$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa File: 64fdcd71-4528-3a43-9865-7e6dc9f08599.roa (raw, json) Hash identifier: QNKfKHQyMtsNkL9WO79vV7lUocL59N0FgpGtZPQcWXU= Subject key identifier: 95:72:C1:85:81:3E:3D:18:FE:89:A1:ED:0A:2A:2B:ED:EE:9B:46:7F Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F432858494F93EBE51B177639C5997B40 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 398465 IP address blocks: 95.143.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:eb:e5:1b:17:76:39:c5:99:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=3ccbdad7-eb18-4b45-868e-3fbfa06a0dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:21:ba:bb:c5:76:1e:4f:b1:ae:9c:92:e3: cb:85:78:44:ab:ff:bd:03:37:03:af:4f:8d:14:e0: cb:86:f0:8f:34:80:b7:c9:8b:13:ed:81:d5:59:85: 53:58:bf:23:08:d5:c4:a9:f5:15:09:29:e5:c4:e3: dd:4e:b3:10:a3:20:3b:35:c9:2f:bd:21:38:91:63: 88:92:e8:7e:89:d0:df:3d:39:0f:de:6b:d1:95:09: ac:15:01:3c:00:4c:84:fe:8c:76:96:a2:33:53:51: bf:33:cb:5e:42:e7:66:6e:58:22:79:69:2a:11:7a: 29:19:1b:67:60:f2:15:fb:ac:f5:b9:23:2c:2e:45: 9b:6c:6a:3b:0f:9c:28:b3:e8:ae:44:f4:53:cd:23: 0b:d0:a8:47:be:e6:d9:88:1e:2c:07:e0:31:c2:79: 1e:8c:c1:45:1a:d8:b4:c9:4b:fe:7d:c9:17:25:1a: 90:7a:28:e8:b8:84:b3:86:45:8c:1c:1f:19:2c:88: 3f:df:1e:7c:2f:d2:62:f6:f3:74:f2:74:1f:51:77: 94:bd:24:f6:24:94:73:72:66:25:5c:c3:84:e5:25: 1b:5e:60:2d:4b:1b:cd:cc:eb:8c:02:d2:d9:31:ad: 53:cf:60:62:88:3a:66:bb:96:fc:72:43:fc:1f:9a: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:C1:85:81:3E:3D:18:FE:89:A1:ED:0A:2A:2B:ED:EE:9B:46:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 95.143.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8a:d7:22:6f:d7:21:1b:de:16:cf:64:eb:ed:89:18:37:a8: 73:fb:c7:2d:54:6b:7a:bb:41:cc:cf:5d:df:13:c6:97:99:cb: f0:69:86:dc:95:c1:36:db:0c:24:39:22:f0:ce:00:95:43:f2: 62:14:9d:02:52:05:c3:35:8b:c5:79:34:65:7e:7f:35:0b:81: 35:21:db:2c:87:07:38:35:c9:9b:e5:35:97:2c:21:82:8a:e0: b7:2e:c0:d0:98:05:12:bf:2b:a6:45:b4:bb:6d:e7:e0:de:02: fd:ff:5d:60:bf:ef:18:57:4c:1a:44:4c:31:f4:54:42:e1:5d: dc:78:c4:9c:c7:3b:a8:34:2b:4d:59:07:24:87:e2:1c:77:dd: 92:7e:f4:e2:61:d0:a6:08:bc:f3:8b:9f:87:3f:aa:26:16:d0: 63:3e:ad:48:af:fe:43:14:f1:a1:74:15:e4:84:f9:de:8f:62: a0:1c:de:66:6a:ca:18:4e:a8:50:23:d4:4c:51:8a:15:13:42: 3f:4d:ef:f4:01:f4:a6:74:22:89:15:50:c8:b6:69:57:ea:ba: 52:eb:aa:9b:5f:8f:2a:c0:c3:48:78:81:66:c8:2e:55:f2:79: c1:90:87:b6:d6:e5:b0:a3:10:2e:b3:0a:dc:9c:74:3c:89:c1: 93:c8:6b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+vlGxd2OcWZe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk M2NjYmRhZDctZWIxOC00YjQ1LTg2OGUtM2ZiZmEwNmEwZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyAhurvFdh5Psa6ckuPLhXhEq/+9AzcDr0+N FODLhvCPNIC3yYsT7YHVWYVTWL8jCNXEqfUVCSnlxOPdTrMQoyA7NckvvSE4kWOI kuh+idDfPTkP3mvRlQmsFQE8AEyE/ox2lqIzU1G/M8teQudmblgieWkqEXopGRtn YPIV+6z1uSMsLkWbbGo7D5wos+iuRPRTzSML0KhHvubZiB4sB+AxwnkejMFFGti0 yUv+fckXJRqQeijouISzhkWMHB8ZLIg/3x58L9Ji9vN08nQfUXeUvST2JJRzcmYl XMOE5SUbXmAtSxvNzOuMAtLZMa1Tz2BiiDpmu5b8ckP8H5pA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVywYWBPj0Y/omh7QoqK+3um0Z/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvNjRmZGNkNzEtNDUyOC0z YTQzLTk4NjUtN2U2ZGM5ZjA4NTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEX48gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqK1yJv1yEb3hbPZOvtiRg3qHP7xy1Ua3q7QczPXd8TxpeZy/BphtyV wTbbDCQ5IvDOAJVD8mIUnQJSBcM1i8V5NGV+fzULgTUh2yyHBzg1yZvlNZcsIYKK 4LcuwNCYBRK/K6ZFtLtt5+DeAv3/XWC/7xhXTBpETDH0VELhXdx4xJzHO6g0K01Z BySH4hx33ZJ+9OJh0KYIvPOLn4c/qiYW0GM+rUiv/kMU8aF0FeSE+d6PYqAc3mZq yhhOqFAj1ExRihUTQj9N7/QB9KZ0IokVUMi2aVfqulLrqptfjyrAw0h4gWbILlXy ecGQh7bW5bCjEC6zCtycdDyJwZPIa84= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:12 2025 by rpki-client