$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa File: 3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa (raw, json) Hash identifier: gWDLJ8UiBzFmsvmTothu0PDMC9uy702MifWYPsCISnk= Subject key identifier: 3A:87:BA:49:59:24:80:CE:95:1E:F3:FA:AB:F1:2C:9A:7A:B6:49:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849914E4A1F8076289FBE81D100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa Signing time: Fri 18 Apr 2025 14:03:47 +0000 ROA not before: Fri 18 Apr 2025 14:03:47 +0000 ROA not after: Thu 17 Jul 2025 14:03:47 +0000 asID: 13335 IP address blocks: 104.29.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:4e:4a:1f:80:76:28:9f:be:81:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 14:03:47 2025 GMT Not After : Jul 17 14:03:47 2025 GMT Subject: CN=aeba559a-685d-42dc-a230-31b9bcbe413b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:05:d9:91:b0:2d:5f:dd:95:86:73:50:e0: 6e:dd:4f:84:a6:19:0b:43:c4:77:40:38:11:d4:eb: 7d:95:80:77:a3:3e:af:b6:8e:7a:65:e4:df:02:01: ae:bd:62:39:ee:13:85:41:ea:af:db:f4:a6:df:db: d0:7e:b4:af:2d:a0:65:da:69:5b:9b:2f:30:2e:8a: 5f:40:f4:02:d4:8e:3f:dc:2d:53:89:86:f3:fc:2c: 49:98:b7:47:37:fc:9f:ba:e9:7d:b5:f9:cf:23:da: d0:0d:bf:61:9f:bd:0b:c8:cc:95:94:6d:b0:1a:71: dc:34:51:73:47:73:5c:9f:67:07:63:f1:11:a3:5e: 05:1a:0b:2c:13:0b:fe:f6:91:91:d8:28:e7:31:3a: 76:78:31:92:67:1e:e5:2b:88:5e:bd:0c:1d:f4:9b: 29:08:a1:3e:fd:4b:31:73:18:a6:8a:23:ea:66:9c: f1:5f:6d:c9:b7:86:3a:10:80:55:ab:5e:7f:56:c3: b8:46:ab:aa:87:4c:b2:ee:56:19:ea:ff:90:02:d0: 4b:c9:12:cb:e2:a1:33:b7:85:33:15:87:73:77:35: 2c:39:8f:00:42:35:e2:55:56:a2:d1:73:5b:82:5d: cc:ca:00:97:7e:8a:dc:90:29:25:fb:1c:a3:6a:b7: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:87:BA:49:59:24:80:CE:95:1E:F3:FA:AB:F1:2C:9A:7A:B6:49:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e61cd68-4179-3d91-b31d-0d3587a35b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e7:19:fd:2d:8a:a2:1f:ec:38:8d:09:56:e2:9d:bd:6b:a3: 4d:ab:32:8f:6a:54:92:80:07:ff:5d:ac:17:be:ac:e8:e6:a1: 73:8c:d2:38:9e:35:ec:24:1f:23:1e:15:2c:25:c3:08:92:fd: 23:bb:b0:12:ae:ca:70:73:d7:3a:5e:f9:1c:b7:13:e1:b8:bb: 60:a3:eb:25:74:7e:fd:c7:48:a4:a2:ec:8b:1b:31:08:6c:b4: 41:33:f8:23:38:ec:fd:8c:f3:b7:13:6c:97:df:47:21:2d:b8: ff:f1:f7:52:65:70:2e:aa:2c:2e:0c:14:41:de:f7:27:7e:8e: f9:d3:60:e0:19:69:a4:9b:78:df:26:f3:9f:43:3c:d3:c7:d6: 31:a0:bf:37:a3:8b:1b:78:e0:84:42:b1:42:27:02:a6:9d:9c: 7f:0a:af:a3:51:3d:60:d4:26:a5:d4:18:bd:c0:8f:0b:47:05: 49:30:8f:f2:88:81:8e:8a:99:61:41:65:0b:ea:3a:6b:a2:fe: ef:0e:f1:c9:64:c1:56:96:42:0e:73:b8:33:33:24:1c:2b:30: a0:97:97:cf:8c:74:dc:f0:ac:54:f7:c3:09:1c:5d:51:0e:bb: a2:65:2e:c2:cf:97:80:2f:7a:dd:61:bd:bc:1d:58:0f:53:4c: 96:ef:4c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRTkofgHYon76B0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxODE0MDM0N1oXDTI1MDcxNzE0MDM0N1owLzEtMCsGA1UEAxMk YWViYTU1OWEtNjg1ZC00MmRjLWEyMzAtMzFiOWJjYmU0MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTEF2ZGwLV/dlYZzUOBu3U+EphkLQ8R3QDgR 1Ot9lYB3oz6vto56ZeTfAgGuvWI57hOFQeqv2/Sm39vQfrSvLaBl2mlbmy8wLopf QPQC1I4/3C1TiYbz/CxJmLdHN/yfuul9tfnPI9rQDb9hn70LyMyVlG2wGnHcNFFz R3Ncn2cHY/ERo14FGgssEwv+9pGR2CjnMTp2eDGSZx7lK4hevQwd9JspCKE+/Usx cximiiPqZpzxX23Jt4Y6EIBVq15/VsO4Rquqh0yy7lYZ6v+QAtBLyRLL4qEzt4Uz FYdzdzUsOY8AQjXiVVai0XNbgl3MygCXforckCkl+xyjarfLEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqHuklZJIDOlR7z+qvxLJp6tklGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2U2MWNkNjgtNDE3OS0z ZDkxLWIzMWQtMGQzNTg3YTM1YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADnGf0tiqIf7DiNCVbinb1ro02rMo9qVJKAB/9drBe+rOjmoXOM0jie NewkHyMeFSwlwwiS/SO7sBKuynBz1zpe+Ry3E+G4u2Cj6yV0fv3HSKSi7IsbMQhs tEEz+CM47P2M87cTbJffRyEtuP/x91JlcC6qLC4MFEHe9yd+jvnTYOAZaaSbeN8m 859DPNPH1jGgvzejixt44IRCsUInAqadnH8Kr6NRPWDUJqXUGL3AjwtHBUkwj/KI gY6KmWFBZQvqOmui/u8O8clkwVaWQg5zuDMzJBwrMKCXl8+MdNzwrFT3wwkcXVEO u6JlLsLPl4Avet1hvbwdWA9TTJbvTBo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:00 2025 by rpki-client