$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa File: 95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (raw, json) Hash identifier: S1crQs1bS3+fVWk1sr+MxbbXeysQXbMkIzdeCnOShtQ= Subject key identifier: 55:1F:9E:41:A6:7E:B2:61:37:ED:C4:3D:EE:79:9F:2C:78:E2:D0:51 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F43285849393E6C639B34D679CF980600 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 36329 IP address blocks: 155.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:6c:63:9b:34:d6:79:cf:98:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=5217c6b3-70ce-447f-8827-3ed9f47ec66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3c:f3:1b:0a:5d:e1:ef:21:da:0b:40:b2:7d: 7f:0f:9b:bf:bb:40:df:4a:17:7d:13:01:65:d8:4f: 80:a2:50:4a:8d:a2:62:56:42:61:56:86:56:f4:94: 6e:78:e3:03:b7:ff:b9:9b:17:70:29:e1:a5:5c:dc: 00:27:ac:4c:7e:c0:e5:70:47:6b:a4:23:00:2c:4e: 68:35:7d:af:35:17:40:9c:ef:18:82:ec:99:a0:cd: 9c:8f:2a:1f:83:a2:60:26:22:2f:3c:a9:66:36:d9: c4:8e:e6:25:dd:ae:f7:eb:29:c6:4d:cd:0f:d0:04: 33:6c:af:d8:72:50:19:4b:77:e1:79:88:68:10:27: fb:5a:53:ad:59:16:ba:42:eb:ad:63:f3:19:a0:1e: 43:a0:5d:45:f4:8d:9c:d9:22:c8:1a:ad:21:b8:8f: 16:ab:45:f5:ac:a5:97:b9:cb:f3:a2:03:02:64:7a: 05:bc:17:a2:e5:84:34:98:fb:e9:13:09:ab:c8:4a: cf:2d:0e:53:4c:7e:56:5e:7f:4e:9a:0f:e3:da:e8: f4:f8:97:b6:b7:6c:7f:45:7c:9b:e1:67:05:a6:ba: 43:c7:5c:29:e7:0f:16:2b:a5:1e:0c:e4:6a:09:4f: 7a:77:a8:d2:69:24:bb:fb:6d:dd:8c:d4:ee:fd:6a: 69:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1F:9E:41:A6:7E:B2:61:37:ED:C4:3D:EE:79:9F:2C:78:E2:D0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 155.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d4:7e:71:ef:fd:a9:a2:57:31:91:18:d7:7f:71:7f:d3:87: a6:56:32:32:8e:8e:71:42:1f:02:c5:04:2a:5f:48:04:bb:b0: 6c:a0:a9:3c:04:03:ae:1a:a7:a8:aa:4f:a0:e3:b7:23:92:58: 61:8f:57:c8:5a:7b:32:71:d5:c0:45:68:1e:7e:f5:93:2f:78: bf:dc:41:80:6a:ec:ab:2f:8e:d9:ce:3f:7b:0d:60:cf:e6:f2: 3c:46:42:84:82:5e:bd:90:06:8d:73:80:d0:d6:f0:de:1f:39: 67:20:49:b4:a5:9d:c6:e2:48:b8:0e:01:09:cf:4d:ff:66:37: 7f:0a:63:35:84:94:39:b7:4d:09:43:1b:b9:b0:2d:81:74:64: 34:0e:74:3d:de:5c:51:06:ff:e4:cf:77:68:52:f6:63:87:03: 12:09:ec:c9:3a:da:a5:2d:04:d2:f1:09:4b:e0:b2:e5:f4:8b: d3:96:ce:c1:51:47:5f:e6:3c:ba:2e:db:b7:66:49:8a:43:08: 6b:41:43:04:12:ee:50:5c:a1:46:e1:59:4e:a4:4f:04:a6:1f: 13:32:a7:13:a3:b3:cf:c2:3e:06:b0:01:bd:e6:16:8f:15:12: 0c:a0:87:e1:4f:e0:27:d7:ab:6f:1d:ba:05:82:bb:0f:66:21: 99:35:fa:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PmxjmzTWec+YBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NTIxN2M2YjMtNzBjZS00NDdmLTg4MjctM2VkOWY0N2VjNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zzzGwpd4e8h2gtAsn1/D5u/u0DfShd9EwFl 2E+AolBKjaJiVkJhVoZW9JRueOMDt/+5mxdwKeGlXNwAJ6xMfsDlcEdrpCMALE5o NX2vNRdAnO8YguyZoM2cjyofg6JgJiIvPKlmNtnEjuYl3a736ynGTc0P0AQzbK/Y clAZS3fheYhoECf7WlOtWRa6QuutY/MZoB5DoF1F9I2c2SLIGq0huI8Wq0X1rKWX ucvzogMCZHoFvBei5YQ0mPvpEwmryErPLQ5TTH5WXn9Omg/j2uj0+Je2t2x/RXyb 4WcFprpDx1wp5w8WK6UeDORqCU96d6jSaSS7+23djNTu/WppMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUfnkGmfrJhN+3EPe55nyx44tBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvOTVkZDUyNDItM2I1Yy0z NzZmLTgxZDUtOGVkZTFjMjI3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTUfnHv/amiVzGRGNd/cX/Th6ZWMjKOjnFCHwLFBCpfSAS7sGygqTwE A64ap6iqT6DjtyOSWGGPV8haezJx1cBFaB5+9ZMveL/cQYBq7KsvjtnOP3sNYM/m 8jxGQoSCXr2QBo1zgNDW8N4fOWcgSbSlncbiSLgOAQnPTf9mN38KYzWElDm3TQlD G7mwLYF0ZDQOdD3eXFEG/+TPd2hS9mOHAxIJ7Mk62qUtBNLxCUvgsuX0i9OWzsFR R1/mPLou27dmSYpDCGtBQwQS7lBcoUbhWU6kTwSmHxMypxOjs8/CPgawAb3mFo8V Egygh+FP4CfXq28dugWCuw9mIZk1+tU= -----END CERTIFICATE-----Generated at Sat Apr 12 12:51:55 2025 by rpki-client