$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa File: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json) Hash identifier: mM3mJdPuhi3rC4neSv/K+herRgTCaysM+ny2OmL4ruE= Subject key identifier: E5:A2:6B:30:58:5D:6E:74:80:95:1E:6B:A0:85:C7:8A:9D:38:C3:8A Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F43285848E59BCC4E491E7508ED30B400 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397293 IP address blocks: 68.69.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cc:4e:49:1e:75:08:ed:30:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=bb9a3ae8-e658-415d-a0a5-055a888b93d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:05:5f:78:ba:cc:a6:8b:aa:61:9d:11:4a:03: 50:c0:fc:1f:6d:8e:a8:68:e1:75:d4:d3:60:c4:80: b3:78:cf:f1:fe:4d:b2:f5:75:19:79:8d:82:d5:ea: b7:03:f3:3e:42:5a:70:7c:f2:17:31:c7:59:63:3c: a3:35:54:00:47:53:e7:e7:3c:a0:1d:2a:ac:9f:fa: 52:26:6d:0a:2c:32:31:20:a4:14:cf:eb:68:a9:3f: a7:48:81:75:cd:f9:49:ef:f6:cc:54:2a:7d:66:f7: 5d:85:36:00:43:01:e6:0d:da:ae:b3:db:fb:74:c3: b3:42:2c:15:c9:6f:72:0a:76:21:13:41:fa:03:7f: 61:96:9a:5e:7a:31:74:a2:12:f3:f6:11:27:fb:95: 2a:4c:5b:08:e5:8f:c0:0a:53:14:aa:33:53:16:65: 88:8b:eb:1c:82:72:a1:00:0c:13:d3:fe:2d:c4:95: 34:8d:7b:71:66:0a:cb:ea:f8:46:ed:88:72:8a:9a: de:83:13:89:b3:c5:86:a1:ec:25:f9:70:52:75:cd: 7a:95:49:a0:40:7b:6b:5f:14:7b:71:4a:c7:74:89: ef:f3:b2:13:05:25:8a:53:7c:a1:0c:57:55:ca:47: 8f:e5:fb:18:83:df:40:05:b9:f9:79:0f:53:1f:de: 10:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A2:6B:30:58:5D:6E:74:80:95:1E:6B:A0:85:C7:8A:9D:38:C3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:55:9f:3c:52:39:76:2e:a0:55:8d:40:39:99:ba:93:bc:25: 8b:87:d4:4d:cd:cf:00:3c:e5:98:75:e7:c6:86:ba:58:49:22: 97:fa:60:ff:6b:05:73:79:20:b2:6a:64:12:ca:a4:b1:a9:16: 4b:3e:3e:fb:ef:9f:2f:28:34:09:1c:ae:b7:b5:7c:46:ba:bd: 38:27:1e:f4:b1:b7:1e:4a:fd:f0:6f:ed:25:db:96:ac:a3:70: e5:77:aa:9c:bc:e8:78:51:b9:4f:ae:03:c4:98:08:44:ce:92: bd:a6:a6:00:3e:dd:c5:5c:90:7b:a8:69:e4:91:82:85:1c:0b: 52:3e:07:8b:34:06:a7:d9:07:ba:10:7c:1e:0a:40:d4:19:59: 9f:d2:09:03:38:e6:77:1f:8b:68:1f:8e:16:e3:00:c2:7d:08: 28:ac:a2:08:ef:82:6c:88:cc:5d:11:f3:c7:1e:d0:f8:c1:02: 6b:bb:bc:95:17:25:e8:13:ab:c1:48:50:ba:b9:7b:b3:c7:a7: f7:fb:f1:2a:11:81:cd:85:94:f7:68:3c:d5:82:7d:83:77:55: e8:6c:98:df:fb:6a:fe:ac:3d:a6:d4:45:1a:5a:23:91:b7:ca: f5:f9:a2:4e:0d:80:c7:d8:84:d2:ee:15:05:cc:47:a3:e0:05: 2d:dc:e0:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8xOSR51CO0wtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmI5YTNhZTgtZTY1OC00MTVkLWEwYTUtMDU1YTg4OGI5M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwVfeLrMpouqYZ0RSgNQwPwfbY6oaOF11NNg xICzeM/x/k2y9XUZeY2C1eq3A/M+QlpwfPIXMcdZYzyjNVQAR1Pn5zygHSqsn/pS Jm0KLDIxIKQUz+toqT+nSIF1zflJ7/bMVCp9ZvddhTYAQwHmDdqus9v7dMOzQiwV yW9yCnYhE0H6A39hlppeejF0ohLz9hEn+5UqTFsI5Y/AClMUqjNTFmWIi+scgnKh AAwT0/4txJU0jXtxZgrL6vhG7YhyipregxOJs8WGoewl+XBSdc16lUmgQHtrXxR7 cUrHdInv87ITBSWKU3yhDFdVykeP5fsYg99ABbn5eQ9TH94QsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWiazBYXW50gJUea6CFx4qdOMOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNVnzxSOXYuoFWNQDmZupO8JYuH1E3NzwA85Zh158aGulhJIpf6YP9r BXN5ILJqZBLKpLGpFks+Pvvvny8oNAkcrre1fEa6vTgnHvSxtx5K/fBv7SXblqyj cOV3qpy86HhRuU+uA8SYCETOkr2mpgA+3cVckHuoaeSRgoUcC1I+B4s0BqfZB7oQ fB4KQNQZWZ/SCQM45ncfi2gfjhbjAMJ9CCisogjvgmyIzF0R88ce0PjBAmu7vJUX JegTq8FIULq5e7PHp/f78SoRgc2FlPdoPNWCfYN3VehsmN/7av6sPabURRpaI5G3 yvX5ok4NgMfYhNLuFQXMR6PgBS3c4EQ= -----END CERTIFICATE-----Generated at Fri Apr 18 06:54:45 2025 by rpki-client