$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa File: d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa (raw, json) Hash identifier: jHOpOypl+o0yvbr8c27AjwEsQ6ax9f9ox/1py3forIg= Subject key identifier: DA:F8:D7:7B:64:47:17:EB:51:A2:8D:3C:B2:85:2F:F2:AC:BC:4A:0D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C9DDBD191EE8BB000200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.29.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c9:dd:bd:19:1e:e8:bb:00:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=39d50f33-0280-4727-9fbe-881c3d30f862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:58:13:63:45:97:8a:46:96:9e:77:14:68: 4e:1e:05:ba:17:b0:65:8c:1b:42:f0:00:c6:3e:a2: fb:dd:13:d8:e4:1d:ad:1f:b1:3f:24:d6:36:1e:0a: 5a:55:6f:a2:c9:76:36:9e:f0:d3:b8:da:af:b8:5c: 69:68:12:a7:e4:01:ea:99:76:79:98:6f:7b:55:ff: 56:cb:81:0d:f0:9f:d3:67:bc:9a:29:78:26:c3:67: fb:3a:81:29:b4:0b:01:c0:c7:97:e5:32:3d:66:7b: c3:d6:d8:59:c5:d3:79:e1:8a:ce:d4:ac:9d:1d:e6: 3c:e6:f3:00:b3:d2:35:fc:80:4a:a9:4e:fa:7a:d4: 3d:f5:a1:48:e4:00:e4:70:b7:8f:71:15:b8:8a:aa: 5c:30:18:67:9a:4d:e1:0d:a3:d1:09:86:d5:62:02: 76:40:80:b0:55:10:c4:0b:8e:92:ec:06:9f:47:1c: 1b:8e:bb:e0:08:9f:ae:a6:32:8f:7b:9a:d4:f3:a5: 36:ab:4c:e3:e0:f7:ff:7f:3f:b7:73:71:61:a4:1c: 52:40:c0:8d:ef:a3:e3:31:a6:b3:6f:19:ab:6a:74: 55:8d:7c:09:de:4b:b3:05:2f:c3:18:3e:ec:53:d4: c4:50:a0:d5:15:48:ba:b3:a5:2f:02:b3:43:61:b1: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:D7:7B:64:47:17:EB:51:A2:8D:3C:B2:85:2F:F2:AC:BC:4A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7220b2d-c943-3ec7-8c28-ccb0ca4c6121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:5e:df:a5:06:c5:ef:b3:c2:91:59:c5:22:49:a6:22:95:5f: 31:6a:09:e1:0c:85:9a:30:7a:b9:48:e6:23:72:f4:d7:a7:89: ed:c8:52:c7:42:6a:f4:d0:b4:a6:21:a7:81:8e:7f:7e:a3:c9: e1:61:de:10:6f:d4:b8:1b:ab:66:7b:14:3c:ec:3f:b9:65:be: 66:de:3a:08:01:84:b8:08:72:f3:d2:85:18:c8:13:f5:3b:19: 89:b0:1b:7f:4c:27:1d:37:8d:2b:54:72:fa:55:b9:82:45:12: 3b:ba:53:1e:c7:ca:f0:28:09:8f:d8:5d:f0:e7:80:a1:23:a9: 0e:23:cd:1a:e4:a9:a8:ed:03:b5:44:0a:9a:e1:80:0a:31:86: 68:c5:8c:6c:e4:ae:79:9c:6f:d5:be:fe:8a:f6:36:f9:ac:ac: e2:10:d3:87:69:03:8b:2f:b7:68:26:33:22:70:61:6d:a8:24: 1b:11:65:d4:36:2f:d5:08:c1:ff:a7:2f:e4:40:0d:bb:60:d5: 2e:5e:b7:5b:59:50:74:9f:f9:a9:ea:70:3b:21:0a:6a:9f:85: ea:c6:6d:27:00:68:fb:fb:14:f4:a3:d4:7f:cc:19:6a:21:92: d0:01:01:4e:7b:62:34:b0:6a:59:a4:ad:37:c0:30:c3:c9:98: a2:23:df:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsndvRke6LsAAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MzlkNTBmMzMtMDI4MC00NzI3LTlmYmUtODgxYzNkMzBmODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbtYE2NFl4pGlp53FGhOHgW6F7BljBtC8ADG PqL73RPY5B2tH7E/JNY2HgpaVW+iyXY2nvDTuNqvuFxpaBKn5AHqmXZ5mG97Vf9W y4EN8J/TZ7yaKXgmw2f7OoEptAsBwMeX5TI9ZnvD1thZxdN54YrO1KydHeY85vMA s9I1/IBKqU76etQ99aFI5ADkcLePcRW4iqpcMBhnmk3hDaPRCYbVYgJ2QICwVRDE C46S7AafRxwbjrvgCJ+upjKPe5rU86U2q0zj4Pf/fz+3c3FhpBxSQMCN76PjMaaz bxmranRVjXwJ3kuzBS/DGD7sU9TEUKDVFUi6s6UvArNDYbGkmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr413tkRxfrUaKNPLKFL/KsvEoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDcyMjBiMmQtYzk0My0z ZWM3LThjMjgtY2NiMGNhNGM2MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMde36UGxe+zwpFZxSJJpiKVXzFqCeEMhZowerlI5iNy9Nenie3IUsdC avTQtKYhp4GOf36jyeFh3hBv1Lgbq2Z7FDzsP7llvmbeOggBhLgIcvPShRjIE/U7 GYmwG39MJx03jStUcvpVuYJFEju6Ux7HyvAoCY/YXfDngKEjqQ4jzRrkqajtA7VE CprhgAoxhmjFjGzkrnmcb9W+/or2NvmsrOIQ04dpA4svt2gmMyJwYW2oJBsRZdQ2 L9UIwf+nL+RADbtg1S5et1tZUHSf+anqcDshCmqfherGbScAaPv7FPSj1H/MGWoh ktABAU57YjSwalmkrTfAMMPJmKIj32g= -----END CERTIFICATE-----Generated at Sat Apr 5 09:54:48 2025 by rpki-client