$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa File: 2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa (raw, json) Hash identifier: ItfyYgpUJt9kNc1SNEWeoDdB94GwSIF4RhSS9xeLPWk= Subject key identifier: FF:84:CE:B6:B7:3F:61:EB:40:58:DD:57:60:FE:02:80:4B:8B:BB:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849914E4974BDA464CE70737780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa Signing time: Fri 18 Apr 2025 14:03:46 +0000 ROA not before: Fri 18 Apr 2025 14:03:46 +0000 ROA not after: Thu 17 Jul 2025 14:03:46 +0000 asID: 13335 IP address blocks: 104.29.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:4e:49:74:bd:a4:64:ce:70:73:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 14:03:46 2025 GMT Not After : Jul 17 14:03:46 2025 GMT Subject: CN=01fd81ba-be90-4e58-a3bc-5740638d12d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:cd:40:33:36:3f:09:88:e8:da:be:49:3e: c7:f8:79:b3:6e:55:aa:aa:95:68:b5:26:02:41:74: 3d:33:a8:77:0c:5e:6e:f1:0e:fd:f3:a3:df:34:12: 61:f8:68:ab:02:d0:9f:73:72:10:38:47:90:6d:e1: 8a:2e:40:c1:87:71:eb:bf:0a:eb:49:22:26:95:c0: 73:4c:2c:dd:35:ef:f8:e6:6f:af:73:b4:4e:2f:b2: a7:44:ba:67:14:6b:87:aa:a3:28:29:a5:3c:6d:61: df:4e:99:34:08:c7:f7:42:b9:c8:79:ca:ec:c3:f0: f7:34:60:18:21:62:b1:ae:c0:f1:03:09:8a:87:c1: 78:00:f2:ac:5e:c8:ed:34:82:ae:6a:d3:8a:8b:e9: 3c:4b:88:ec:cd:a8:5a:d1:67:bb:e6:1a:1a:51:a2: 18:26:ab:71:99:25:29:cb:7f:02:85:dc:5e:4e:bc: 3d:44:96:18:3b:07:4a:87:5b:7d:09:e1:ea:9f:35: 9d:c8:23:e6:a8:77:5f:41:64:45:6e:f8:ce:f2:e9: 9e:ce:71:da:58:02:41:22:89:13:c0:09:d5:7d:76: 61:a3:56:ca:29:94:b3:b6:cf:77:5a:84:05:81:1c: 09:af:91:0f:c7:c1:d1:e7:c0:2a:29:ab:ff:88:70: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:84:CE:B6:B7:3F:61:EB:40:58:DD:57:60:FE:02:80:4B:8B:BB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e63d3c9-4c74-30de-a05c-4b2373fe4b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3a:93:01:72:30:44:59:0a:52:df:f1:b0:c0:22:87:8e:d6: 0d:1a:e5:b3:86:4b:5f:3e:f5:b4:f7:83:ec:a3:04:43:d4:e5: ba:8a:d5:45:1b:64:1c:38:08:3c:3f:d3:90:dc:e1:e3:74:42: d0:86:58:50:28:3b:81:7b:8a:49:19:f4:4a:f7:a5:dd:2d:51: d7:fc:98:56:b0:ef:3a:69:98:55:ff:78:fb:6c:5b:e3:eb:89: 38:00:e9:3f:25:62:0e:46:c8:86:4e:3e:d4:85:a3:da:33:42: c2:af:4c:11:f4:5a:b0:bd:d2:19:85:f5:96:eb:f9:a9:5a:74: 6d:b2:d4:f0:52:9f:c9:15:cc:e4:e3:42:79:e4:21:9a:9d:d0: cb:5f:28:8f:8f:cb:80:60:33:68:ba:d2:90:6a:66:a6:07:84: fc:d8:c0:88:00:5a:d1:e8:21:db:a8:3c:9f:89:99:1f:38:88: 31:b0:65:6b:47:c5:f5:2b:ce:44:91:38:0c:77:bd:44:eb:b2: d9:4f:2d:c4:f3:88:9c:66:47:fa:b9:6d:37:2b:5c:95:7e:6e: ba:63:54:97:e6:b3:42:1c:e2:c2:89:f1:54:e3:45:72:00:09: 34:9d:41:8d:13:d7:cd:f5:a7:59:5a:f1:cf:2a:78:9e:45:53: 97:39:e5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRTkl0vaRkznBzd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxODE0MDM0NloXDTI1MDcxNzE0MDM0NlowLzEtMCsGA1UEAxMk MDFmZDgxYmEtYmU5MC00ZTU4LWEzYmMtNTc0MDYzOGQxMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzbNQDM2PwmI6Nq+ST7H+HmzblWqqpVotSYC QXQ9M6h3DF5u8Q7986PfNBJh+GirAtCfc3IQOEeQbeGKLkDBh3HrvwrrSSImlcBz TCzdNe/45m+vc7ROL7KnRLpnFGuHqqMoKaU8bWHfTpk0CMf3QrnIecrsw/D3NGAY IWKxrsDxAwmKh8F4APKsXsjtNIKuatOKi+k8S4jszaha0We75hoaUaIYJqtxmSUp y38ChdxeTrw9RJYYOwdKh1t9CeHqnzWdyCPmqHdfQWRFbvjO8umeznHaWAJBIokT wAnVfXZho1bKKZSzts93WoQFgRwJr5EPx8HR58AqKav/iHC2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+Ezra3P2HrQFjdV2D+AoBLi7v/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU2M2QzYzktNGM3NC0z MGRlLWEwNWMtNGIyMzczZmU0YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk6kwFyMERZClLf8bDAIoeO1g0a5bOGS18+9bT3g+yjBEPU5bqK1UUb ZBw4CDw/05Dc4eN0QtCGWFAoO4F7ikkZ9Er3pd0tUdf8mFaw7zppmFX/ePtsW+Pr iTgA6T8lYg5GyIZOPtSFo9ozQsKvTBH0WrC90hmF9Zbr+aladG2y1PBSn8kVzOTj QnnkIZqd0MtfKI+Py4BgM2i60pBqZqYHhPzYwIgAWtHoIduoPJ+JmR84iDGwZWtH xfUrzkSROAx3vUTrstlPLcTziJxmR/q5bTcrXJV+brpjVJfms0Ic4sKJ8VTjRXIA CTSdQY0T1831p1la8c8qeJ5FU5c55W8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:28 2025 by rpki-client