$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9a413a-c7d6-3ef8-b86c-b6a5bd861364.roa File: cb9a413a-c7d6-3ef8-b86c-b6a5bd861364.roa (raw, json) Hash identifier: gjq7NuFAKHK1lMj/cDYKx8gUqOa2eVMgAgSavJtabQU= Subject key identifier: 60:E8:E5:C7:26:8F:81:20:FA:E5:18:64:F3:82:74:40:C1:59:9A:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD9A4417CE300DA8FB740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9a413a-c7d6-3ef8-b86c-b6a5bd861364.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 104.29.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d9:a4:41:7c:e3:00:da:8f:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=4cc61321-4907-4e38-911f-911a4a472f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:6c:fd:b9:37:08:db:14:cb:3e:ff:26:0b: c9:e3:ba:bf:c2:d1:99:b1:45:07:46:eb:4d:f8:02: 00:bb:82:29:1c:89:70:72:f9:6f:a0:85:46:14:61: 66:86:64:fd:77:9c:22:f2:d8:06:32:10:36:0e:53: 1e:23:40:db:48:be:4f:35:b0:76:fc:d2:fc:d3:d0: 60:24:3f:6e:2f:a3:6f:0e:7e:f2:58:14:ec:9b:da: 32:ae:f3:43:6d:f7:9f:1f:25:0c:c6:6f:ec:18:08: d3:0c:26:40:ff:0f:da:70:5c:85:26:f3:64:5b:75: dd:b4:d4:c3:73:e1:9d:6b:5b:c0:78:ea:13:e6:57: 07:07:b8:80:f1:5a:e7:77:f5:a7:5a:eb:e5:29:7a: 09:e1:21:6b:2b:99:09:2c:94:23:a6:40:72:5b:1c: 2b:3b:18:d8:6c:1c:9f:58:d0:b6:66:2c:5d:ca:52: bf:1c:8a:41:67:e4:2d:a1:5b:b5:ac:bc:47:2f:0b: 58:db:e4:15:ed:5c:6e:1a:b2:0f:97:e6:28:31:44: 5c:dc:ac:30:c7:01:e7:87:33:d2:b5:d7:a5:26:99: b4:82:a1:97:f6:4c:23:54:5c:90:f9:85:a8:77:c0: 91:75:4d:6b:6a:08:2b:3a:a7:f1:f4:4a:34:8b:9d: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E8:E5:C7:26:8F:81:20:FA:E5:18:64:F3:82:74:40:C1:59:9A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9a413a-c7d6-3ef8-b86c-b6a5bd861364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b0:8d:26:71:32:64:57:0a:22:b5:10:d0:5d:5a:7b:85:90: 42:b6:06:09:c2:b8:b1:40:e9:87:9b:52:ea:cf:1d:30:c5:e6: 9b:3a:4b:d8:67:ad:1c:bd:99:e5:48:48:89:d3:eb:8c:12:d8: 5b:b6:8b:02:00:ee:2d:80:81:7f:ff:90:21:a0:cf:01:d5:f1: 16:87:75:03:e3:66:3a:8d:9f:a9:60:dd:5f:b6:d9:0b:fe:6d: 41:3f:53:e7:4d:fc:37:1d:4e:ea:4a:87:31:af:95:b3:f6:52: 90:69:b8:bc:15:2e:c2:48:47:c3:d6:43:11:3f:5f:6e:fd:27: 5a:71:b2:96:ad:09:5d:47:e1:dc:13:d2:05:e3:04:92:aa:fa: 79:45:1c:ff:2e:46:68:69:b0:80:4f:cd:3c:18:54:16:56:90: b2:e8:24:31:7c:cf:24:7b:46:c0:a7:ae:6c:b2:13:ba:7d:68: 00:55:01:36:68:a1:22:40:56:01:69:4a:ab:3c:d7:32:c2:0d: 4c:40:db:31:6f:6e:8a:05:07:bd:0e:b7:bc:d9:e3:59:41:21: 98:59:96:ad:bb:e6:01:e0:57:a2:d2:2f:15:0d:37:35:11:f8: 47:69:64:29:e8:a7:24:70:ad:d9:c4:b6:fd:b5:83:6e:07:a5: a4:06:c8:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79mkQXzjANqPt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NGNjNjEzMjEtNDkwNy00ZTM4LTkxMWYtOTExYTRhNDcyZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkFs/bk3CNsUyz7/JgvJ47q/wtGZsUUHRutN +AIAu4IpHIlwcvlvoIVGFGFmhmT9d5wi8tgGMhA2DlMeI0DbSL5PNbB2/NL809Bg JD9uL6NvDn7yWBTsm9oyrvNDbfefHyUMxm/sGAjTDCZA/w/acFyFJvNkW3XdtNTD c+Gda1vAeOoT5lcHB7iA8Vrnd/WnWuvlKXoJ4SFrK5kJLJQjpkByWxwrOxjYbByf WNC2ZixdylK/HIpBZ+QtoVu1rLxHLwtY2+QV7VxuGrIPl+YoMURc3KwwxwHnhzPS tdelJpm0gqGX9kwjVFyQ+YWod8CRdU1raggrOqfx9Eo0i53DfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDo5ccmj4Eg+uUYZPOCdEDBWZrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2I5YTQxM2EtYzdkNi0z ZWY4LWI4NmMtYjZhNWJkODYxMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6wjSZxMmRXCiK1ENBdWnuFkEK2BgnCuLFA6YebUurPHTDF5ps6S9hn rRy9meVISInT64wS2Fu2iwIA7i2AgX//kCGgzwHV8RaHdQPjZjqNn6lg3V+22Qv+ bUE/U+dN/DcdTupKhzGvlbP2UpBpuLwVLsJIR8PWQxE/X279J1pxspatCV1H4dwT 0gXjBJKq+nlFHP8uRmhpsIBPzTwYVBZWkLLoJDF8zyR7RsCnrmyyE7p9aABVATZo oSJAVgFpSqs81zLCDUxA2zFvbooFB70Ot7zZ41lBIZhZlq275gHgV6LSLxUNNzUR +EdpZCnopyRwrdnEtv21g24HpaQGyIk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:44 2025 by rpki-client