$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa File: b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa (raw, json) Hash identifier: QWYBxaPEBFd4erqrh3rmLT5xLwJXCa/YJqucvqz5ZvY= Subject key identifier: A4:C7:9A:0B:D4:1D:89:DB:7F:ED:D6:CB:AD:7C:17:FA:C1:19:79:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849914E489A3F048E5E123A4400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa Signing time: Fri 18 Apr 2025 14:03:46 +0000 ROA not before: Fri 18 Apr 2025 14:03:46 +0000 ROA not after: Thu 17 Jul 2025 14:03:46 +0000 asID: 13335 IP address blocks: 104.29.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:4e:48:9a:3f:04:8e:5e:12:3a:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 14:03:46 2025 GMT Not After : Jul 17 14:03:46 2025 GMT Subject: CN=1eef19a8-36da-45e0-82d9-8b81f2ac1697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:3a:fa:08:e2:a5:99:18:3a:51:06:35:58: d9:ce:49:ce:2d:8b:c1:12:26:db:3a:c1:23:c6:15: ae:b1:8c:6d:e6:70:f3:a3:f2:89:82:f6:43:00:20: 0f:d8:7b:c3:5b:75:0b:ce:64:57:cc:dc:dd:7e:e7: 31:f0:d0:e4:cf:72:64:f7:b5:fc:7d:6c:bf:10:aa: 64:fb:b8:4f:3a:a0:56:2c:27:c4:8d:62:6c:95:4e: 48:d1:c9:d0:b3:50:a2:5a:a4:d6:82:81:8a:ce:cc: a7:cc:e8:6c:2d:62:7b:f9:0d:5d:ea:d4:b4:0f:ea: 16:da:84:2a:f1:42:23:3a:34:7c:9c:97:9f:67:11: c3:9f:ff:4d:53:b9:b1:7d:7d:9c:cd:ab:95:29:3c: 00:fa:c8:e2:20:76:97:20:31:62:6a:41:3d:e9:7b: ea:9d:09:d0:9e:1d:af:e9:1d:0b:22:40:a6:e0:e8: 15:88:94:e5:a9:e6:05:15:d5:72:6a:78:82:24:47: 53:01:a7:6e:11:2b:c9:e3:7f:21:39:99:50:7b:f2: 5f:b5:a1:d9:3f:0b:6b:60:83:09:d6:5d:84:e9:d8: d9:4e:ed:3e:e4:5c:f7:0c:f5:c7:32:13:57:d7:dd: 72:bb:17:c9:ad:e7:53:7b:64:21:7c:d6:7d:7e:e8: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:9A:0B:D4:1D:89:DB:7F:ED:D6:CB:AD:7C:17:FA:C1:19:79:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4a:88:6d:c3:45:fc:bf:78:c2:2b:17:58:2a:29:fb:16:f5: 1d:44:9d:dc:c6:a0:00:9d:d5:95:8b:b2:d4:70:a1:ba:07:e8: 39:5d:26:df:30:87:d5:a7:0f:ab:68:d3:8f:df:3f:0d:85:da: 1c:b1:7f:57:4a:bc:ea:8b:47:7a:23:7d:d7:e0:52:39:fa:62: 87:6d:0b:8c:67:97:5c:9f:68:26:cd:04:9b:66:60:ef:3b:98: cc:32:36:f4:74:7f:35:e3:fd:96:75:9d:80:9f:7c:87:87:83: da:79:4c:03:e9:f5:3c:34:a0:b8:cc:68:e3:5f:fe:19:dd:15: c8:4f:0a:61:e9:5f:ce:13:5b:b3:41:aa:b5:e9:8a:a8:6e:14: cd:5c:ce:1b:0e:57:d7:fe:c9:be:59:44:62:3a:db:4c:c0:62: 4d:69:1f:17:e8:75:0d:ce:e8:39:35:4b:4f:9a:fc:20:01:c8: b3:f6:aa:ee:07:6c:24:05:02:fc:72:11:a2:8d:9b:0b:c2:87: 25:29:6c:3e:7d:fa:b5:41:00:1e:f1:3a:58:86:f6:ac:ae:88: 45:8e:08:d3:ec:a6:03:37:06:f2:31:0c:18:14:5e:0f:4e:2f: 98:6d:d1:d9:4f:13:fa:19:d2:36:26:c7:6c:d3:64:1e:a2:ae: 60:d1:ad:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRTkiaPwSOXhI6RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxODE0MDM0NloXDTI1MDcxNzE0MDM0NlowLzEtMCsGA1UEAxMk MWVlZjE5YTgtMzZkYS00NWUwLTgyZDktOGI4MWYyYWMxNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIc6+gjipZkYOlEGNVjZzknOLYvBEibbOsEj xhWusYxt5nDzo/KJgvZDACAP2HvDW3ULzmRXzNzdfucx8NDkz3Jk97X8fWy/EKpk +7hPOqBWLCfEjWJslU5I0cnQs1CiWqTWgoGKzsynzOhsLWJ7+Q1d6tS0D+oW2oQq 8UIjOjR8nJefZxHDn/9NU7mxfX2czauVKTwA+sjiIHaXIDFiakE96XvqnQnQnh2v 6R0LIkCm4OgViJTlqeYFFdVyaniCJEdTAaduESvJ438hOZlQe/JftaHZPwtrYIMJ 1l2E6djZTu0+5Fz3DPXHMhNX191yuxfJredTe2QhfNZ9fuiYtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTHmgvUHYnbf+3Wy618F/rBGXnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjdmZDk3ZDItZDZmMS0z YzQ2LTkyYTctNDYyMDZlNWEzYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpKiG3DRfy/eMIrF1gqKfsW9R1EndzGoACd1ZWLstRwoboH6DldJt8w h9WnD6to04/fPw2F2hyxf1dKvOqLR3ojfdfgUjn6YodtC4xnl1yfaCbNBJtmYO87 mMwyNvR0fzXj/ZZ1nYCffIeHg9p5TAPp9Tw0oLjMaONf/hndFchPCmHpX84TW7NB qrXpiqhuFM1czhsOV9f+yb5ZRGI620zAYk1pHxfodQ3O6Dk1S0+a/CAByLP2qu4H bCQFAvxyEaKNmwvChyUpbD59+rVBAB7xOliG9qyuiEWOCNPspgM3BvIxDBgUXg9O L5ht0dlPE/oZ0jYmx2zTZB6irmDRrQ8= -----END CERTIFICATE-----Generated at Sun Apr 27 03:39:10 2025 by rpki-client