$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa File: 06573e63-97cb-3095-bb07-f1aff6375b83.roa (raw, json) Hash identifier: lABwwMlNf4W5p4AwwC36oAle9t/x6EWjNMy0J85I3bA= Subject key identifier: 9F:82:35:A0:11:30:5C:03:8A:7C:5C:4C:AC:92:F2:69:52:5E:D3:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849914E49CBFD1999A8EAE82240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa Signing time: Fri 18 Apr 2025 14:03:47 +0000 ROA not before: Fri 18 Apr 2025 14:03:47 +0000 ROA not after: Thu 17 Jul 2025 14:03:47 +0000 asID: 13335 IP address blocks: 104.29.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:4e:49:cb:fd:19:99:a8:ea:e8:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 14:03:47 2025 GMT Not After : Jul 17 14:03:47 2025 GMT Subject: CN=8df3d80a-0b5b-4334-92a0-39f171b11e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:c0:9a:88:82:2d:59:55:cf:c7:64:d0:ce: 1c:5f:2c:f4:dc:6a:44:b1:9c:0f:ca:7e:6e:54:0b: d7:66:ca:8f:54:b6:85:d8:ff:b3:ee:5d:d1:53:d9: fb:3f:fe:a5:c8:78:40:bd:52:05:f7:b2:6f:41:4b: 9f:f1:15:e1:a9:04:e1:48:c8:69:52:4e:6e:27:03: 27:7d:97:fe:3e:9b:27:cf:33:8e:ef:d7:9e:47:60: f1:c8:ce:c2:3a:5a:63:fa:1f:0e:25:e0:b2:4a:e6: 0c:a5:a2:b2:78:18:04:b5:14:e7:d4:db:ee:6f:4f: 70:0a:54:2e:e0:58:41:cf:bf:e9:a2:d0:d7:90:6d: ed:3f:7f:1c:31:f5:7d:24:da:3d:27:2e:db:8f:f3: 02:ae:33:b3:f4:8d:df:f8:67:fd:85:c7:e4:d8:38: 7f:69:dd:80:22:47:6d:7f:b9:09:48:a5:26:dd:cf: 6d:9e:94:01:a0:05:72:ed:ad:31:6b:44:c4:63:ce: 33:db:60:55:30:d7:02:f8:8e:c7:ed:e3:14:9a:82: 49:92:50:1f:86:30:16:fe:e4:46:43:8c:7e:75:68: 49:56:e2:df:cb:bd:98:e2:be:e9:da:57:3f:90:0d: 80:26:5c:28:ad:ef:70:13:00:fd:6e:31:8e:86:f4: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:82:35:A0:11:30:5C:03:8A:7C:5C:4C:AC:92:F2:69:52:5E:D3:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c9:f9:d3:db:00:e6:f5:3a:60:01:94:53:80:3b:fa:a6:08: ab:c0:21:85:a4:e8:6f:00:8d:1e:3e:34:a0:d6:01:51:8a:61: 5f:6a:fa:a2:73:9c:ba:2a:b8:d6:9a:78:42:45:d0:5d:86:d1: 34:e5:4a:48:69:3b:ab:84:92:c3:67:86:47:d2:05:3b:5b:3e: ea:19:31:08:a4:49:f9:1c:a7:e8:a6:f0:cd:3d:0b:a6:00:dd: 77:e2:76:9e:01:ac:12:cb:9e:ae:5b:ae:7d:b7:cc:cd:d9:cd: cb:74:2a:7a:6c:3c:6f:d0:5b:d0:aa:c2:d7:16:27:71:61:74: f5:f1:16:b6:08:a0:64:db:c9:53:eb:2c:3b:8b:68:ae:99:a0: fe:12:99:5f:b4:a9:07:11:7b:b2:ac:e1:c8:37:37:e8:23:6f: f4:90:b2:d9:2f:ae:23:04:6a:a0:d3:12:a2:73:1c:ea:ff:c5: dd:08:8e:cd:ee:af:d5:ff:28:a7:c7:2d:da:d8:9f:b4:5d:bc: 2c:2c:0d:84:2a:84:e8:ae:25:76:c2:10:5e:78:49:96:4a:e3: 11:2e:0f:21:b4:0a:05:6e:90:fc:52:7e:43:80:e4:ae:39:d3: 91:e0:fc:fd:d7:45:b6:0c:79:5e:ba:28:81:5c:02:c5:30:28: bb:ea:ff:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRTknL/RmZqOroIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxODE0MDM0N1oXDTI1MDcxNzE0MDM0N1owLzEtMCsGA1UEAxMk OGRmM2Q4MGEtMGI1Yi00MzM0LTkyYTAtMzlmMTcxYjExZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL/AmoiCLVlVz8dk0M4cXyz03GpEsZwPyn5u VAvXZsqPVLaF2P+z7l3RU9n7P/6lyHhAvVIF97JvQUuf8RXhqQThSMhpUk5uJwMn fZf+PpsnzzOO79eeR2DxyM7COlpj+h8OJeCySuYMpaKyeBgEtRTn1Nvub09wClQu 4FhBz7/potDXkG3tP38cMfV9JNo9Jy7bj/MCrjOz9I3f+Gf9hcfk2Dh/ad2AIkdt f7kJSKUm3c9tnpQBoAVy7a0xa0TEY84z22BVMNcC+I7H7eMUmoJJklAfhjAW/uRG Q4x+dWhJVuLfy72Y4r7p2lc/kA2AJlwore9wEwD9bjGOhvRI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+CNaARMFwDinxcTKyS8mlSXtPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDY1NzNlNjMtOTdjYi0z MDk1LWJiMDctZjFhZmY2Mzc1YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjJ+dPbAOb1OmABlFOAO/qmCKvAIYWk6G8AjR4+NKDWAVGKYV9q+qJz nLoquNaaeEJF0F2G0TTlSkhpO6uEksNnhkfSBTtbPuoZMQikSfkcp+im8M09C6YA 3Xfidp4BrBLLnq5brn23zM3Zzct0KnpsPG/QW9CqwtcWJ3FhdPXxFrYIoGTbyVPr LDuLaK6ZoP4SmV+0qQcRe7Ks4cg3N+gjb/SQstkvriMEaqDTEqJzHOr/xd0Ijs3u r9X/KKfHLdrYn7RdvCwsDYQqhOiuJXbCEF54SZZK4xEuDyG0CgVukPxSfkOA5K45 05Hg/P3XRbYMeV66KIFcAsUwKLvq/2M= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:52 2025 by rpki-client