$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa File: 64fdcd71-4528-3a43-9865-7e6dc9f08599.roa (raw, json) Hash identifier: /4575ZmpOzaEsl6QxwMSeIZmEuvcWJiM93tSnDWd0w4= Subject key identifier: 48:1A:EC:CC:FD:EF:FB:28:38:22:E7:0D:7B:67:F2:A6:A8:33:60:29 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F4328584A2EEABF4CA5878037F21782C0 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 398465 IP address blocks: 95.143.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:bf:4c:a5:87:80:37:f2:17:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=b02de830-a959-43e7-b6bc-5e86f94d5139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:85:ea:8d:04:d7:42:8b:da:f4:79:96:cf: 68:1c:bd:d2:c4:60:42:26:da:bb:21:c0:b2:b0:0e: 73:a7:e5:e9:da:42:b4:29:fc:7e:66:98:ed:87:c4: df:1b:7a:21:6b:c8:19:fd:2a:1f:b0:d8:f6:06:d1: 3e:a6:3c:3d:3f:0c:b7:f9:08:93:00:f5:72:08:54: 01:5e:7b:c4:c1:9f:29:be:f5:cd:e1:cf:69:51:49: 01:f2:f8:0d:0f:8c:de:fc:10:a4:3e:bb:b6:7b:2a: 32:ce:f8:c9:19:bd:9e:3d:b2:55:d8:d5:76:cd:9e: f6:dd:24:d4:a8:a8:a3:e5:c1:54:7c:f0:a7:b0:60: 6e:50:84:8d:c1:24:76:d1:b3:0b:da:97:25:30:c1: 7b:da:87:93:60:39:e1:92:cc:27:b5:1f:51:ab:ca: 6e:7d:40:dc:23:1e:4b:68:3e:d4:99:24:45:22:9a: 3f:a4:7b:76:6b:00:5d:a9:ea:f1:de:cc:ea:8e:c8: 38:90:a8:85:23:76:67:fe:eb:ba:c0:30:1c:38:24: f7:72:7a:68:9e:26:75:41:2e:73:ae:ea:db:6b:c9: 7a:71:4a:d8:cf:fd:fc:c3:8c:f3:c5:ca:fa:87:63: 9c:af:ec:b0:6e:0a:81:5a:48:30:0d:70:1e:b2:90: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1A:EC:CC:FD:EF:FB:28:38:22:E7:0D:7B:67:F2:A6:A8:33:60:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 95.143.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c6:d4:ab:39:60:b1:17:27:df:7f:d7:7c:64:7e:10:ff:4f: 0f:6e:1a:22:70:af:32:75:02:cd:0e:80:fe:c3:bf:ba:61:e5: f9:96:4a:23:e0:32:4b:96:b8:86:a7:7d:6b:ba:f2:4e:3f:83: cd:32:f4:db:35:f1:f1:ea:82:b9:a2:8c:39:c3:9b:49:6e:60: 0a:3c:35:e6:af:d4:d9:8a:0f:73:1f:fe:c8:a4:30:b7:d6:a8: f0:16:11:da:ec:c9:5c:31:b3:5d:a4:eb:11:33:a9:de:2f:95: 9c:0f:7c:e2:24:de:fe:5b:8f:0d:79:c9:86:c3:ef:a5:29:cd: ca:a7:66:6b:71:a6:5c:08:d3:51:38:a3:10:9f:c7:61:71:01: 7d:d2:c6:a0:6d:c5:70:b1:9a:fd:27:66:c2:3f:4e:b9:82:07: c0:19:64:d7:f4:65:33:01:e1:ba:50:02:ba:d0:a2:e2:09:5e: 42:d7:e9:f7:6b:62:58:d9:1c:bf:5f:f5:90:7f:98:45:5e:2c: 25:f0:c9:5d:65:06:06:89:d1:af:37:85:22:0b:1e:77:85:7d: 06:91:b9:57:9e:b0:8d:dd:7f:4a:4e:8d:bd:a3:70:3b:64:6a: 0c:c2:a2:07:25:c1:db:eb:37:42:e1:88:4a:c5:0b:8c:79:20: 74:ef:67:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6r9MpYeAN/IXgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk YjAyZGU4MzAtYTk1OS00M2U3LWI2YmMtNWU4NmY5NGQ1MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTWF6o0E10KL2vR5ls9oHL3SxGBCJtq7IcCy sA5zp+Xp2kK0Kfx+Zpjth8TfG3oha8gZ/SofsNj2BtE+pjw9Pwy3+QiTAPVyCFQB XnvEwZ8pvvXN4c9pUUkB8vgND4ze/BCkPru2eyoyzvjJGb2ePbJV2NV2zZ723STU qKij5cFUfPCnsGBuUISNwSR20bML2pclMMF72oeTYDnhkswntR9Rq8pufUDcIx5L aD7UmSRFIpo/pHt2awBdqerx3szqjsg4kKiFI3Zn/uu6wDAcOCT3cnponiZ1QS5z rurba8l6cUrYz/38w4zzxcr6h2Ocr+ywbgqBWkgwDXAespA+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEga7Mz97/soOCLnDXtn8qaoM2ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvNjRmZGNkNzEtNDUyOC0z YTQzLTk4NjUtN2U2ZGM5ZjA4NTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEX48gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbG1Ks5YLEXJ99/13xkfhD/Tw9uGiJwrzJ1As0OgP7Dv7ph5fmWSiPg MkuWuIanfWu68k4/g80y9Ns18fHqgrmijDnDm0luYAo8Neav1NmKD3Mf/sikMLfW qPAWEdrsyVwxs12k6xEzqd4vlZwPfOIk3v5bjw15yYbD76UpzcqnZmtxplwI01E4 oxCfx2FxAX3SxqBtxXCxmv0nZsI/TrmCB8AZZNf0ZTMB4bpQArrQouIJXkLX6fdr YljZHL9f9ZB/mEVeLCXwyV1lBgaJ0a83hSILHneFfQaRuVeesI3df0pOjb2jcDtk agzCogclwdvrN0LhiErFC4x5IHTvZ/Q= -----END CERTIFICATE-----Generated at Sun Jun 15 07:01:30 2025 by rpki-client