$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa File: 47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa (raw, json) Hash identifier: xw4A/S8n0nfqdz00q1vKQRq0/BSff4KF6mN713r/Qbw= Subject key identifier: 06:59:79:FD:FA:02:29:A9:FC:D4:D6:5C:C3:65:2F:90:48:AC:F7:D1 Certificate issuer: /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Certificate serial: 010D0C9F4328584908817370DBC0CCD3D39E9353 Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 14397 IP address blocks: 65.49.128.0/24 maxlen: 24 65.49.129.0/24 maxlen: 24 104.251.115.0/24 maxlen: 24 104.251.117.0/24 maxlen: 24 104.251.118.0/24 maxlen: 24 104.251.121.0/24 maxlen: 24 104.251.124.0/22 maxlen: 24 104.251.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:73:70:db:c0:cc:d3:d3:9e:93:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=0dd999e2-36ff-4a26-bb9e-f01ef6517cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:b7:d2:01:5c:68:45:32:2b:98:84:5a:07: 20:fa:7e:31:fe:08:82:8f:d6:bf:7f:29:66:4c:a4: fe:20:63:47:81:57:2e:df:b6:e7:47:9c:d8:02:15: ce:4a:d7:be:81:76:c1:67:2c:08:5f:d9:ee:1f:67: d2:62:59:5a:06:20:f0:29:84:d8:3b:aa:26:1d:9b: c2:33:32:d6:0e:f3:a1:1f:86:af:28:d9:aa:2a:ec: b7:68:e9:f0:77:57:77:67:d6:ce:ec:12:05:91:72: 84:29:89:54:0a:7a:dd:a5:56:55:a0:2c:10:0e:95: 94:b0:52:b4:a9:ee:54:4c:7d:ce:e1:5a:03:5c:cf: c9:51:31:cf:c4:f3:d1:a8:ee:c4:a7:06:c5:7e:f9: 91:df:da:a4:04:7c:4c:d5:e6:df:94:fd:87:62:54: e9:72:f5:7f:56:d6:87:6f:0d:4a:3f:49:b9:d0:a0: 0e:2f:27:f7:e1:58:0d:f4:6f:9b:39:86:96:d6:7d: 59:14:22:50:43:56:92:e1:3c:6f:a5:42:a3:82:83: 76:69:a4:2e:86:bb:35:17:cd:3a:8d:df:90:57:40: 7a:9b:19:f8:f6:53:ee:9e:19:c0:5d:fc:6e:ac:7e: b2:ed:5c:ff:c9:b7:4d:38:9b:0f:fe:df:8d:d0:0f: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:59:79:FD:FA:02:29:A9:FC:D4:D6:5C:C3:65:2F:90:48:AC:F7:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl X509v3 Authority Key Identifier: keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer sbgp-ipAddrBlock: critical IPv4: 65.49.128.0/23 104.251.115.0/24 104.251.117.0-104.251.118.255 104.251.121.0/24 104.251.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7b:4b:e8:9a:47:3f:ff:de:f7:c3:ab:3a:33:2b:32:96:29: 38:86:19:7e:34:d6:61:5f:ab:ef:9e:20:71:b2:99:69:54:75: 18:b5:e3:2d:f5:c6:af:01:26:4e:43:8e:d9:f9:7f:0b:8c:29: fa:4f:98:b1:28:c2:29:3c:9c:5e:b4:8e:ad:d9:e8:e2:b3:d9: 3c:a6:75:0b:4c:d0:a4:9b:03:0f:a8:7f:92:55:54:cb:51:37: e2:82:f5:a9:b0:f6:9f:70:db:01:2b:68:1c:c9:d2:09:83:a2: bd:b9:e6:8c:d0:60:d5:ca:75:4a:2f:2f:40:0e:fa:f7:bf:7f: d2:fe:35:28:67:fe:75:98:32:d1:6a:c6:0a:f6:24:99:c8:e0: 90:92:d2:ed:18:48:0b:2f:be:38:7c:6c:ab:2f:92:2e:b5:ab: f1:58:40:cd:6e:4f:26:61:74:56:19:c7:78:ad:a2:7e:a3:b5: f7:4e:c8:22:ac:1a:b7:a2:fb:6a:93:bb:3e:a9:02:29:ed:cc: 69:2f:54:07:2e:88:e9:ef:05:1b:0b:46:55:c7:f0:2f:dd:1a: 7d:15:03:05:6c:d6:a8:09:7e:80:f4:a0:50:1e:05:df:a7:72: c5:58:0f:8c:ad:23:bf:fb:53:2e:0e:66:a0:e0:e4:16:ae:24: fe:42:cc:52 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEkIgXNw28DM09Oek1MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1 NWVmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MGRkOTk5ZTItMzZmZi00YTI2LWJiOWUtZjAxZWY2NTE3Y2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknS30gFcaEUyK5iEWgcg+n4x/giCj9a/fylm TKT+IGNHgVcu37bnR5zYAhXOSte+gXbBZywIX9nuH2fSYllaBiDwKYTYO6omHZvC MzLWDvOhH4avKNmqKuy3aOnwd1d3Z9bO7BIFkXKEKYlUCnrdpVZVoCwQDpWUsFK0 qe5UTH3O4VoDXM/JUTHPxPPRqO7EpwbFfvmR39qkBHxM1ebflP2HYlTpcvV/VtaH bw1KP0m50KAOLyf34VgN9G+bOYaW1n1ZFCJQQ1aS4TxvpUKjgoN2aaQuhrs1F806 jd+QV0B6mxn49lPunhnAXfxurH6y7Vz/ybdNOJsP/t+N0A9LGQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFAZZef36Aimp/NTWXMNlL5BIrPfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83M2Qy ZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvNDdiNjIyYTItZDc1MC0z YzczLTgxOWQtZjZiY2RjMTJjMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzNkMmRiYWUtM2YxYS00ZDllLTll MDEtZjdlZjI1MGY1NWVmLzczZDJkYmFlLTNmMWEtNGQ5ZS05ZTAxLWY3ZWYyNTBm NTVlZi5jcmwwHwYDVR0jBBgwFoAUBPEO3GDPAH5AMl53FZnXvgXyBg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2Vm MjUwZjU1ZWYuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBQTGAAwQA aPtzMAwDBABo+3UDBABo+3YDBABo+3kDBAJo+3wwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARXtL6JpHP//e 98OrOjMrMpYpOIYZfjTWYV+r754gcbKZaVR1GLXjLfXGrwEmTkOO2fl/C4wp+k+Y sSjCKTycXrSOrdno4rPZPKZ1C0zQpJsDD6h/klVUy1E34oL1qbD2n3DbAStoHMnS CYOivbnmjNBg1cp1Si8vQA76979/0v41KGf+dZgy0WrGCvYkmcjgkJLS7RhICy++ OHxsqy+SLrWr8VhAzW5PJmF0VhnHeK2ifqO1907IIqwat6L7apO7PqkCKe3MaS9U By6I6e8FGwtGVcfwL90afRUDBWzWqAl+gPSgUB4F36dyxVgPjK0jv/tTLg5moODk Fq4k/kLMUg== -----END CERTIFICATE-----Generated at Sun Apr 20 12:33:36 2025 by rpki-client