:dc:e5:78:6d:03:eb:5b:d1:b3:ee:dc: 9d:87:6c:51:29:08:40:be:3e:c1:b8:57:2a:26:4c:7e:c7:69: 3d:a0:76:e2:e6:e1:e6:1a:80:c7:d8:f3:97:bd:2f:6a:c4:5e: bc:82:b7:25:37:90:ac:7c:f9:24:8e:7a:9a:ed:f8:c2:77:3a: 78:2b:2b:b9:a8:61:a4:25:55:a8:88:6f:40:f6:e7:94:a6:3f: 52:3c:d5:cf:a8:c3:4d:55:5c:2b:b6:f5:9a:26:d7:fc:e1:0d: 19:c3:eb:a8:ff:a1:1a:7a:fb:60:48:a1:15:91:bd:fa:c0:ce: 6b:92:9b:b1:74:ca:73:4b:4e:01:26:6b:22:ac:6b:44:78:b1: 14:6a:fb:1c:57:3c:40:93:5b:92:46:23:99:d4:37:e4:c9:e0: e3:ce:43:78:88:9d:60:80:81:ab:f6:39:90:77:4b:eb:63:10: 67:87:80:ee:51:28:65:74:5e:b7:09:be:71:47:11:04:a8:d6: 7d:c7:e3:48:b0:cf:67:7d:41:84:0f:5c:d5:fe:0b:1e:7a:7a: 77:81:21:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/xQ3V44SdIzygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YTI0NmY2OTQtNDUzMC00NDgwLTk2MGMtZmEyZWU1OGFhNGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvVlFagRPJMo9ZyV0qFyTUjOQ09Yxa78fqcI oZOsTOPDoGksCRyKoNTneQXG9aLcbhBWgghTHS6QfS3RhRqmInGMbig+Hkix11jM vlcw5KgXZYxfT54YA/pFB146xjivKHTT3vK/SuHmzO/aV3B31A+RWZs2XFFIjyJx k+mcjIaaAbu3ptVQDSMDjJK6Pe+9q3NlSTsRf9O4M68SIYQsW5To7VVXz2DtgfgX tYgaiq8kRhczj7LGVMh4ET13cfgxEjGwcpxX//FSyQw0wMb9EPjmW8w2MWt1gxm2 514K8xHQYanoZxb6k2r0y2dCIHN0577AhshFlvi3KJKTGAEIHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrXuVE64A54fNPN+cMu4hFh3mYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzZmNTRmNjMtNTZlYS0z ODM5LWE5NTEtZGQzMGZjM2YyNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALa4hKTRYmWvlCpq/EUqiLGWo+xLX4y5VRINmqfQtBhpO3rNa/qqnvov t97c5XhtA+tb0bPu3J2HbFEpCEC+PsG4VyomTH7HaT2gduLm4eYagMfY85e9L2rE XryCtyU3kKx8+SSOeprt+MJ3OngrK7moYaQlVaiIb0D255SmP1I81c+ow01VXCu2 9Zom1/zhDRnD66j/oRp6+2BIoRWRvfrAzmuSm7F0ynNLTgEmayKsa0R4sRRq+xxX PECTW5JGI5nUN+TJ4OPOQ3iInWCAgav2OZB3S+tjEGeHgO5RKGV0XrcJvnFHEQSo 1n3H40iwz2d9QYQPXNX+Cx56eneBIZ0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:18:14 2025 by rpki-client