$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa File: 08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa (raw, json) Hash identifier: xPEx6Va7pyyXw3F08x3ST33WSpzAnsZmX/jeZsJwIGg= Subject key identifier: 57:23:77:1B:EF:FC:16:26:E9:8E:2D:DB:CB:0E:BD:31:4A:40:B8:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849914E4A574CE069F1BD4A98E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa Signing time: Fri 18 Apr 2025 14:03:47 +0000 ROA not before: Fri 18 Apr 2025 14:03:47 +0000 ROA not after: Thu 17 Jul 2025 14:03:47 +0000 asID: 13335 IP address blocks: 104.29.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:4e:4a:57:4c:e0:69:f1:bd:4a:98:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 14:03:47 2025 GMT Not After : Jul 17 14:03:47 2025 GMT Subject: CN=ea09d976-2e94-40c3-a4d7-cef72b492283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:a7:f0:a0:16:08:e9:a1:78:8d:9c:2a:3e: 00:a8:68:2e:34:21:60:7c:f1:3a:f7:1a:82:85:f4: 5b:6d:2e:4b:a0:d5:29:bf:26:d0:8f:41:3e:f2:2e: 0f:7f:4a:bb:22:ac:fa:75:66:dd:2f:96:4a:e6:75: 69:a7:f3:a1:ad:bd:0f:db:b6:23:98:36:9e:f1:38: 98:40:e7:53:6c:8d:30:96:ff:f1:8c:12:34:82:18: 97:de:e3:45:e9:98:79:f5:56:bc:9b:df:01:64:1f: 57:7b:66:77:22:9b:59:fc:ea:28:eb:9d:85:fa:7c: 8b:91:25:42:33:02:c7:fa:33:ee:43:c1:ac:59:61: d1:8f:6d:93:24:eb:93:03:8f:42:05:39:bd:9d:6e: 60:64:8d:ba:ac:f6:86:76:63:77:c3:ce:84:c1:d8: 1a:00:4a:87:5c:2b:30:8f:62:10:7b:55:cc:48:d4: 57:9e:2a:5f:f6:7a:14:7f:16:aa:af:69:f9:f3:22: 6e:77:bc:b6:1a:ed:5d:cc:76:19:db:25:71:65:87: 33:9d:8e:6d:11:8a:84:a3:b6:cc:47:ed:07:bc:96: 14:7f:05:95:91:e5:6e:6f:bf:7a:e5:1b:d3:f3:b9: eb:ac:23:b6:fc:ea:1f:21:f7:df:a8:93:1d:96:1a: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:23:77:1B:EF:FC:16:26:E9:8E:2D:DB:CB:0E:BD:31:4A:40:B8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08ec4414-6496-3fd6-8f72-f3d05e3586ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:96:12:2a:b3:7f:0c:42:16:88:94:72:07:95:5d:dc:53:c7: 20:3a:26:9d:dd:be:5b:07:7e:b9:ee:b5:8e:a5:c2:23:12:f1: e9:22:78:aa:7e:fb:23:fc:32:fc:08:47:7f:f4:2c:0a:66:72: 8c:1c:ef:62:4b:02:10:a8:27:b1:c9:7d:3b:99:6f:fd:c5:a1: 21:eb:b3:f1:77:29:1a:c4:a2:f3:93:07:6d:bd:c2:96:e2:61: 9b:6f:f6:c5:7f:43:96:72:e1:f5:e7:92:69:df:f8:61:fe:17: f4:cd:9a:c8:a1:ba:10:7f:24:92:ec:59:39:8a:ca:54:4f:02: d8:9f:08:af:4d:c3:79:50:32:20:df:13:d8:7d:6c:63:e4:a5: 25:f6:32:76:28:f3:05:96:3f:8a:aa:49:97:37:da:09:0e:2a: fb:ab:b0:97:66:ee:fd:1c:9c:07:39:c5:0c:97:09:74:6b:61: b1:68:c8:25:d4:9b:ae:98:67:ea:db:95:97:9a:63:53:9a:0f: 87:27:95:3c:3b:8c:13:af:10:c6:84:c2:44:e6:cc:25:c7:81: 49:1c:0e:c7:61:a4:b3:b3:b2:75:8c:68:81:a8:18:d1:c2:61: e8:89:90:6c:b8:0a:37:26:98:88:9e:2a:93:e5:a2:ca:02:eb: 35:c6:e2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRTkpXTOBp8b1KmOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxODE0MDM0N1oXDTI1MDcxNzE0MDM0N1owLzEtMCsGA1UEAxMk ZWEwOWQ5NzYtMmU5NC00MGMzLWE0ZDctY2VmNzJiNDkyMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wan8KAWCOmheI2cKj4AqGguNCFgfPE69xqC hfRbbS5LoNUpvybQj0E+8i4Pf0q7Iqz6dWbdL5ZK5nVpp/Ohrb0P27YjmDae8TiY QOdTbI0wlv/xjBI0ghiX3uNF6Zh59Va8m98BZB9Xe2Z3IptZ/Ooo652F+nyLkSVC MwLH+jPuQ8GsWWHRj22TJOuTA49CBTm9nW5gZI26rPaGdmN3w86EwdgaAEqHXCsw j2IQe1XMSNRXnipf9noUfxaqr2n58yJud7y2Gu1dzHYZ2yVxZYcznY5tEYqEo7bM R+0HvJYUfwWVkeVub7965RvT87nrrCO2/OofIfffqJMdlhoQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcjdxvv/BYm6Y4t28sOvTFKQLjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDhlYzQ0MTQtNjQ5Ni0z ZmQ2LThmNzItZjNkMDVlMzU4NmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWWEiqzfwxCFoiUcgeVXdxTxyA6Jp3dvlsHfrnutY6lwiMS8ekieKp+ +yP8MvwIR3/0LApmcowc72JLAhCoJ7HJfTuZb/3FoSHrs/F3KRrEovOTB229wpbi YZtv9sV/Q5Zy4fXnkmnf+GH+F/TNmsihuhB/JJLsWTmKylRPAtifCK9Nw3lQMiDf E9h9bGPkpSX2MnYo8wWWP4qqSZc32gkOKvursJdm7v0cnAc5xQyXCXRrYbFoyCXU m66YZ+rblZeaY1OaD4cnlTw7jBOvEMaEwkTmzCXHgUkcDsdhpLOzsnWMaIGoGNHC YeiJkGy4CjcmmIieKpPlosoC6zXG4tI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:34 2025 by rpki-client