$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa File: d272edb2-23ec-3606-8a77-0cddf94e936c.roa (raw, json) Hash identifier: NyB88MnyHmzvAyL0z2IiYxvkA6LNYvYCG40zpuUv7ig= Subject key identifier: B1:6A:BF:3E:9B:00:41:A0:23:78:99:3F:CA:84:96:04:AF:B1:33:A8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CBCC1718F4AC993584C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 104.29.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cb:cc:17:18:f4:ac:99:35:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=8766a377-443f-478b-9e30-f58f6595f62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:d5:97:30:d9:8d:4c:8b:1e:9b:90:a0:22: 5d:c0:c9:15:75:04:fc:8b:62:bd:8a:c7:cc:a8:8f: 06:41:f8:b7:02:fa:6a:24:8c:5f:70:c4:ff:ba:0a: cd:1c:45:14:56:72:b0:5e:fc:e9:da:c1:60:78:9d: 62:8d:b1:38:2f:89:85:45:f6:9e:5b:47:65:93:60: e3:d3:f6:2c:68:3b:bb:ce:9d:dd:9f:ef:64:84:f3: 38:97:d9:ea:08:a3:f6:aa:2c:ea:87:b4:4b:64:0e: 7c:3c:36:26:41:9e:b3:78:af:2f:8c:15:b5:7e:e6: ac:e4:57:01:d8:e9:e8:fb:eb:82:c0:72:a4:25:cc: cd:bc:a5:ac:0a:28:4f:44:17:9e:94:35:e5:01:7b: 15:87:ca:eb:0c:b2:cd:0a:0e:28:e6:fc:57:50:15: 4c:60:25:f0:11:73:94:f9:22:c6:3c:cb:ef:ba:56: 5d:3b:01:73:be:ef:78:45:1c:22:2b:9c:96:e6:07: fb:0e:7c:53:34:46:43:ab:2c:bf:74:c6:f1:68:0c: 40:92:ed:3e:3b:dd:f5:45:12:e4:f2:2b:92:4a:6f: c5:9c:57:27:e6:27:77:18:c9:62:97:81:55:f7:15: f0:44:03:db:4e:cd:f7:2d:44:a7:4b:ab:29:77:ca: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:BF:3E:9B:00:41:A0:23:78:99:3F:CA:84:96:04:AF:B1:33:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:78:96:8e:2e:08:9d:75:02:60:0d:80:2c:e6:4f:4a:ac:ef: 49:39:04:11:58:5f:b5:e8:ff:aa:e2:ef:93:16:6a:43:7c:ca: 0e:ec:c4:50:ee:0f:12:ab:1b:64:f8:46:7f:a6:5d:36:15:0d: e7:d1:0e:c1:5c:36:09:f2:14:9d:e8:70:1e:be:8b:31:c0:d4: 0f:d0:04:69:df:e9:03:22:fe:c2:d9:d0:c7:c3:7b:72:c9:d3: b9:63:f2:1d:55:4c:92:67:a9:f8:cb:cd:6c:8c:7c:2b:ac:d0: 68:55:05:54:4a:c1:97:a2:82:3a:11:bb:f4:1b:04:a9:20:a5: e3:fc:fd:67:fc:5a:00:e6:e2:e1:21:e5:70:5d:7c:37:5c:2f: 44:7b:a5:b8:39:d1:44:5c:a7:6b:ff:03:36:61:b6:6e:7d:7f: ac:9a:d1:9c:b0:02:06:57:fb:4d:71:aa:02:c8:7a:59:a4:a9: 39:c1:39:c5:2b:85:f2:1c:6e:aa:24:cf:58:e1:98:95:a2:73: aa:68:3a:2c:14:d9:6d:ff:ba:23:29:70:cf:be:2d:e1:06:4d: ca:34:0a:3e:cb:92:19:6e:f0:44:79:ae:96:57:c0:eb:c3:5f: bf:75:f6:57:32:c2:c4:60:af:75:f2:25:73:b7:3a:f0:1c:23: 8a:2d:89:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsvMFxj0rJk1hMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ODc2NmEzNzctNDQzZi00NzhiLTllMzAtZjU4ZjY1OTVmNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/VlzDZjUyLHpuQoCJdwMkVdQT8i2K9isfM qI8GQfi3AvpqJIxfcMT/ugrNHEUUVnKwXvzp2sFgeJ1ijbE4L4mFRfaeW0dlk2Dj 0/YsaDu7zp3dn+9khPM4l9nqCKP2qizqh7RLZA58PDYmQZ6zeK8vjBW1fuas5FcB 2Ono++uCwHKkJczNvKWsCihPRBeelDXlAXsVh8rrDLLNCg4o5vxXUBVMYCXwEXOU +SLGPMvvulZdOwFzvu94RRwiK5yW5gf7DnxTNEZDqyy/dMbxaAxAku0+O931RRLk 8iuSSm/FnFcn5id3GMlil4FV9xXwRAPbTs33LUSnS6spd8qroQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFqvz6bAEGgI3iZP8qElgSvsTOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDI3MmVkYjItMjNlYy0z NjA2LThhNzctMGNkZGY5NGU5MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG54lo4uCJ11AmANgCzmT0qs70k5BBFYX7Xo/6ri75MWakN8yg7sxFDu DxKrG2T4Rn+mXTYVDefRDsFcNgnyFJ3ocB6+izHA1A/QBGnf6QMi/sLZ0MfDe3LJ 07lj8h1VTJJnqfjLzWyMfCus0GhVBVRKwZeigjoRu/QbBKkgpeP8/Wf8WgDm4uEh 5XBdfDdcL0R7pbg50URcp2v/AzZhtm59f6ya0ZywAgZX+01xqgLIelmkqTnBOcUr hfIcbqokz1jhmJWic6poOiwU2W3/uiMpcM++LeEGTco0Cj7Lkhlu8ER5rpZXwOvD X7919lcywsRgr3XyJXO3OvAcI4otiXo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:00 2025 by rpki-client