$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa File: 62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa (raw, json) Hash identifier: rVqCkVCjLFokzMtvfQk0A+C50rfWUqgx1V2gX1DpXTw= Subject key identifier: 0B:00:A9:8C:42:79:2A:19:8D:C4:75:71:3A:9A:00:86:1D:14:73:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849914E49AFC7DB9871553A5970 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa Signing time: Fri 18 Apr 2025 14:03:47 +0000 ROA not before: Fri 18 Apr 2025 14:03:47 +0000 ROA not after: Thu 17 Jul 2025 14:03:47 +0000 asID: 13335 IP address blocks: 104.29.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:4e:49:af:c7:db:98:71:55:3a:59:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 14:03:47 2025 GMT Not After : Jul 17 14:03:47 2025 GMT Subject: CN=61c1dadd-9954-49a1-9b3d-e1c0a76441b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:28:71:a2:79:e3:ee:da:53:97:ca:91:17: 90:47:e1:20:07:b7:7e:61:74:ca:f4:1d:23:61:dc: 78:09:09:27:03:2f:ec:4a:92:bc:1c:23:75:12:67: a9:6d:67:5c:d8:63:c4:6a:0f:03:0b:1d:4f:c3:4d: 24:50:7a:ad:d0:48:7f:99:3d:ff:63:cc:a6:d0:aa: de:e9:4b:88:c0:c8:26:b5:44:66:c7:ee:b5:ef:d0: fb:52:eb:9a:59:b2:56:d5:cd:7c:00:1a:c8:71:d2: 2b:f1:d2:79:04:8f:cf:22:10:3e:02:de:84:6f:8b: 88:76:a9:9f:e2:7c:0d:11:a4:b0:84:44:ce:1a:ce: d7:9c:54:c6:13:a8:83:e8:ea:73:f4:0b:c9:99:ce: 5b:d6:ff:53:1f:1b:03:c6:05:82:9d:67:e7:60:4e: 79:b1:82:de:15:9f:14:2a:33:e5:b1:13:5b:09:2d: 3d:cc:07:fe:04:a0:ac:f3:77:9c:6f:1a:35:50:70: b7:bb:d7:39:aa:da:d8:e9:9e:0f:29:69:f4:ea:ae: 4f:c9:46:c5:07:3d:2f:7d:1e:2b:4b:41:3d:19:20: 80:69:a9:39:12:2c:c2:8c:b7:2c:63:46:45:c0:1c: 88:d8:0f:6d:12:45:d4:4e:8b:1e:e5:23:8b:ff:bd: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:00:A9:8C:42:79:2A:19:8D:C4:75:71:3A:9A:00:86:1D:14:73:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:66:21:cb:df:45:51:55:6b:96:3c:31:ff:9e:78:9b:e7:75: f1:a4:b6:9b:5d:02:01:db:a1:e4:6e:2f:4f:f0:32:11:c2:e0: a1:b7:21:b5:bc:cc:73:67:67:87:62:00:89:45:1b:39:72:b5: 01:51:4d:95:df:95:c5:9a:1f:55:c7:ed:3b:88:40:b7:71:5c: 9c:c1:c9:d3:f3:e3:9b:9d:c1:bf:75:ea:c9:5f:b0:58:09:18: f1:34:53:87:15:4d:bf:b7:54:e0:44:99:80:58:43:83:9b:8f: 95:b3:8a:4c:10:f0:12:4b:41:97:70:0d:ef:66:75:03:31:e8: 00:73:72:66:39:f8:d0:a3:52:41:4d:65:55:5e:5f:26:7c:47: 00:48:ae:b4:d2:d2:3d:32:15:c0:35:16:06:bf:e8:d7:7a:b4: a4:2d:08:14:5a:19:b6:33:06:79:00:14:4d:da:e7:cc:4e:ef: 17:f5:09:29:06:d0:a0:d7:e5:10:82:ae:c2:b0:fb:79:ca:52: 05:37:2c:d5:20:93:d5:4e:04:7c:52:81:0a:d5:eb:2d:c7:46: c7:2b:af:ac:d5:2b:69:3e:fa:89:c7:5f:15:bf:b2:42:a9:a3: 08:5b:fc:6a:87:69:16:79:37:63:a6:03:20:4c:12:1f:0e:fa: 45:46:03:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRTkmvx9uYcVU6WXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxODE0MDM0N1oXDTI1MDcxNzE0MDM0N1owLzEtMCsGA1UEAxMk NjFjMWRhZGQtOTk1NC00OWExLTliM2QtZTFjMGE3NjQ0MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgkocaJ54+7aU5fKkReQR+EgB7d+YXTK9B0j Ydx4CQknAy/sSpK8HCN1EmepbWdc2GPEag8DCx1Pw00kUHqt0Eh/mT3/Y8ym0Kre 6UuIwMgmtURmx+6179D7UuuaWbJW1c18ABrIcdIr8dJ5BI/PIhA+At6Eb4uIdqmf 4nwNEaSwhETOGs7XnFTGE6iD6Opz9AvJmc5b1v9THxsDxgWCnWfnYE55sYLeFZ8U KjPlsRNbCS09zAf+BKCs83ecbxo1UHC3u9c5qtrY6Z4PKWn06q5PyUbFBz0vfR4r S0E9GSCAaak5EizCjLcsY0ZFwByI2A9tEkXUTose5SOL/70NyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsAqYxCeSoZjcR1cTqaAIYdFHNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjJmN2Q1ODMtYzgwZS0z NGMzLTlhYWEtMjI2OGYyZDg3YzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNmIcvfRVFVa5Y8Mf+eeJvndfGktptdAgHboeRuL0/wMhHC4KG3IbW8 zHNnZ4diAIlFGzlytQFRTZXflcWaH1XH7TuIQLdxXJzBydPz45udwb916slfsFgJ GPE0U4cVTb+3VOBEmYBYQ4Obj5WzikwQ8BJLQZdwDe9mdQMx6ABzcmY5+NCjUkFN ZVVeXyZ8RwBIrrTS0j0yFcA1Fga/6Nd6tKQtCBRaGbYzBnkAFE3a58xO7xf1CSkG 0KDX5RCCrsKw+3nKUgU3LNUgk9VOBHxSgQrV6y3HRscrr6zVK2k++onHXxW/skKp owhb/GqHaRZ5N2OmAyBMEh8O+kVGA9s= -----END CERTIFICATE-----Generated at Sat Apr 26 19:22:54 2025 by rpki-client