$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa File: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (raw, json) Hash identifier: cN8R5qC4NlR5uWvhUCzKpCYleWok7iYO4MSTCkC8hSo= Subject key identifier: CE:CA:F2:99:83:EA:47:0B:F5:67:CE:E6:B2:13:41:A9:63:A5:27:4A Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584902EC23D94B729490ABE53100 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 36329 IP address blocks: 64.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:23:d9:4b:72:94:90:ab:e5:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=ad36bf4f-1dfd-4a40-990e-5384ce7c2f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:2f:7e:e5:1e:0e:5e:3c:2d:48:c4:b5:9b: 0d:14:50:0a:d4:c1:95:8e:3b:c4:99:5a:6e:8b:70: 0f:2c:b2:cb:cc:06:2d:28:a8:4b:f8:a0:46:33:cb: 6c:ea:b3:b6:f1:f2:84:78:4c:b7:89:5c:74:60:e8: bc:24:16:d6:66:a7:ab:f3:8b:a2:53:5c:b4:99:1a: 8b:83:8d:5c:eb:fb:11:49:d4:e0:6e:2b:f9:23:11: a3:bf:6d:5b:3c:42:d5:28:ba:a0:d7:57:ca:36:36: 86:f0:0f:0f:4c:39:1a:1d:eb:21:72:db:82:2b:4f: fd:b5:25:53:a6:ce:6c:f4:b0:6f:c2:d4:94:85:89: 0f:cc:79:e4:b5:7a:01:e6:72:c1:3d:57:b9:52:4b: 23:83:cd:58:69:97:29:46:c4:31:a4:ce:2f:3b:82: c5:e8:96:dc:b7:a1:34:36:ae:76:b9:ba:32:50:7e: 81:a0:97:12:15:4c:80:60:1c:b3:18:83:f3:04:92: 30:ce:3e:17:6c:41:e7:61:28:0e:46:ed:4a:29:35: 93:e7:48:a5:14:94:1b:fa:96:be:a8:05:2e:b5:44: 6b:11:54:a0:1a:98:be:e4:0a:5c:35:7b:fc:26:fb: af:3c:ed:aa:96:55:e3:5b:56:8f:d7:b4:80:40:0d: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:F2:99:83:EA:47:0B:F5:67:CE:E6:B2:13:41:A9:63:A5:27:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:47:95:41:88:52:dd:14:50:3f:1d:b0:28:30:8c:01:56:9c: 69:b0:4b:e1:b3:b4:20:31:40:6e:7f:4c:bc:98:77:99:e7:52: 95:fb:c6:c2:c8:70:40:99:c3:7f:d9:d9:16:48:c2:ad:1e:06: e9:0b:f4:c3:d2:c8:ef:b9:53:29:19:27:66:65:80:8e:25:50: 92:7e:67:6c:8b:17:71:52:8c:4b:d7:79:4d:d4:ae:9b:cb:a1: 87:ca:ce:94:44:d9:d6:98:ad:82:e8:8b:bd:38:9d:6a:68:35: ec:a8:9e:c8:3f:d1:80:cc:92:39:65:56:dc:fa:65:7f:68:64: 95:31:6f:e1:18:21:5b:9b:74:7a:df:9a:4e:a5:b6:44:b4:ab: 80:e6:83:1d:5e:80:ae:9c:ca:0f:dd:fc:8e:f2:b5:e9:f0:6c: cb:e4:5c:a9:17:31:bc:77:6c:ac:67:9c:ef:05:8e:22:06:59: 2b:a1:db:9d:77:7c:5a:9b:5e:3e:6e:7e:b9:e0:04:3f:fc:55: 1c:5e:29:a0:b4:f2:c1:1b:4c:56:f3:62:04:b2:23:62:0b:b1: a1:69:2e:ed:aa:eb:66:b9:77:63:8f:8b:dc:23:ab:82:58:6b: 8e:7e:8a:e9:27:11:ec:e2:ef:10:60:15:83:52:cd:6c:24:8e: 20:47:6d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CPZS3KUkKvlMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YWQzNmJmNGYtMWRmZC00YTQwLTk5MGUtNTM4NGNlN2MyZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2covfuUeDl48LUjEtZsNFFAK1MGVjjvEmVpu i3APLLLLzAYtKKhL+KBGM8ts6rO28fKEeEy3iVx0YOi8JBbWZqer84uiU1y0mRqL g41c6/sRSdTgbiv5IxGjv21bPELVKLqg11fKNjaG8A8PTDkaHeshctuCK0/9tSVT ps5s9LBvwtSUhYkPzHnktXoB5nLBPVe5Uksjg81YaZcpRsQxpM4vO4LF6Jbct6E0 Nq52uboyUH6BoJcSFUyAYByzGIPzBJIwzj4XbEHnYSgORu1KKTWT50ilFJQb+pa+ qAUutURrEVSgGpi+5ApcNXv8JvuvPO2qllXjW1aP17SAQA13NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7K8pmD6kcL9WfO5rITQaljpSdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMjBlMjE1MjMtNzg2Ny0z ZTZkLWJkMmEtZjRiYTU1NThjZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5HlUGIUt0UUD8dsCgwjAFWnGmwS+GztCAxQG5/TLyYd5nnUpX7xsLI cECZw3/Z2RZIwq0eBukL9MPSyO+5UykZJ2ZlgI4lUJJ+Z2yLF3FSjEvXeU3UrpvL oYfKzpRE2daYrYLoi704nWpoNeyonsg/0YDMkjllVtz6ZX9oZJUxb+EYIVubdHrf mk6ltkS0q4Dmgx1egK6cyg/d/I7ytenwbMvkXKkXMbx3bKxnnO8FjiIGWSuh2513 fFqbXj5ufrngBD/8VRxeKaC08sEbTFbzYgSyI2ILsaFpLu2q62a5d2OPi9wjq4JY a45+iuknEezi7xBgFYNSzWwkjiBHbWc= -----END CERTIFICATE-----Generated at Sat Apr 12 13:04:32 2025 by rpki-client