$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/deeafbc1-46e8-3bc2-9113-c573041ce2c1.roa File: deeafbc1-46e8-3bc2-9113-c573041ce2c1.roa (raw, json) Hash identifier: 22f1felBLFyACIKz/4fW5AGzyiYF1CslC9ACCpIWJCY= Subject key identifier: 09:E2:3D:DB:82:92:E8:84:90:93:47:F1:D7:EB:1F:B4:07:96:B3:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF0AF50729CD2DF0664D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/deeafbc1-46e8-3bc2-9113-c573041ce2c1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 73.29.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:0a:f5:07:29:cd:2d:f0:66:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b8b694ff-21e4-4f8e-8e6d-8446464545a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:b5:8c:b7:6f:64:47:62:a4:f9:e5:03:60: 7e:f1:0f:6c:fb:41:85:86:79:76:ce:9a:e0:a7:81: ee:4e:d5:de:42:4e:77:ad:8d:7f:5b:d8:11:02:84: 38:ca:02:54:9b:db:07:4e:63:4b:74:39:85:a5:54: cd:19:e4:c1:f4:b4:21:e6:16:5c:0b:72:67:c9:63: 68:cc:ac:7a:45:72:d3:cd:73:c0:e2:ec:d3:f2:40: b3:fb:07:94:41:a1:66:9e:50:a9:ba:36:f6:67:72: 4e:62:ea:9f:5f:53:e2:3b:67:50:75:d5:62:31:9b: 42:d7:42:78:f5:d6:7f:a7:cb:31:6f:4d:1b:bf:50: 44:fb:3c:8f:bf:b3:72:85:35:b1:38:ad:c7:88:79: d4:ed:0b:3b:2b:6a:3d:3a:ac:9a:d9:b1:2f:f0:8f: 6d:c3:48:b8:05:51:a2:76:fb:b2:43:36:af:37:25: 2d:ba:65:8a:4d:ce:81:5d:fe:db:b3:6d:e4:b6:3f: 8d:8e:14:88:d0:ad:e4:bf:32:d8:f2:28:7e:21:01: cd:d2:4c:84:59:c2:53:be:c0:79:7c:1e:b5:bd:71: 35:90:28:9c:6e:ad:da:22:7c:08:a4:87:2c:f5:93: 64:1c:fc:0c:f0:9e:aa:d4:39:c5:0d:17:1e:9a:28: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E2:3D:DB:82:92:E8:84:90:93:47:F1:D7:EB:1F:B4:07:96:B3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/deeafbc1-46e8-3bc2-9113-c573041ce2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b2:93:0a:03:79:13:5a:66:21:14:38:52:dd:06:46:e6:ce: 29:3b:af:03:a6:1f:df:a0:b6:ab:e7:52:c5:59:d1:87:1e:a7: 2a:6c:f5:03:0e:17:df:ce:7c:95:6b:9f:75:59:36:62:2c:9a: 63:ce:48:a8:7e:aa:54:71:a5:1e:56:11:d3:9b:7b:59:7a:5a: 6a:67:84:e5:c9:f2:fd:e5:3d:0a:51:ae:35:f3:81:11:ee:81: 11:69:b4:55:ce:e7:7c:b5:d2:8f:b4:7c:c8:1e:77:b7:63:e6: 25:2e:37:97:00:27:c2:1d:85:9e:be:71:e6:fa:4a:a9:20:7f: 6b:69:4f:96:c7:7f:b2:d9:4e:da:48:c4:8d:5e:88:e7:9b:6b: fa:f9:69:d6:4c:39:a4:fd:61:87:44:74:52:64:d4:c2:98:17: 55:29:d0:3a:98:fc:6d:fe:ee:e9:46:d8:59:8a:c2:df:35:7c: f1:f4:c0:9f:d0:a4:1a:02:2f:78:2d:ca:3d:3d:64:50:4a:88: f2:78:83:77:53:bf:4b:0e:ed:f4:7f:a0:85:4c:d1:6e:41:ed: 25:ad:2d:ab:dc:6e:25:51:49:a6:20:68:ae:de:ed:dc:ab:ac: 8d:7a:11:0a:91:31:07:34:96:87:39:ad:9e:fb:3a:98:0c:cd: 04:5b:77:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrwr1BynNLfBmTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjhiNjk0ZmYtMjFlNC00ZjhlLThlNmQtODQ0NjQ2NDU0NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfi1jLdvZEdipPnlA2B+8Q9s+0GFhnl2zprg p4HuTtXeQk53rY1/W9gRAoQ4ygJUm9sHTmNLdDmFpVTNGeTB9LQh5hZcC3JnyWNo zKx6RXLTzXPA4uzT8kCz+weUQaFmnlCpujb2Z3JOYuqfX1PiO2dQddViMZtC10J4 9dZ/p8sxb00bv1BE+zyPv7NyhTWxOK3HiHnU7Qs7K2o9Oqya2bEv8I9tw0i4BVGi dvuyQzavNyUtumWKTc6BXf7bs23ktj+NjhSI0K3kvzLY8ih+IQHN0kyEWcJTvsB5 fB61vXE1kCicbq3aInwIpIcs9ZNkHPwM8J6q1DnFDRcemigLzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAniPduCkuiEkJNH8dfrH7QHlrMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGVlYWZiYzEtNDZlOC0z YmMyLTkxMTMtYzU3MzA0MWNlMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSR1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmykwoDeRNaZiEUOFLdBkbmzik7rwOmH9+gtqvnUsVZ0Ycepyps9QMO F9/OfJVrn3VZNmIsmmPOSKh+qlRxpR5WEdObe1l6WmpnhOXJ8v3lPQpRrjXzgRHu gRFptFXO53y10o+0fMged7dj5iUuN5cAJ8IdhZ6+ceb6Sqkgf2tpT5bHf7LZTtpI xI1eiOeba/r5adZMOaT9YYdEdFJk1MKYF1Up0DqY/G3+7ulG2FmKwt81fPH0wJ/Q pBoCL3gtyj09ZFBKiPJ4g3dTv0sO7fR/oIVM0W5B7SWtLavcbiVRSaYgaK7e7dyr rI16EQqRMQc0loc5rZ77OpgMzQRbdxA= -----END CERTIFICATE-----Generated at Sun Apr 6 20:39:35 2025 by rpki-client