$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53e1cef9-076b-3cdb-ae8a-44338dac96ec.roa File: 53e1cef9-076b-3cdb-ae8a-44338dac96ec.roa (raw, json) Hash identifier: ahISsg7j6mKhj03PD0YAbohUUXRMW4ke/R1cu0JMzDM= Subject key identifier: 26:E4:31:A2:D0:EA:E8:A8:D6:24:6A:65:91:F5:0B:5A:B8:06:FC:D8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CEB8BA7ED529F65BBC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53e1cef9-076b-3cdb-ae8a-44338dac96ec.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.29.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:ce:b8:ba:7e:d5:29:f6:5b:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=7bdc798f-1891-4aa9-aa04-95790141e8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f1:e7:c1:bf:d6:20:0f:58:63:69:c7:d4:5a: 05:e0:3b:f7:24:5e:e4:48:69:19:2f:16:e5:c2:8a: 96:60:cb:e7:a8:1c:d5:50:69:bf:75:c4:dc:90:66: ec:ff:ec:f1:da:ea:e6:86:fe:2e:10:07:75:81:20: 02:01:82:ef:3d:83:2f:b5:8b:20:ac:64:66:34:b4: 7a:19:25:0f:a6:ff:5d:aa:1c:38:ae:80:92:63:89: 5f:2b:55:30:4b:b9:76:ca:60:93:7a:37:f4:fd:eb: 98:21:7e:dc:ce:9c:cc:d7:bd:58:3c:bf:87:37:f9: b9:3b:88:e7:c4:85:b2:bb:49:b2:52:a5:93:4c:63: 04:b0:76:a2:ef:37:11:60:31:80:b1:23:f8:61:f4: f5:a6:4e:28:3d:06:17:61:fe:42:d8:8e:2e:f6:e9: df:7b:f0:b0:b3:7c:49:94:79:92:de:39:73:2c:c1: bb:b7:4f:5b:7e:4e:70:63:ae:dc:74:f6:ad:2a:03: ca:a2:c2:cd:54:19:a7:0c:f2:75:8a:a8:f4:82:45: 1c:c3:05:75:8f:37:46:c2:f7:4d:21:c7:2f:0e:84: b3:f2:ed:41:f4:7c:be:b3:69:78:82:8d:d9:7e:d5: a2:56:0f:ae:ae:fa:c6:f7:6c:76:c6:db:84:f1:dd: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E4:31:A2:D0:EA:E8:A8:D6:24:6A:65:91:F5:0B:5A:B8:06:FC:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53e1cef9-076b-3cdb-ae8a-44338dac96ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:45:67:d9:b7:40:b0:c3:6e:40:0c:d5:16:94:ad:f5:a0:96: 06:c3:23:b2:4a:29:fb:43:8c:b3:df:7e:4a:df:c8:d7:2c:a5: 5b:19:d9:a0:b3:99:7a:31:ba:c0:95:c0:01:e5:10:bd:63:7b: c7:54:a7:24:22:fe:2f:7f:60:3d:7c:e2:23:64:1e:38:c5:75: 33:6c:67:b2:fb:83:5a:a5:64:07:ce:b3:bc:86:0a:7a:13:9d: f2:8e:29:9d:18:1d:68:1a:e7:cf:0b:a9:7f:b6:1f:2f:8e:73: 36:42:7b:f6:9b:97:e4:82:75:19:39:c3:30:5e:44:f5:1a:5b: ef:5a:f2:41:d1:6e:0e:fe:73:9e:30:ff:31:e5:99:94:97:bb: c1:4b:cb:08:11:bd:91:ef:7b:9d:38:d4:d7:d6:6a:19:48:24: 6b:59:36:8a:9c:40:ba:67:aa:ca:9d:7b:8a:33:3b:eb:c5:a8: 04:63:31:bd:65:16:fc:70:80:52:66:12:21:e6:1a:4e:f6:6d: 69:15:96:9f:c6:5c:aa:52:dd:16:c0:3d:35:7f:b5:02:fe:51: 25:fa:82:d6:0a:f3:2f:05:bf:41:ed:55:91:91:52:37:e4:8a: e5:f6:76:46:fc:4f:f7:7e:2b:65:8c:af:05:0d:7a:05:5d:41: e6:a8:5e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFts64un7VKfZbvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk N2JkYzc5OGYtMTg5MS00YWE5LWFhMDQtOTU3OTAxNDFlOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PHnwb/WIA9YY2nH1FoF4Dv3JF7kSGkZLxbl woqWYMvnqBzVUGm/dcTckGbs/+zx2urmhv4uEAd1gSACAYLvPYMvtYsgrGRmNLR6 GSUPpv9dqhw4roCSY4lfK1UwS7l2ymCTejf0/euYIX7czpzM171YPL+HN/m5O4jn xIWyu0myUqWTTGMEsHai7zcRYDGAsSP4YfT1pk4oPQYXYf5C2I4u9unfe/Cws3xJ lHmS3jlzLMG7t09bfk5wY67cdPatKgPKosLNVBmnDPJ1iqj0gkUcwwV1jzdGwvdN IccvDoSz8u1B9Hy+s2l4go3ZftWiVg+urvrG92x2xtuE8d0DXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbkMaLQ6uio1iRqZZH1C1q4BvzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTNlMWNlZjktMDc2Yi0z Y2RiLWFlOGEtNDQzMzhkYWM5NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB01MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9FZ9m3QLDDbkAM1RaUrfWglgbDI7JKKftDjLPffkrfyNcspVsZ2aCz mXoxusCVwAHlEL1je8dUpyQi/i9/YD184iNkHjjFdTNsZ7L7g1qlZAfOs7yGCnoT nfKOKZ0YHWga588LqX+2Hy+OczZCe/abl+SCdRk5wzBeRPUaW+9a8kHRbg7+c54w /zHlmZSXu8FLywgRvZHve5041NfWahlIJGtZNoqcQLpnqsqde4ozO+vFqARjMb1l FvxwgFJmEiHmGk72bWkVlp/GXKpS3RbAPTV/tQL+USX6gtYK8y8Fv0HtVZGRUjfk iuX2dkb8T/d+K2WMrwUNegVdQeaoXh8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:53 2025 by rpki-client