$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa File: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (raw, json) Hash identifier: eE+T381MdR/qQQc8thyoh8V4NGPTtTr8rmOB92XbOok= Subject key identifier: 9F:73:64:5C:87:5C:86:88:5D:47:DE:02:25:92:05:C3:E3:A2:5B:B0 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F432858492183FDE28A037E5BE91BF780 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 19905 IP address blocks: 155.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:fd:e2:8a:03:7e:5b:e9:1b:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ad2df794-f3d6-4883-98ac-fd1be5d5fe72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:ee:da:21:84:15:80:34:32:05:db:4c:de: 1b:c4:75:e8:0e:ee:60:43:18:30:7d:72:17:56:dd: f2:3a:c0:67:80:74:58:ea:1f:1f:24:8b:43:35:b1: 0d:da:f5:26:87:db:00:9c:49:5d:f8:53:bb:a5:37: b9:ff:0c:04:8d:d6:8f:af:f5:c9:79:64:63:36:47: 9e:3d:9f:ca:bd:22:f5:d0:b4:84:25:38:85:41:bc: 33:31:11:ff:08:c6:97:5e:1f:29:be:2b:b4:55:b2: 5d:19:78:b1:c8:ce:cc:95:f8:04:13:5a:6a:4d:a5: 4c:de:8b:b1:dd:fa:71:39:60:4b:71:8d:5a:28:9e: 60:74:84:eb:d5:fc:dc:3f:5c:7c:a5:0e:b3:85:5f: b0:5d:a8:a1:93:fc:c7:64:b5:bb:8e:b1:7d:5e:48: 1a:a5:63:d9:4b:14:09:1d:c2:05:d7:fe:b6:58:b6: c5:52:62:cc:ea:60:0c:2e:e1:b2:75:40:4f:b4:c7: 00:1a:4c:ed:0b:60:3c:ab:8d:35:28:a4:56:48:5c: 80:33:af:11:7f:3d:9f:f2:c5:dc:02:1c:eb:55:e7: 72:6b:b6:b7:0c:30:f5:c5:c4:5d:1a:2c:be:cc:75: 02:3b:ba:5a:c9:44:22:c2:7e:41:05:c0:a0:fc:e3: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:73:64:5C:87:5C:86:88:5D:47:DE:02:25:92:05:C3:E3:A2:5B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 155.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:56:f6:87:1c:d9:88:06:78:8b:22:6f:7f:e0:b2:9e:b4:37: 15:17:87:a4:51:2e:f4:b0:22:06:8b:cd:36:a2:41:94:69:8e: ad:d7:65:b0:70:63:72:38:31:75:66:fe:8d:9a:ac:0c:a8:c3: fc:3f:43:5c:b3:e9:68:73:94:d3:fa:4a:fe:69:c5:65:3f:68: 6f:b1:6e:93:14:52:84:4d:60:99:e3:2a:5c:3b:5d:1d:03:03: 6e:91:e5:4e:f2:d9:79:70:c6:a7:f8:3b:d9:63:17:10:6c:2a: 3c:7d:89:60:6d:c7:5f:35:59:62:af:c0:69:58:56:b3:73:dd: ab:4b:47:f5:7d:69:6b:76:24:33:fd:a4:56:f2:5c:38:65:1a: cb:4c:33:0e:34:42:e4:ee:a8:38:9b:7f:35:94:53:3f:3f:cd: 72:bc:4b:ac:4d:41:9f:92:d1:89:3e:0a:15:e2:71:53:d4:69: d1:bd:67:09:81:7a:cb:84:3d:a0:5d:20:5d:87:6c:0c:e7:bb: ea:60:07:93:f4:7c:be:c3:d8:30:79:da:51:c6:6d:ad:5a:ab: 0d:11:31:ee:13:52:31:68:81:ef:80:2f:8c:f7:e0:cc:14:74: 88:4d:b1:1a:6c:ab:89:96:23:86:3d:49:41:ce:2e:25:2e:fd: 63:ca:c3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhg/3iigN+W+kb94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWQyZGY3OTQtZjNkNi00ODgzLTk4YWMtZmQxYmU1ZDVmZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7Tu2iGEFYA0MgXbTN4bxHXoDu5gQxgwfXIX Vt3yOsBngHRY6h8fJItDNbEN2vUmh9sAnEld+FO7pTe5/wwEjdaPr/XJeWRjNkee PZ/KvSL10LSEJTiFQbwzMRH/CMaXXh8pviu0VbJdGXixyM7MlfgEE1pqTaVM3oux 3fpxOWBLcY1aKJ5gdITr1fzcP1x8pQ6zhV+wXaihk/zHZLW7jrF9XkgapWPZSxQJ HcIF1/62WLbFUmLM6mAMLuGydUBPtMcAGkztC2A8q401KKRWSFyAM68Rfz2f8sXc AhzrVedya7a3DDD1xcRdGiy+zHUCO7payUQiwn5BBcCg/OMmawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9zZFyHXIaIXUfeAiWSBcPjoluwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNDIwMTdiOWMtN2VhNy0z ZjlhLTg2ODYtMDRkMDE5MDBmZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVW9occ2YgGeIsib3/gsp60NxUXh6RRLvSwIgaLzTaiQZRpjq3XZbBw Y3I4MXVm/o2arAyow/w/Q1yz6WhzlNP6Sv5pxWU/aG+xbpMUUoRNYJnjKlw7XR0D A26R5U7y2Xlwxqf4O9ljFxBsKjx9iWBtx181WWKvwGlYVrNz3atLR/V9aWt2JDP9 pFbyXDhlGstMMw40QuTuqDibfzWUUz8/zXK8S6xNQZ+S0Yk+ChXicVPUadG9ZwmB esuEPaBdIF2HbAznu+pgB5P0fL7D2DB52lHGba1aqw0RMe4TUjFoge+AL4z34MwU dIhNsRpsq4mWI4Y9SUHOLiUu/WPKw0A= -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:17 2025 by rpki-client