$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa File: 5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa (raw, json) Hash identifier: 2KygcNPIbVKOt3TFwTOy0VyiVQ796PBicilX2lTm7ZE= Subject key identifier: 44:A4:81:4E:57:09:3B:3A:CC:43:48:18:20:8A:A7:22:F5:4C:34:12 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BFE31247D2BDFC2613F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 104.29.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:fe:31:24:7d:2b:df:c2:61:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=d0504553-a367-4126-82c7-c62a2e17c2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:ab:20:52:83:ba:bc:f7:dc:95:35:06:b8: 28:6e:af:db:31:56:88:12:7e:1d:c5:77:87:4c:d8: dd:61:c3:62:26:80:37:6d:02:8f:a6:a7:06:ec:9e: d3:36:c3:d4:e7:d2:43:d7:7a:39:d3:ad:9e:71:4f: e2:18:92:5e:de:7d:f4:8d:0e:c7:10:19:56:ac:82: a3:c0:40:16:bf:b3:a0:9c:f4:50:6d:83:c2:3e:05: 5c:54:fa:c9:b8:cf:4e:aa:c1:05:0d:b3:6d:08:7b: c3:7a:0d:82:01:32:22:3c:41:20:a3:23:ef:ea:06: ff:5f:41:13:f3:c0:0e:be:46:91:83:47:21:6d:54: e1:e9:a7:4e:9b:fb:2c:7e:ee:4b:b7:75:ab:40:20: 29:7b:50:67:05:8c:f1:c6:14:63:18:7f:59:13:60: 4e:70:03:29:ea:41:3d:b9:1a:74:08:49:7b:e3:8d: fc:db:aa:1d:47:e5:51:f9:05:1e:dd:33:a5:29:7c: da:70:9c:f2:e4:aa:6a:65:65:4c:a7:aa:b8:3b:aa: 8a:44:1e:49:98:3a:9c:12:6d:f3:4e:78:e3:da:d4: 47:48:3f:ca:53:ea:0b:a7:2c:a3:90:8a:68:4f:1f: b0:a3:05:31:40:8d:59:0c:55:b8:8c:2e:b3:2f:72: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A4:81:4E:57:09:3B:3A:CC:43:48:18:20:8A:A7:22:F5:4C:34:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ca:45:9d:f9:41:f9:11:65:bf:fb:9d:a8:3b:2e:68:51:ae: 28:ac:f1:fc:c2:dc:1c:16:db:1b:83:b7:63:95:7a:16:17:4f: 74:91:1a:44:2b:07:7f:df:34:3d:7d:c4:c2:5d:9f:d1:73:79: ef:35:9b:b1:46:48:c5:58:e7:84:a8:9f:aa:b1:83:76:bb:cf: b1:ff:1f:79:21:69:73:f2:4d:5c:c5:bf:cd:63:1d:8f:3a:63: d2:41:f3:61:6f:32:e7:79:05:08:a3:24:dc:4f:37:fa:61:03: fd:dc:6e:9b:16:53:7a:46:e2:0e:a5:e0:32:a2:34:8f:69:8b: 03:56:85:a0:c2:06:3b:f3:c2:e8:0a:f8:d0:30:08:64:23:f8: b4:d0:f2:35:3b:c8:17:c0:b0:cd:63:49:a1:ba:14:20:d8:6c: fc:cb:d4:88:f8:75:b0:26:04:56:11:d2:ec:63:80:c9:0a:9f: 2b:48:72:73:8e:0c:95:79:eb:48:97:e2:a6:14:11:c2:fe:70: e7:23:65:06:30:04:ec:01:6d:a5:cc:c1:be:25:a4:9b:f3:49: 59:ca:9d:7f:15:69:41:2f:73:00:6f:ee:ad:3f:bb:17:a6:79: a4:1b:42:fd:b5:7d:75:b5:07:c3:33:33:64:86:4f:33:2b:a7: 5a:0d:57:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/4xJH0r38JhPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZDA1MDQ1NTMtYTM2Ny00MTI2LTgyYzctYzYyYTJlMTdjMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTCrIFKDurz33JU1Brgobq/bMVaIEn4dxXeH TNjdYcNiJoA3bQKPpqcG7J7TNsPU59JD13o5062ecU/iGJJe3n30jQ7HEBlWrIKj wEAWv7OgnPRQbYPCPgVcVPrJuM9OqsEFDbNtCHvDeg2CATIiPEEgoyPv6gb/X0ET 88AOvkaRg0chbVTh6adOm/ssfu5Lt3WrQCApe1BnBYzxxhRjGH9ZE2BOcAMp6kE9 uRp0CEl7443826odR+VR+QUe3TOlKXzacJzy5KpqZWVMp6q4O6qKRB5JmDqcEm3z Tnjj2tRHSD/KU+oLpyyjkIpoTx+wowUxQI1ZDFW4jC6zL3KksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESkgU5XCTs6zENIGCCKpyL1TDQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWFiZjc0YzMtNjkxYy0z M2MwLWJiZTItNmRlMDY0OWUzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXKRZ35QfkRZb/7nag7LmhRriis8fzC3BwW2xuDt2OVehYXT3SRGkQr B3/fND19xMJdn9Fzee81m7FGSMVY54Son6qxg3a7z7H/H3khaXPyTVzFv81jHY86 Y9JB82FvMud5BQijJNxPN/phA/3cbpsWU3pG4g6l4DKiNI9piwNWhaDCBjvzwugK +NAwCGQj+LTQ8jU7yBfAsM1jSaG6FCDYbPzL1Ij4dbAmBFYR0uxjgMkKnytIcnOO DJV560iX4qYUEcL+cOcjZQYwBOwBbaXMwb4lpJvzSVnKnX8VaUEvcwBv7q0/uxem eaQbQv21fXW1B8MzM2SGTzMrp1oNV3U= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:25 2025 by rpki-client