$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa File: d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa (raw, json) Hash identifier: Ao+1cglBgLcYd1fOClMRVz9pRId6iJcPtMcsB8UH4n8= Subject key identifier: 5C:D0:03:11:6B:F5:D6:47:95:4C:DE:B4:6C:A9:90:52:10:B3:44:E4 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584A23C00D7AE855ACC348362340 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 135391 IP address blocks: 144.208.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0d:7a:e8:55:ac:c3:48:36:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=75aed087-6256-4d96-a739-472ad768b9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:b6:bf:43:d4:f4:4b:f5:b1:c7:3e:eb:06: 28:79:1a:92:60:51:72:d0:33:fb:31:66:07:33:88: 3c:64:42:c5:9f:dc:0b:c1:a1:bd:62:0a:bc:67:15: 1d:d7:c2:99:64:ba:94:dd:6a:8b:3d:36:0a:b4:c8: 72:84:24:94:5e:cc:05:3e:7b:7a:0e:83:e8:70:76: 26:3e:d3:04:5f:79:af:6c:49:2a:43:f7:ab:45:c4: 62:bb:10:c4:ba:d0:69:00:e0:e9:a2:88:8c:64:03: ec:91:3a:cc:a0:11:0c:ff:32:82:31:1f:cd:2b:e9: c1:f3:ad:b8:1a:56:ec:b0:4e:6a:63:cd:99:e5:93: 7c:b8:56:4b:95:b6:6e:97:25:ca:d8:18:50:12:f7: d9:63:17:4e:68:b0:ef:f4:f8:a6:70:80:da:4b:24: ef:c7:10:68:39:a9:d7:9f:c8:73:39:85:5a:70:b7: 88:64:7a:0a:6e:e1:3e:a9:17:8a:5a:53:5b:8e:9c: 72:26:4a:d2:fc:2e:33:8f:1d:64:8e:5b:53:80:78: c3:11:52:58:ea:ff:c4:34:bf:48:2a:14:8c:81:db: fa:39:70:73:fc:26:3b:95:59:4c:b2:9a:63:1d:4c: 66:e2:f2:a0:c7:fe:c9:26:1d:7b:57:24:db:e2:1b: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:03:11:6B:F5:D6:47:95:4C:DE:B4:6C:A9:90:52:10:B3:44:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5e:fc:6f:c7:b0:db:14:7a:b2:7c:6e:57:2c:9b:a2:e0:e4: 25:c2:3a:b4:60:66:5d:8b:79:af:9f:e0:15:3f:1b:84:8a:8d: 65:54:0b:43:cf:b2:4c:8a:47:3e:fe:5e:f7:63:fa:bd:4b:b3: 6f:cf:22:b0:19:89:71:10:30:c3:5b:6d:50:b0:fc:50:73:b1: 1e:98:c7:f0:fd:a9:2d:6f:d7:04:d7:7b:13:9d:2e:ae:09:ed: 80:0c:00:2d:f1:22:24:38:8b:52:d1:ee:a4:5b:d3:e7:c8:e7: 48:25:cc:54:29:c0:21:a7:24:34:f5:d8:f6:b9:ea:95:ae:d9: 44:8c:55:ed:a0:0a:c0:a0:a6:e0:81:14:21:53:aa:7b:32:02: b2:3a:95:ce:22:40:55:08:ed:a6:cc:37:3e:63:bd:63:cb:7a: 3d:76:23:63:8a:d6:35:9a:26:04:6d:b0:38:58:8b:35:7d:97: 10:53:00:a5:55:1e:19:08:46:0c:5d:f8:e9:7c:5d:12:33:63: da:ae:ca:a9:15:26:02:72:44:8e:c1:6f:1d:0c:c6:31:d6:c0: 60:25:d2:75:61:df:bb:92:3b:c8:30:b2:1e:38:fe:15:20:75: 36:50:dc:d7:9a:06:18:65:75:5e:03:5b:5c:7a:b6:2b:5a:af: e5:8d:d4:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwA166FWsw0g2I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NzVhZWQwODctNjI1Ni00ZDk2LWE3MzktNDcyYWQ3NjhiOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+C2v0PU9Ev1scc+6wYoeRqSYFFy0DP7MWYH M4g8ZELFn9wLwaG9Ygq8ZxUd18KZZLqU3WqLPTYKtMhyhCSUXswFPnt6DoPocHYm PtMEX3mvbEkqQ/erRcRiuxDEutBpAODpooiMZAPskTrMoBEM/zKCMR/NK+nB8624 GlbssE5qY82Z5ZN8uFZLlbZulyXK2BhQEvfZYxdOaLDv9PimcIDaSyTvxxBoOanX n8hzOYVacLeIZHoKbuE+qReKWlNbjpxyJkrS/C4zjx1kjltTgHjDEVJY6v/ENL9I KhSMgdv6OXBz/CY7lVlMsppjHUxm4vKgx/7JJh17VyTb4htkZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzQAxFr9dZHlUzetGypkFIQs0TkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvZDRmMWMxNTktNjFhNy0z YmQ5LTk0ZDctMDVkNTgwYTY5NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9e/G/HsNsUerJ8blcsm6Lg5CXCOrRgZl2Lea+f4BU/G4SKjWVUC0PP skyKRz7+Xvdj+r1Ls2/PIrAZiXEQMMNbbVCw/FBzsR6Yx/D9qS1v1wTXexOdLq4J 7YAMAC3xIiQ4i1LR7qRb0+fI50glzFQpwCGnJDT12Pa56pWu2USMVe2gCsCgpuCB FCFTqnsyArI6lc4iQFUI7abMNz5jvWPLej12I2OK1jWaJgRtsDhYizV9lxBTAKVV HhkIRgxd+Ol8XRIzY9quyqkVJgJyRI7Bbx0MxjHWwGAl0nVh37uSO8gwsh44/hUg dTZQ3NeaBhhldV4DW1x6titar+WN1No= -----END CERTIFICATE-----Generated at Sun Jun 29 00:26:28 2025 by rpki-client