$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa File: aac69805-db9c-3d5e-8a6c-61855f417b0e.roa (raw, json) Hash identifier: SDZAtchN8PPWpsKY2/LuS2VM/aQSWyCyH6jSJxKkeNE= Subject key identifier: 56:6E:BB:18:46:1E:9F:98:05:32:CA:3C:FC:09:E1:91:90:18:E6:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849B0C8331B2808103F49359680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa Signing time: Tue 29 Apr 2025 20:39:28 +0000 ROA not before: Tue 29 Apr 2025 20:39:28 +0000 ROA not after: Mon 28 Jul 2025 20:39:28 +0000 asID: 14789 IP address blocks: 104.29.29.0/24 maxlen: 24 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:c8:33:1b:28:08:10:3f:49:35:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 29 20:39:28 2025 GMT Not After : Jul 28 20:39:28 2025 GMT Subject: CN=27c1f471-7534-4cb3-9d03-80855ec40d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:0d:f5:9a:32:83:94:10:38:0d:39:40:54: 47:a6:84:8e:97:9b:5c:25:b0:29:70:cb:6f:62:d1: ac:c7:a8:e6:2f:41:3f:b4:f2:87:28:06:73:b4:b3: 2f:97:ab:f1:7a:23:f7:00:b5:53:e4:cc:ec:1c:50: f5:fc:6e:85:09:a6:e1:d8:42:11:7f:89:8f:24:f1: 19:a8:d7:53:ff:7e:d5:f5:ed:10:4c:d3:cd:f9:9e: 44:2f:52:b7:f6:54:ee:63:2f:11:84:a9:4e:23:e4: 02:0b:a6:d2:3b:0b:82:7c:62:27:f6:09:c2:51:bb: 33:b5:21:34:82:82:2c:08:31:fc:95:da:32:f3:1c: 29:15:6d:80:b6:d7:3f:30:64:d7:6a:9f:49:1d:78: f9:1a:65:2a:cc:b7:d1:1a:76:94:41:6e:4f:3e:ce: fe:20:a6:17:b5:7e:b9:53:63:09:c5:7e:15:25:be: bc:1b:67:c0:69:d0:2e:72:e4:ad:04:27:2d:d7:fd: 22:32:8d:15:ea:61:69:48:c1:b5:83:46:a1:f5:a9: 78:5f:00:09:74:39:7e:45:61:62:35:0b:68:2d:7c: 70:08:c9:7e:c7:99:8a:9e:9b:75:49:5e:eb:80:9c: 70:a3:2d:9f:fc:67:34:23:92:8c:82:4c:42:2d:f2: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6E:BB:18:46:1E:9F:98:05:32:CA:3C:FC:09:E1:91:90:18:E6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.29.0/24 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:74:34:98:f9:f1:80:18:63:e3:7b:fe:db:ef:0d:8c:fe:dd: c7:6b:9e:da:9d:f4:4e:87:9b:d2:66:04:a8:45:d3:62:c2:94: ea:d6:14:20:71:93:cc:46:19:37:63:1a:71:e7:87:e7:d3:26: 41:e5:8f:03:54:26:6e:c3:4e:06:29:d6:42:76:b1:dd:68:8f: 47:b3:d7:c8:73:82:da:56:97:2d:f3:85:f3:bc:44:4f:8c:6c: 23:dc:4d:10:e7:e1:a1:d0:56:ba:47:e3:62:41:59:58:78:ed: f8:a1:06:30:1e:65:7a:17:07:af:82:4e:a2:c5:2c:f4:aa:6f: 59:bb:35:59:c0:a9:20:02:1e:82:03:a2:2a:f0:47:d7:26:8f: fc:ee:f6:21:12:8b:3c:d0:f3:fd:0d:13:2f:d2:4f:31:c0:05: dc:6a:03:99:b9:ca:d6:87:4e:a1:cb:44:c3:87:b1:a8:ed:1d: c6:ce:21:09:15:e7:b6:69:41:47:ca:b8:4e:f8:f3:40:25:2c: c0:1b:2e:80:3e:dc:e2:00:ce:87:1e:e4:b8:13:e6:47:1c:35: 6e:fe:fb:3f:f6:b0:81:29:25:38:50:6f:74:fa:ca:25:57:29: 3e:95:c7:77:25:7f:54:d5:8b:5a:b4:9a:fe:a1:19:1e:20:dc: fa:e2:98:d9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmwyDMbKAgQP0k1loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQyOTIwMzkyOFoXDTI1MDcyODIwMzkyOFowLzEtMCsGA1UEAxMk MjdjMWY0NzEtNzUzNC00Y2IzLTlkMDMtODA4NTVlYzQwZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMAN9Zoyg5QQOA05QFRHpoSOl5tcJbApcMtv YtGsx6jmL0E/tPKHKAZztLMvl6vxeiP3ALVT5MzsHFD1/G6FCabh2EIRf4mPJPEZ qNdT/37V9e0QTNPN+Z5EL1K39lTuYy8RhKlOI+QCC6bSOwuCfGIn9gnCUbsztSE0 goIsCDH8ldoy8xwpFW2Attc/MGTXap9JHXj5GmUqzLfRGnaUQW5PPs7+IKYXtX65 U2MJxX4VJb68G2fAadAucuStBCct1/0iMo0V6mFpSMG1g0ah9al4XwAJdDl+RWFi NQtoLXxwCMl+x5mKnpt1SV7rgJxwoy2f/Gc0I5KMgkxCLfLp0QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFZuuxhGHp+YBTLKPPwJ4ZGQGOaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFjNjk4MDUtZGI5Yy0z ZDVlLThhNmMtNjE4NTVmNDE3YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaB0dAwQA rEcCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF10NJj58YAYY+N7/tvvDYz+3cdrntqd9E6Hm9JmBKhF02LC lOrWFCBxk8xGGTdjGnHnh+fTJkHljwNUJm7DTgYp1kJ2sd1oj0ez18hzgtpWly3z hfO8RE+MbCPcTRDn4aHQVrpH42JBWVh47fihBjAeZXoXB6+CTqLFLPSqb1m7NVnA qSACHoIDoirwR9cmj/zu9iESizzQ8/0NEy/STzHABdxqA5m5ytaHTqHLRMOHsajt HcbOIQkV57ZpQUfKuE7480AlLMAbLoA+3OIAzoce5LgT5kccNW7++z/2sIEpJThQ b3T6yiVXKT6Vx3clf1TVi1q0mv6hGR4g3PrimNk= -----END CERTIFICATE-----Generated at Sat May 10 20:05:16 2025 by rpki-client