$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa File: 650dd2fc-99af-35a3-81ca-030219a24999.roa (raw, json) Hash identifier: ZJiCv03s2scquqm44dosAwFmuMHEdUjcMiNY3LldOsc= Subject key identifier: DA:91:D8:DB:28:E7:D8:26:08:15:D2:04:3E:45:76:92:05:32:61:17 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584902EC29647CD8F6A332E85000 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 19905 IP address blocks: 64.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:29:64:7c:d8:f6:a3:32:e8:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=068deffa-fd76-4612-82cf-c11a0fd0ff8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:b6:86:e6:3f:c5:72:0b:a8:94:a7:d2:ba: c6:c2:97:28:0d:ce:6a:7e:09:56:d8:a7:6a:82:70: a0:b6:48:93:a1:11:08:7d:90:43:86:7a:be:21:fc: a1:33:95:e8:13:ac:f8:80:5d:dc:fe:de:30:f7:e9: ae:73:04:b7:c6:bb:10:3e:38:b2:a9:03:92:19:5b: 67:73:f2:d3:43:86:d4:69:53:36:e3:2b:6f:9b:bd: 55:ec:19:a5:ec:21:40:f8:32:0c:84:31:c9:e3:61: 45:12:17:37:ea:13:cd:9c:b8:d8:bd:b4:6f:82:94: 36:01:24:43:cc:e2:d4:65:86:42:c1:83:ac:c6:87: d2:26:07:10:eb:e2:2c:b7:2a:46:7d:6c:01:23:4e: 95:09:de:3e:75:dd:7d:4e:bf:6b:bd:78:a8:65:01: 6a:36:21:94:9c:ff:17:9b:f1:f6:f0:99:84:d0:1a: 14:05:a7:35:9c:ea:a4:68:65:b1:47:e4:2f:4b:b0: b4:cc:90:bc:3e:a3:2b:0d:91:fe:d5:61:ed:50:a4: 15:d7:b1:38:07:13:df:37:de:9d:b3:f4:bd:fb:fd: d0:3c:64:7c:62:a3:41:76:b2:a9:a0:28:52:f6:1f: 29:8d:a1:d8:19:6c:85:7b:60:22:72:a9:6b:27:c1: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:D8:DB:28:E7:D8:26:08:15:D2:04:3E:45:76:92:05:32:61:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f4:62:e9:92:6a:e5:8d:eb:03:87:8f:0b:9c:f5:ec:34:41: 1c:5e:32:8e:63:a8:3e:45:fb:99:ec:bf:8e:e5:70:8d:0d:1a: 34:b8:c6:74:ca:99:5e:db:53:78:46:30:90:a2:bf:f6:08:3d: 43:c7:f5:38:ff:48:2e:7b:05:e2:e6:0c:87:55:f9:d8:84:4a: cb:c6:fd:ce:25:7d:19:db:d5:84:2a:84:1b:4a:dc:e4:da:cd: 90:b8:02:78:20:89:2a:14:c4:77:38:08:e7:05:93:bf:2e:16: ae:d7:a3:6d:dd:c5:fc:34:bc:05:f7:bd:fc:b5:ab:9c:bd:ff: a7:bc:80:73:ec:3a:17:da:fd:16:3f:ff:62:02:72:b4:df:31: 17:ff:28:30:d9:5a:02:a0:a7:db:67:70:6e:0c:46:b9:4b:04: 5e:f9:3c:f8:92:01:4e:a3:bb:6f:e4:7a:02:fe:b1:c9:84:05: 34:83:01:94:7b:68:3b:59:7a:9f:0b:15:3a:fb:f7:ef:55:99: 38:2f:ed:32:fd:db:04:ed:03:a3:a5:dd:a9:85:d5:69:d8:cd: 0e:33:03:7c:3c:df:3d:17:c4:5f:fb:0c:07:12:bb:2a:39:90: 10:f7:4f:18:9e:be:70:d6:b9:56:22:0e:3c:cf:20:c1:ac:2c: ad:22:70:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7ClkfNj2ozLoUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MDY4ZGVmZmEtZmQ3Ni00NjEyLTgyY2YtYzExYTBmZDBmZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk322huY/xXILqJSn0rrGwpcoDc5qfglW2Kdq gnCgtkiToREIfZBDhnq+IfyhM5XoE6z4gF3c/t4w9+mucwS3xrsQPjiyqQOSGVtn c/LTQ4bUaVM24ytvm71V7Bml7CFA+DIMhDHJ42FFEhc36hPNnLjYvbRvgpQ2ASRD zOLUZYZCwYOsxofSJgcQ6+IstypGfWwBI06VCd4+dd19Tr9rvXioZQFqNiGUnP8X m/H28JmE0BoUBac1nOqkaGWxR+QvS7C0zJC8PqMrDZH+1WHtUKQV17E4BxPfN96d s/S9+/3QPGR8YqNBdrKpoChS9h8pjaHYGWyFe2AicqlrJ8HXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqR2Nso59gmCBXSBD5FdpIFMmEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNjUwZGQyZmMtOTlhZi0z NWEzLTgxY2EtMDMwMjE5YTI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz0YumSauWN6wOHjwuc9ew0QRxeMo5jqD5F+5nsv47lcI0NGjS4xnTK mV7bU3hGMJCiv/YIPUPH9Tj/SC57BeLmDIdV+diESsvG/c4lfRnb1YQqhBtK3OTa zZC4AnggiSoUxHc4COcFk78uFq7Xo23dxfw0vAX3vfy1q5y9/6e8gHPsOhfa/RY/ /2ICcrTfMRf/KDDZWgKgp9tncG4MRrlLBF75PPiSAU6ju2/kegL+scmEBTSDAZR7 aDtZep8LFTr79+9VmTgv7TL92wTtA6Ol3amF1WnYzQ4zA3w83z0XxF/7DAcSuyo5 kBD3TxievnDWuVYiDjzPIMGsLK0icNs= -----END CERTIFICATE-----Generated at Sat Apr 12 13:11:54 2025 by rpki-client