$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/29e5e6d8-d05d-3a61-9747-04629f395756.roa File: 29e5e6d8-d05d-3a61-9747-04629f395756.roa (raw, json) Hash identifier: /NC0fSwFrbXh0stMC+ZonoqbLhi4qXGm36M64JgDjJo= Subject key identifier: CE:A9:B3:3E:97:D4:EF:35:E6:C3:88:1E:40:D0:A5:11:DB:3F:1E:C2 Certificate issuer: /CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f Certificate serial: 010D0C9F432858499AF4828729DDF147697888D0 Authority key identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/29e5e6d8-d05d-3a61-9747-04629f395756.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 400725 IP address blocks: 74.80.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:82:87:29:dd:f1:47:69:78:88:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fca91d8e-d3f4-461c-9456-ea7c5b6267a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4f:cb:97:95:b5:7e:5c:be:9c:73:3c:58:d7: d3:3b:d1:24:7f:64:96:30:15:9c:9e:d2:e8:23:6c: 4d:18:24:63:77:4b:8b:80:b7:9e:3a:bf:0f:ca:4d: 5f:ca:d4:4b:d2:39:31:b7:29:71:45:43:59:b8:2e: f9:51:27:2e:33:60:7a:cb:94:bf:8e:0e:0e:36:38: b5:a3:8a:2f:59:2c:ad:b4:25:e5:74:89:c4:41:b5: 07:ed:61:63:15:2c:a9:6e:20:b9:ff:10:f1:7f:25: 7a:94:a8:ed:6a:76:8f:c9:cf:8e:01:8d:7a:17:05: 9a:a1:ef:d8:26:22:36:a3:be:2a:7d:b3:e9:b5:18: b5:66:c3:27:a6:5e:8d:e9:d0:bd:6b:81:9f:05:83: e0:d8:6f:e8:5d:76:e0:cc:04:65:dc:38:36:4d:65: a0:98:bb:cf:9e:bd:83:4b:50:46:e6:e0:8c:4f:14: 7a:66:91:e1:8f:04:ba:f8:58:a5:f1:8d:ba:f3:18: d9:00:7c:30:5e:48:62:e0:7b:8a:18:0a:90:00:ac: 9d:f7:9a:fa:b9:b1:ba:71:2c:8b:0b:c6:4c:f3:29: 0e:a7:c3:6a:42:af:3f:73:ec:1a:50:04:84:5e:ce: b0:87:c7:a0:89:36:7b:bf:df:77:3a:7d:dd:ac:d5: ae:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A9:B3:3E:97:D4:EF:35:E6:C3:88:1E:40:D0:A5:11:DB:3F:1E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/29e5e6d8-d05d-3a61-9747-04629f395756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl X509v3 Authority Key Identifier: keyid:D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer sbgp-ipAddrBlock: critical IPv4: 74.80.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8d:bd:27:3c:e5:45:3e:cb:aa:41:75:55:fa:59:4d:de:71: e9:05:06:06:76:02:4e:76:e8:3d:ba:01:5c:12:ea:cc:c4:74: ba:09:7c:e1:3f:54:34:dd:24:92:bf:b9:f0:34:69:67:ea:f9: e7:a8:c4:0d:3c:8e:87:12:bf:95:f1:b5:a0:56:44:72:ee:8e: 84:a0:34:22:f9:b5:73:28:2d:a5:01:43:89:43:48:42:5a:34: 2a:56:4f:05:64:a7:d3:54:c2:98:59:41:7b:7f:9d:5b:44:f2: c9:14:dc:0f:50:23:af:e3:6e:87:3f:94:48:c2:4e:f1:4a:f5: 03:59:da:71:fe:d8:cb:79:9e:a3:4f:4f:5f:e1:08:04:ce:70: bc:aa:3a:c9:57:07:d7:07:43:c0:14:40:7f:9d:70:3c:63:06: 01:5f:25:26:bd:00:75:79:09:bd:31:00:96:d3:c9:a9:0b:90: 8f:ef:d0:5c:eb:3a:ec:60:c2:8c:85:bd:54:9b:74:38:24:99: 5d:03:0a:f6:3f:d2:76:ff:a4:1c:53:64:6d:e7:9d:12:53:18: 0e:69:96:b1:42:4c:0f:df:47:17:bf:c3:10:e6:c9:e0:03:48: 5a:64:98:58:4d:06:67:81:2a:b3:32:b9:d0:d8:55:cb:66:34: 4d:62:38:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IKHKd3xR2l4iNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIyYzVkNjctYmY1NS00NTUwLWJlNTktYzFhYTVlNjNm ZDJmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmNhOTFkOGUtZDNmNC00NjFjLTk0NTYtZWE3YzViNjI2N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE/Ll5W1fly+nHM8WNfTO9Ekf2SWMBWcntLo I2xNGCRjd0uLgLeeOr8Pyk1fytRL0jkxtylxRUNZuC75UScuM2B6y5S/jg4ONji1 o4ovWSyttCXldInEQbUH7WFjFSypbiC5/xDxfyV6lKjtanaPyc+OAY16FwWaoe/Y JiI2o74qfbPptRi1ZsMnpl6N6dC9a4GfBYPg2G/oXXbgzARl3Dg2TWWgmLvPnr2D S1BG5uCMTxR6ZpHhjwS6+Fil8Y268xjZAHwwXkhi4HuKGAqQAKyd95r6ubG6cSyL C8ZM8ykOp8NqQq8/c+waUASEXs6wh8egiTZ7v993On3drNWuHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6psz6X1O815sOIHkDQpRHbPx7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjJj NWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFhNWU2M2ZkMmYvMjllNWU2ZDgtZDA1ZC0z YTYxLTk3NDctMDQ2MjlmMzk1NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIyYzVkNjctYmY1NS00NTUwLWJl NTktYzFhYTVlNjNmZDJmLzZiMmM1ZDY3LWJmNTUtNDU1MC1iZTU5LWMxYWE1ZTYz ZmQyZi5jcmwwHwYDVR0jBBgwFoAU0SXgqnpruPPsxgmPReU+0LuatDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjJjNWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFh NWU2M2ZkMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGNvSc85UU+y6pBdVX6WU3ecekFBgZ2Ak526D26AVwS6szEdLoJfOE/ VDTdJJK/ufA0aWfq+eeoxA08jocSv5XxtaBWRHLujoSgNCL5tXMoLaUBQ4lDSEJa NCpWTwVkp9NUwphZQXt/nVtE8skU3A9QI6/jboc/lEjCTvFK9QNZ2nH+2Mt5nqNP T1/hCATOcLyqOslXB9cHQ8AUQH+dcDxjBgFfJSa9AHV5Cb0xAJbTyakLkI/v0Fzr OuxgwoyFvVSbdDgkmV0DCvY/0nb/pBxTZG3nnRJTGA5plrFCTA/fRxe/wxDmyeAD SFpkmFhNBmeBKrMyudDYVctmNE1iOME= -----END CERTIFICATE-----Generated at Sun Apr 27 17:53:31 2025 by rpki-client