$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa File: f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa (raw, json) Hash identifier: 3ZHly8mlrWal3ap4GudtJatuSOBQZrY9nl9y2YYoNkA= Subject key identifier: 92:1B:D4:1F:18:56:0F:52:14:6C:75:5E:C9:60:70:41:BE:F9:8D:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550E92BB9C8B3318D046E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 104.29.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0e:92:bb:9c:8b:33:18:d0:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=065a22c9-5e82-429f-a529-8c9e1a3f2754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:e9:32:0d:f4:cc:24:86:9e:7c:cf:82:1e: 8a:6f:5d:90:7e:99:bf:77:0d:bb:21:d6:08:8b:f7: c5:b7:8f:a2:45:8e:f0:95:8e:25:05:85:ff:25:97: d4:64:6f:58:9a:67:5f:7d:77:f3:f9:29:d1:c8:73: 21:c5:e6:b7:69:06:f6:18:56:1f:a6:ce:36:bf:c7: 33:ab:03:9b:58:c0:3c:c0:5b:b6:cb:ce:fe:74:09: bb:e0:2c:7b:5e:3d:38:3d:f5:d7:12:0a:7c:24:6c: 71:4d:89:8f:46:9b:5f:10:93:d2:28:86:58:1d:69: d0:11:23:fa:15:06:5d:c6:8b:9d:59:21:72:29:6d: a4:8f:dd:f4:cf:3b:6d:ed:52:e4:d5:11:4a:0f:65: c0:3c:ac:52:25:de:d1:16:58:5d:79:13:c2:43:a5: aa:48:c5:a1:b2:41:e6:bf:2b:3b:10:4c:9f:63:f4: b2:8e:1a:3d:30:5c:cb:9c:f2:7a:47:52:f1:3b:b0: ab:c6:39:38:92:31:56:9b:86:ef:aa:37:d6:b3:76: 6c:a9:81:ac:a4:69:b1:b8:47:b5:6c:5a:52:ed:be: b6:5d:41:99:d3:bc:da:62:d8:e5:a4:64:c9:84:9c: 0e:fb:6d:da:e1:b7:23:3a:a5:12:34:9c:ca:48:d6: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:D4:1F:18:56:0F:52:14:6C:75:5E:C9:60:70:41:BE:F9:8D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f64aecee-ba5d-3eba-b968-00ee4af96d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2d:98:33:90:8b:bc:bd:75:b6:53:a6:d1:fc:08:b8:68:2c: f5:7e:5d:62:58:b5:f6:de:64:57:6b:0a:52:10:2c:b2:6c:fc: e6:42:f4:f1:16:74:63:6b:58:12:6e:c3:a2:3c:3c:91:40:21: 22:31:cf:18:d6:ea:32:34:32:c2:44:bc:1b:64:47:4e:b0:4c: 1e:be:99:0a:f5:84:82:81:fc:04:51:d9:84:82:67:2b:57:68: f5:ca:9d:af:16:0a:73:2a:53:bf:22:18:5c:04:bd:d8:09:ec: 06:49:6f:c8:d2:46:b1:2f:76:d8:62:a0:c7:62:81:fe:0a:2c: fb:a2:38:59:d7:36:6d:a8:83:f6:43:bf:98:64:d4:ba:a8:0c: 40:95:f6:ca:e6:b3:08:12:5c:99:0f:2f:b4:b3:e1:db:fc:ff: f1:91:34:2b:b3:63:32:81:0e:db:09:26:88:dd:45:6e:35:76: 14:5d:ca:5a:cd:f4:a9:46:da:a4:4a:5c:a8:ce:58:d4:f1:db: 89:69:2e:f7:57:aa:cf:be:48:87:c7:7f:a6:2e:d1:39:b3:f7: dc:2c:b1:bf:e6:af:40:f5:8f:90:77:30:e4:5f:33:26:f8:94: a4:6d:69:a1:81:3c:f9:83:6c:bd:d7:fd:3e:51:cb:ab:80:a6: ec:a4:19:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ6Su5yLMxjQRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MDY1YTIyYzktNWU4Mi00MjlmLWE1MjktOGM5ZTFhM2YyNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bPpMg30zCSGnnzPgh6Kb12Qfpm/dw27IdYI i/fFt4+iRY7wlY4lBYX/JZfUZG9YmmdffXfz+SnRyHMhxea3aQb2GFYfps42v8cz qwObWMA8wFu2y87+dAm74Cx7Xj04PfXXEgp8JGxxTYmPRptfEJPSKIZYHWnQESP6 FQZdxoudWSFyKW2kj930zztt7VLk1RFKD2XAPKxSJd7RFlhdeRPCQ6WqSMWhskHm vys7EEyfY/Syjho9MFzLnPJ6R1LxO7Crxjk4kjFWm4bvqjfWs3ZsqYGspGmxuEe1 bFpS7b62XUGZ07zaYtjlpGTJhJwO+23a4bcjOqUSNJzKSNatBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIb1B8YVg9SFGx1XslgcEG++Y3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjY0YWVjZWUtYmE1ZC0z ZWJhLWI5NjgtMDBlZTRhZjk2ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAotmDOQi7y9dbZTptH8CLhoLPV+XWJYtfbeZFdrClIQLLJs/OZC9PEW dGNrWBJuw6I8PJFAISIxzxjW6jI0MsJEvBtkR06wTB6+mQr1hIKB/ARR2YSCZytX aPXKna8WCnMqU78iGFwEvdgJ7AZJb8jSRrEvdthioMdigf4KLPuiOFnXNm2og/ZD v5hk1LqoDECV9srmswgSXJkPL7Sz4dv8//GRNCuzYzKBDtsJJojdRW41dhRdylrN 9KlG2qRKXKjOWNTx24lpLvdXqs++SIfHf6Yu0Tmz99wssb/mr0D1j5B3MORfMyb4 lKRtaaGBPPmDbL3X/T5Ry6uApuykGVE= -----END CERTIFICATE-----Generated at Sat Jun 7 12:03:16 2025 by rpki-client