$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa File: 00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa (raw, json) Hash identifier: Isx/eLhNnJS0vMPiSTz9BAfq+CKJ18rCZwRkIIQRIRM= Subject key identifier: 6A:C2:70:C4:42:98:A8:98:D4:9C:64:27:92:C5:01:F7:BB:83:D5:FE Certificate issuer: /CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Certificate serial: 010D0C9F43285848F7C144CE6BCB3AA98F3A67C0 Authority key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 14325 IP address blocks: 69.64.96.0/20 maxlen: 24 209.25.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:44:ce:6b:cb:3a:a9:8f:3a:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=e957c9a6-278d-4f0a-af2f-286f97c7f80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:80:a5:02:d4:a1:d4:b8:4b:96:9d:29:e8: 4d:0f:02:7a:af:91:93:b1:18:85:16:09:1b:c5:1c: 00:1d:37:b2:53:a2:9b:57:f3:14:7a:15:89:a4:06: a0:bb:8e:e3:fb:fd:74:5b:b6:8a:56:82:e2:57:11: 29:75:f1:80:c9:90:6f:d5:2e:22:39:f5:b1:04:4f: 0b:21:61:e6:04:93:7a:8e:66:f4:68:7c:28:32:da: cd:9b:7b:d2:9e:5d:ab:b3:a2:0f:05:58:bc:b8:4e: b9:2b:79:8b:db:d5:e7:49:5d:84:e4:2b:fb:a2:c8: b5:90:7a:20:c4:c3:5b:10:4f:29:13:a9:52:a8:49: 07:4a:de:95:48:e7:57:a8:5e:6b:5d:6a:94:dc:50: b3:40:50:7e:e0:c7:22:b5:f6:ba:2b:4c:a3:eb:05: 94:70:fa:b2:2d:6c:14:02:75:b2:bd:66:54:99:55: 71:bb:a6:b6:7b:75:27:a5:c2:f0:b7:bf:1e:ee:bc: 6a:af:57:9f:0a:e1:84:78:ab:55:be:29:da:7c:a8: 50:ce:84:ef:6c:2c:ce:1c:79:04:6f:12:84:eb:c9: da:53:0b:9d:66:fe:f2:f1:d9:9d:4e:62:c6:82:fd: ba:01:45:63:73:88:bd:46:f0:3e:3d:15:23:33:49: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C2:70:C4:42:98:A8:98:D4:9C:64:27:92:C5:01:F7:BB:83:D5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl X509v3 Authority Key Identifier: keyid:2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer sbgp-ipAddrBlock: critical IPv4: 69.64.96.0/20 209.25.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6a:e3:90:a5:af:18:82:84:0b:44:4b:86:09:bc:ef:28:db: 41:f2:4f:78:66:74:b7:7a:cf:43:4a:e6:18:78:9a:fa:b3:b1: 78:c6:3f:f4:c4:0d:61:9f:f7:24:9b:3b:d5:e9:a6:dd:b7:d6: 9a:12:27:28:1a:9e:a4:b8:0b:c4:5b:3b:5d:bb:24:a9:54:57: 2c:40:ae:5d:e4:96:09:d1:75:65:65:dc:37:0d:64:1e:71:11: 04:37:39:a0:0f:42:47:6c:2a:98:ab:4a:6a:42:4b:33:c3:1a: ed:d1:b6:7b:8a:b9:c8:67:44:b7:84:1c:99:2a:18:8d:4b:4c: 48:a1:22:ca:cb:46:91:76:be:eb:ee:0c:69:b9:1b:45:10:54: 36:f4:39:1f:25:44:de:9d:a3:f5:a6:d9:78:79:bd:5b:64:f8: 94:41:95:f6:e8:3a:75:c7:73:0a:d4:27:01:3b:cf:ee:ac:2a: f7:13:6f:7f:54:08:bd:4d:14:2b:42:ff:02:77:82:69:6f:9d: 03:a0:2b:13:f4:05:2d:3c:29:50:5d:ea:34:c3:74:8e:1c:b7: 39:a0:3c:cc:aa:37:e4:07:55:67:fd:2e:51:d0:5d:82:ce:d4: 34:06:75:c7:9b:e5:16:d4:ae:a5:cd:81:ec:4b:f3:56:bb:03: aa:ba:3b:fe -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj3wUTOa8s6qY86Z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTViZjk1ZDUtMWM5Yi00Y2VhLTgxNDItY2MxYTQ2OTlj N2E2MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZTk1N2M5YTYtMjc4ZC00ZjBhLWFmMmYtMjg2Zjk3YzdmODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhGApQLUodS4S5adKehNDwJ6r5GTsRiFFgkb xRwAHTeyU6KbV/MUehWJpAagu47j+/10W7aKVoLiVxEpdfGAyZBv1S4iOfWxBE8L IWHmBJN6jmb0aHwoMtrNm3vSnl2rs6IPBVi8uE65K3mL29XnSV2E5Cv7osi1kHog xMNbEE8pE6lSqEkHSt6VSOdXqF5rXWqU3FCzQFB+4Mcitfa6K0yj6wWUcPqyLWwU AnWyvWZUmVVxu6a2e3UnpcLwt78e7rxqr1efCuGEeKtVvinafKhQzoTvbCzOHHkE bxKE68naUwudZv7y8dmdTmLGgv26AUVjc4i9RvA+PRUjM0kjRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGrCcMRCmKiY1JxkJ5LFAfe7g9X+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWJm OTVkNS0xYzliLTRjZWEtODE0Mi1jYzFhNDY5OWM3YTYvMDBmZDBlYzgtNTA0Yy0z ZGZjLWE1YTctYjNiYzIxYTZjMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTViZjk1ZDUtMWM5Yi00Y2VhLTgx NDItY2MxYTQ2OTljN2E2Lzk1YmY5NWQ1LTFjOWItNGNlYS04MTQyLWNjMWE0Njk5 YzdhNi5jcmwwHwYDVR0jBBgwFoAULR3aRmmC6fgPdb4FsB3W7oOsYpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWJmOTVkNS0xYzliLTRjZWEtODE0Mi1jYzFh NDY5OWM3YTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERUBgAwQC 0RnQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABtq45ClrxiChAtES4YJvO8o20HyT3hmdLd6z0NK5hh4mvqz sXjGP/TEDWGf9ySbO9Xppt231poSJyganqS4C8RbO127JKlUVyxArl3klgnRdWVl 3DcNZB5xEQQ3OaAPQkdsKpirSmpCSzPDGu3RtnuKuchnRLeEHJkqGI1LTEihIsrL RpF2vuvuDGm5G0UQVDb0OR8lRN6do/Wm2Xh5vVtk+JRBlfboOnXHcwrUJwE7z+6s KvcTb39UCL1NFCtC/wJ3gmlvnQOgKxP0BS08KVBd6jTDdI4ctzmgPMyqN+QHVWf9 LlHQXYLO1DQGdceb5RbUrqXNgexL81a7A6q6O/4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:02:19 2025 by rpki-client