$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2c9a79e-a717-358e-b244-23fa4f013c1d.roa File: d2c9a79e-a717-358e-b244-23fa4f013c1d.roa (raw, json) Hash identifier: V3Z8shghBwtuHLUe8FP6lY5xAlFkrzRON3OdZzCGHc8= Subject key identifier: A8:D6:71:E8:76:A9:F3:39:4D:74:1F:16:3C:27:23:6D:C5:AD:57:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAECA65F724E9AEBD5FE040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2c9a79e-a717-358e-b244-23fa4f013c1d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.29.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:ca:65:f7:24:e9:ae:bd:5f:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3ff75bff-9a59-4c87-a64e-6e55580b0558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:94:c8:c4:14:a8:44:2c:f6:db:ad:48:b8:f1: d4:7b:4a:ab:ff:8f:4d:4a:d3:cb:f1:12:71:5b:e7: 73:79:53:06:f5:2e:a0:54:62:26:8f:1e:b1:f9:2c: 0b:f9:b1:61:e6:35:15:65:5e:6f:d8:ac:e4:33:f7: c7:d9:93:cb:88:ba:65:f4:c7:46:6c:79:c9:da:0d: 13:c6:19:82:dc:ed:f1:2e:86:b0:63:50:f1:cc:28: bb:06:5a:80:63:41:95:59:92:90:be:6b:d1:cf:dc: b9:b5:f3:41:65:ea:bd:71:23:42:42:8e:eb:28:8d: a1:de:9e:89:59:cc:f7:4e:a9:8c:58:39:bc:a2:e6: 78:87:37:7a:77:ba:47:a4:54:6c:8d:22:d7:7d:9a: 23:1d:21:65:cc:b3:a2:ec:1f:00:a2:74:4c:86:f6: 11:b5:58:d8:16:ae:df:8f:32:ce:58:c5:ab:53:25: f9:a2:82:ec:3b:2e:7d:79:12:5a:cd:d1:ef:37:a4: a5:be:fb:11:9c:35:6d:d1:2f:64:c6:f5:ba:ce:d7: c9:ad:66:02:0e:a9:a8:fc:2e:8c:d7:65:a8:00:7d: 81:8a:f3:ff:95:15:33:ba:61:3b:c0:56:3d:68:2b: 42:42:9f:1a:a1:0a:68:3a:69:d6:1d:43:ec:4c:c2: f9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D6:71:E8:76:A9:F3:39:4D:74:1F:16:3C:27:23:6D:C5:AD:57:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2c9a79e-a717-358e-b244-23fa4f013c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:31:14:b9:cb:d6:0c:b4:64:62:a8:5c:9e:11:52:16:33:41: 65:3f:9c:02:ca:db:47:55:07:2f:17:d4:fc:4f:55:8e:83:23: 80:d9:7f:27:f2:d8:5d:81:f4:c2:68:cd:88:bf:a3:0a:42:ce: 96:3f:d1:ce:b9:db:ba:18:67:0f:d0:82:c6:1c:38:50:47:02: e8:c3:5a:03:77:68:b5:bb:f6:45:64:89:34:0d:51:3b:bd:e5: b6:07:e2:42:d5:ea:e4:a1:99:35:9e:40:d0:84:77:a8:9c:7a: 17:bd:39:29:35:ef:78:cc:8e:e0:85:45:93:01:ff:94:b3:41: a0:d6:50:f6:98:da:21:0e:92:07:b9:c2:c5:07:d7:b9:e2:f9: c8:fc:99:09:e7:a8:22:c5:04:de:0b:61:af:0f:fe:45:ee:80: cb:67:c0:9c:fd:1a:c4:5b:1c:78:c9:ff:a6:29:e8:62:96:cc: 5e:cf:e4:b3:f9:d0:49:0d:09:96:0c:c0:40:9e:2e:09:7c:60: 7c:c5:f5:0d:6b:2f:42:05:ba:c1:b9:f7:22:60:55:78:91:12: 99:c6:4f:65:7e:61:de:c6:ac:37:e6:01:ef:91:a3:4d:8b:91: ad:e1:bc:b1:42:19:be:6d:30:6b:4e:13:85:64:6f:02:fd:db: ba:9d:81:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrspl9yTprr1f4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZmNzViZmYtOWE1OS00Yzg3LWE2NGUtNmU1NTU4MGIwNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5TIxBSoRCz2261IuPHUe0qr/49NStPL8RJx W+dzeVMG9S6gVGImjx6x+SwL+bFh5jUVZV5v2KzkM/fH2ZPLiLpl9MdGbHnJ2g0T xhmC3O3xLoawY1DxzCi7BlqAY0GVWZKQvmvRz9y5tfNBZeq9cSNCQo7rKI2h3p6J Wcz3TqmMWDm8ouZ4hzd6d7pHpFRsjSLXfZojHSFlzLOi7B8AonRMhvYRtVjYFq7f jzLOWMWrUyX5ooLsOy59eRJazdHvN6SlvvsRnDVt0S9kxvW6ztfJrWYCDqmo/C6M 12WoAH2BivP/lRUzumE7wFY9aCtCQp8aoQpoOmnWHUPsTML5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjWceh2qfM5TXQfFjwnI23FrVdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJjOWE3OWUtYTcxNy0z NThlLWIyNDQtMjNmYTRmMDEzYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR3OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYxFLnL1gy0ZGKoXJ4RUhYzQWU/nALK20dVBy8X1PxPVY6DI4DZfyfy 2F2B9MJozYi/owpCzpY/0c6527oYZw/QgsYcOFBHAujDWgN3aLW79kVkiTQNUTu9 5bYH4kLV6uShmTWeQNCEd6icehe9OSk173jMjuCFRZMB/5SzQaDWUPaY2iEOkge5 wsUH17ni+cj8mQnnqCLFBN4LYa8P/kXugMtnwJz9GsRbHHjJ/6Yp6GKWzF7P5LP5 0EkNCZYMwECeLgl8YHzF9Q1rL0IFusG59yJgVXiREpnGT2V+Yd7GrDfmAe+Ro02L ka3hvLFCGb5tMGtOE4VkbwL927qdgSo= -----END CERTIFICATE-----Generated at Sun Apr 6 20:39:28 2025 by rpki-client