$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd824615-63c8-390f-99de-c8c11ef550ae.roa File: dd824615-63c8-390f-99de-c8c11ef550ae.roa (raw, json) Hash identifier: rheC+mv4W8Utcti54RdO4P1vW61IVCGY6gu2UpYYbHY= Subject key identifier: 37:2E:6A:A8:2C:63:93:B8:D5:33:DC:6C:67:6D:D0:E8:65:14:8F:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849914E49BDEBD8E42DD0562F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd824615-63c8-390f-99de-c8c11ef550ae.roa Signing time: Fri 18 Apr 2025 14:03:47 +0000 ROA not before: Fri 18 Apr 2025 14:03:47 +0000 ROA not after: Thu 17 Jul 2025 14:03:47 +0000 asID: 13335 IP address blocks: 104.29.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:4e:49:bd:eb:d8:e4:2d:d0:56:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 14:03:47 2025 GMT Not After : Jul 17 14:03:47 2025 GMT Subject: CN=a8c78f2f-d942-4723-975b-cecc10c94296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:22:c3:27:18:ca:31:75:28:28:60:b6:22: 63:e4:36:c6:ba:fa:4f:60:0e:08:34:a0:b6:f3:3d: 38:2a:12:e0:ae:a8:38:d3:cd:d9:24:61:4a:06:cf: 85:13:cd:d4:6f:58:74:8c:8f:8b:dd:68:84:f6:fe: 18:a1:9e:e6:57:aa:7f:4a:c6:14:41:d1:7e:23:d4: 7a:20:8a:ba:6e:99:7f:6a:54:05:71:eb:9f:51:af: 35:10:8d:25:aa:4a:b3:74:ca:48:f2:1d:d0:23:3c: 1e:b3:a4:61:1b:25:e8:82:c7:87:7e:59:f8:68:77: 65:2e:48:81:53:fe:f7:7e:33:fc:8d:1d:d1:35:af: 1b:09:4e:26:e3:05:11:60:1b:fe:77:5c:fc:a3:50: ef:e2:35:6c:55:90:0e:f0:3f:69:d9:5c:b3:44:48: 3b:76:9b:ab:f3:f4:cb:76:67:55:de:39:2a:b5:3e: af:2a:3d:f0:08:e3:cc:20:98:2b:e7:34:2e:de:02: 39:ab:60:98:2a:e4:74:bc:cb:f6:59:d2:60:bf:8f: 56:17:fc:63:6f:47:37:ef:67:c6:ca:d4:82:08:d4: b5:c0:a7:f7:01:9e:59:31:e4:a9:02:a9:ad:52:4d: 66:7b:97:24:52:cf:d5:0e:6a:9f:98:f2:67:8f:ad: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2E:6A:A8:2C:63:93:B8:D5:33:DC:6C:67:6D:D0:E8:65:14:8F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd824615-63c8-390f-99de-c8c11ef550ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:82:ee:30:46:5a:3b:35:5b:6d:ea:ae:06:88:90:13:01:54: 0b:47:d5:7e:49:b9:1a:5e:02:03:c6:fb:e7:a8:35:e8:c4:77: f8:e1:c7:c3:1d:69:dd:22:b5:9d:32:0e:fd:18:89:ac:45:5f: 1b:08:d8:a1:15:50:ad:fd:e4:16:c2:fb:bd:84:a8:51:3e:2c: b8:15:bc:d9:65:b7:3e:8a:45:73:af:79:48:e8:0e:a6:f0:2c: 3b:6c:12:27:6f:8f:72:69:29:da:63:4f:af:fe:6c:d1:3e:94: 38:56:20:3d:df:97:97:6f:f4:0a:46:75:53:57:cf:25:08:36: 6e:6a:24:f1:0f:7b:b5:60:ed:b1:88:31:63:31:f0:39:81:b5: 01:65:6b:fb:02:9a:23:0e:04:fd:05:20:19:60:11:5e:25:aa: 28:3b:ba:83:9a:6d:00:e7:12:8d:d7:9f:fc:52:a0:bd:f4:59: 7f:6e:db:88:fa:d4:f5:ab:ae:5d:41:72:6a:4e:1d:7e:3b:70: 3c:fb:f2:0b:3a:08:bb:f0:d7:45:bd:55:79:54:7a:67:ec:a3: f0:bd:81:61:f9:e9:81:c7:06:4b:84:31:3a:9a:ff:f4:f3:23: 1e:bd:09:30:22:26:e7:5c:57:0c:d4:cc:2e:d3:2f:50:80:b1: 19:7c:2f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRTkm969jkLdBWLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxODE0MDM0N1oXDTI1MDcxNzE0MDM0N1owLzEtMCsGA1UEAxMk YThjNzhmMmYtZDk0Mi00NzIzLTk3NWItY2VjYzEwYzk0Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTAiwycYyjF1KChgtiJj5DbGuvpPYA4INKC2 8z04KhLgrqg4083ZJGFKBs+FE83Ub1h0jI+L3WiE9v4YoZ7mV6p/SsYUQdF+I9R6 IIq6bpl/alQFceufUa81EI0lqkqzdMpI8h3QIzwes6RhGyXogseHfln4aHdlLkiB U/73fjP8jR3RNa8bCU4m4wURYBv+d1z8o1Dv4jVsVZAO8D9p2VyzREg7dpur8/TL dmdV3jkqtT6vKj3wCOPMIJgr5zQu3gI5q2CYKuR0vMv2WdJgv49WF/xjb0c372fG ytSCCNS1wKf3AZ5ZMeSpAqmtUk1me5ckUs/VDmqfmPJnj6018QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcuaqgsY5O41TPcbGdt0OhlFI8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGQ4MjQ2MTUtNjNjOC0z OTBmLTk5ZGUtYzhjMTFlZjU1MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiC7jBGWjs1W23qrgaIkBMBVAtH1X5JuRpeAgPG++eoNejEd/jhx8Md ad0itZ0yDv0YiaxFXxsI2KEVUK395BbC+72EqFE+LLgVvNlltz6KRXOveUjoDqbw LDtsEidvj3JpKdpjT6/+bNE+lDhWID3fl5dv9ApGdVNXzyUINm5qJPEPe7Vg7bGI MWMx8DmBtQFla/sCmiMOBP0FIBlgEV4lqig7uoOabQDnEo3Xn/xSoL30WX9u24j6 1PWrrl1BcmpOHX47cDz78gs6CLvw10W9VXlUemfso/C9gWH56YHHBkuEMTqa//Tz Ix69CTAiJudcVwzUzC7TL1CAsRl8L48= -----END CERTIFICATE-----Generated at Sat Apr 26 16:38:11 2025 by rpki-client