$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa File: 32ff085f-6bc9-3189-b388-01380caf0093.roa (raw, json) Hash identifier: HDVDRMltwmKmpB0li8b8hm5+F+SXdkP1n2Df/Ol3n+8= Subject key identifier: 1B:3F:05:B9:91:22:89:DD:97:B2:66:C0:96:57:CC:38:C7:A6:D0:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CC258B5002C2054E36C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.29.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cc:25:8b:50:02:c2:05:4e:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=95c09a49-c39f-4c1e-97d2-ff1a548877a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:4a:a3:2d:7d:06:22:30:3f:74:0f:0c:e7: 93:8e:28:4f:39:94:b5:48:5f:67:d1:cf:88:7b:4c: e0:5e:42:6e:7e:20:55:15:db:42:22:95:21:84:4b: 58:62:ba:d5:e6:e6:69:87:62:3e:7a:f6:5c:72:f5: 56:b3:43:be:ed:92:08:b5:37:bc:2a:59:f2:9e:76: a9:b4:16:d0:57:b9:aa:77:b9:18:b6:fe:b2:dc:2b: 45:16:a0:96:f6:c9:b9:39:38:d3:9f:2e:07:59:94: e5:e3:71:af:f0:ab:99:f1:74:0a:13:20:4f:35:ac: 7d:72:bd:93:92:d2:1a:84:cd:c9:7c:75:53:19:94: d1:c3:0f:52:41:a4:be:03:9c:9d:a1:c0:40:d5:2b: e7:1d:f1:37:40:b5:52:fb:c5:b3:20:44:fc:14:16: 53:79:50:cd:df:06:2d:e6:3e:0d:83:49:ce:62:46: 94:47:e4:74:95:e5:3b:85:f0:18:a9:b8:7e:ff:28: 5a:c3:7c:ec:9c:33:f3:e0:8e:06:54:88:c5:15:a6: 0b:ea:b6:4b:ed:18:a4:0b:5f:77:00:fe:7f:91:8d: ed:72:86:bc:ec:ba:92:d5:75:19:76:35:78:ee:b9: a9:01:3f:60:ec:05:a8:81:64:5f:41:8f:ee:2c:95: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:05:B9:91:22:89:DD:97:B2:66:C0:96:57:CC:38:C7:A6:D0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ff085f-6bc9-3189-b388-01380caf0093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:98:0f:54:0d:39:0d:9c:14:6c:84:9b:a1:07:3e:14:3e:94: 99:dd:31:96:0a:2f:c8:b4:0f:fd:09:68:c7:61:f2:d1:59:4f: 93:bd:11:5c:dc:76:9d:68:8a:f3:14:fd:0c:86:c4:1b:fc:17: 8c:1a:6b:75:30:17:58:74:bc:04:c4:f3:4a:d3:f6:29:14:36: 1a:9d:46:7d:35:7e:af:94:33:1f:b8:de:69:89:79:93:f8:ce: c4:dd:14:4d:c1:63:a8:f0:1a:e1:20:5a:d7:9f:91:99:15:a8: 8d:9f:3e:1a:e7:92:37:0c:d0:dd:2e:1d:50:60:ba:04:04:5b: a6:55:ac:a7:35:3a:cd:20:ca:40:b6:b7:be:2d:e8:2a:f6:36: 00:03:a1:77:02:e9:b0:d1:a3:b8:65:38:95:83:ca:e5:a2:0c: c5:be:10:3d:90:3c:1c:1a:58:28:6c:4c:3c:c5:14:8f:02:21: 03:a4:87:ac:d3:ef:73:14:f0:a9:fc:84:51:3e:45:d6:8d:f8: 4c:26:0e:6d:b6:90:3c:aa:22:2e:12:bd:b8:fc:77:d5:d7:ee: 6d:15:08:a1:89:bc:d4:d0:89:a5:e6:16:b9:1e:ba:aa:32:b9: 73:6f:b7:e0:ef:6d:8f:27:fa:b2:3a:f6:4e:99:f3:48:30:0a: db:77:f3:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtswli1ACwgVONsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OTVjMDlhNDktYzM5Zi00YzFlLTk3ZDItZmYxYTU0ODg3N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof5Koy19BiIwP3QPDOeTjihPOZS1SF9n0c+I e0zgXkJufiBVFdtCIpUhhEtYYrrV5uZph2I+evZccvVWs0O+7ZIItTe8Klnynnap tBbQV7mqd7kYtv6y3CtFFqCW9sm5OTjTny4HWZTl43Gv8KuZ8XQKEyBPNax9cr2T ktIahM3JfHVTGZTRww9SQaS+A5ydocBA1SvnHfE3QLVS+8WzIET8FBZTeVDN3wYt 5j4Ng0nOYkaUR+R0leU7hfAYqbh+/yhaw3zsnDPz4I4GVIjFFaYL6rZL7RikC193 AP5/kY3tcoa87LqS1XUZdjV47rmpAT9g7AWogWRfQY/uLJXzSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs/BbmRIondl7JmwJZXzDjHptB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzJmZjA4NWYtNmJjOS0z MTg5LWIzODgtMDEzODBjYWYwMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeYD1QNOQ2cFGyEm6EHPhQ+lJndMZYKL8i0D/0JaMdh8tFZT5O9EVzc dp1oivMU/QyGxBv8F4waa3UwF1h0vATE80rT9ikUNhqdRn01fq+UMx+43mmJeZP4 zsTdFE3BY6jwGuEgWtefkZkVqI2fPhrnkjcM0N0uHVBgugQEW6ZVrKc1Os0gykC2 t74t6Cr2NgADoXcC6bDRo7hlOJWDyuWiDMW+ED2QPBwaWChsTDzFFI8CIQOkh6zT 73MU8Kn8hFE+RdaN+EwmDm22kDyqIi4Svbj8d9XX7m0VCKGJvNTQiaXmFrkeuqoy uXNvt+DvbY8n+rI69k6Z80gwCtt380o= -----END CERTIFICATE-----Generated at Sat Apr 26 18:14:04 2025 by rpki-client