$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/290891e1-d8af-36da-9198-fb834783b96c.roa File: 290891e1-d8af-36da-9198-fb834783b96c.roa (raw, json) Hash identifier: Lee6K6nD4SKrhuaMbduQa0mIbWok6bkS+Ju6xT2CtIY= Subject key identifier: 8D:42:8B:B2:A0:38:A6:A0:E7:4B:AC:E1:44:87:33:5A:16:EF:30:A8 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848F536DBC90F73A6494000A1F0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/290891e1-d8af-36da-9198-fb834783b96c.roa Signing time: Fri 21 Feb 2025 16:10:28 +0000 ROA not before: Fri 21 Feb 2025 16:10:28 +0000 ROA not after: Thu 22 May 2025 15:10:28 +0000 asID: 834 IP address blocks: 67.203.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:36:db:c9:0f:73:a6:49:40:00:a1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Feb 21 16:10:28 2025 GMT Not After : May 22 15:10:28 2025 GMT Subject: CN=618f5de4-813e-4165-9579-c171d084a0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e8:bf:d9:ed:c8:97:3e:cb:ca:23:6c:7c:52: b0:70:d5:60:77:06:3e:3b:5e:35:7b:99:71:b0:83: 66:9c:9a:a7:04:2a:bf:73:3c:ea:03:f7:d9:db:01: ba:30:9e:dd:73:43:e9:88:15:d2:85:6c:2d:a5:ea: 40:17:ad:16:b4:f8:4b:53:94:07:4f:ce:05:76:fc: 88:bf:19:52:0f:2f:f6:15:3c:e0:09:85:6a:f6:a8: 81:6f:f9:97:67:5a:6a:d3:ee:86:c5:b0:45:0b:98: 9e:3e:cb:40:39:3e:63:2d:00:52:03:5b:16:09:76: 2c:36:79:35:12:d3:91:0f:4e:76:ff:5b:f9:67:e7: ac:f3:19:f5:40:28:a9:38:b9:e2:23:61:09:d7:3e: d8:4d:a2:77:62:4e:71:40:15:fc:05:7c:f8:4c:bb: 46:b3:f9:5a:e1:a5:55:0e:90:eb:c9:fd:e6:c9:3a: 90:1e:bc:b1:e0:8c:e4:66:cd:fb:de:a1:68:21:f9: 3a:8c:ca:c1:fe:db:1b:a9:5c:0d:a0:15:4f:7e:c1: f6:be:56:41:c5:fd:1c:3c:c6:08:0f:f2:0c:6c:27: 94:fd:9c:cf:f8:d8:4c:80:c3:91:09:eb:c9:d4:6b: 70:33:2b:5c:45:92:1a:88:da:85:db:d9:5a:0a:98: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:42:8B:B2:A0:38:A6:A0:E7:4B:AC:E1:44:87:33:5A:16:EF:30:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/290891e1-d8af-36da-9198-fb834783b96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 67.203.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d7:a0:ca:f7:e2:90:c7:66:2b:53:0e:ed:94:13:1e:e0:5e: aa:0d:6f:b3:6d:63:07:58:b6:f8:64:a8:3e:b1:9d:73:90:38: a1:79:5f:8e:7c:2a:cb:9a:ba:f9:e3:99:b2:81:2e:38:47:94: 02:6c:c6:78:cb:04:19:26:3d:79:b4:9f:07:ce:78:22:64:d8: 00:45:ac:4f:bb:72:eb:06:d2:7b:23:c1:41:05:cb:66:55:8d: 0d:90:7a:3a:fc:83:62:2f:0d:2a:c1:57:de:64:e9:31:01:44: 1f:ef:59:ea:e8:18:c5:a0:82:20:f2:7a:1b:2d:cf:59:8a:6d: b3:94:1f:ec:2a:4b:6f:c0:18:ca:31:aa:cc:c0:77:07:b9:f2: f3:56:8c:db:a3:df:5f:76:f5:da:8e:ef:a8:45:13:8e:a7:d8: 36:ce:48:9e:8a:0d:12:75:25:1f:cd:21:30:a4:ed:5a:d0:77: e9:59:55:d3:2d:af:f6:28:06:83:8d:66:2a:f4:8d:66:fa:68: 70:99:98:6f:3e:57:38:e6:28:55:a4:94:85:e5:92:fd:d4:e6: 4b:cb:c6:1f:a9:c1:b9:a6:71:55:e6:eb:b0:7e:92:3b:7d:17: a4:58:9e:f2:b2:0e:0d:3a:11:6e:9a:fb:4f:c4:40:cb:2a:00: cb:19:a4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj1NtvJD3OmSUAAofAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDIyMTE2MTAyOFoXDTI1MDUyMjE1MTAyOFowLzEtMCsGA1UEAxMk NjE4ZjVkZTQtODEzZS00MTY1LTk1NzktYzE3MWQwODRhMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgei/2e3Ilz7LyiNsfFKwcNVgdwY+O141e5lx sINmnJqnBCq/czzqA/fZ2wG6MJ7dc0PpiBXShWwtpepAF60WtPhLU5QHT84FdvyI vxlSDy/2FTzgCYVq9qiBb/mXZ1pq0+6GxbBFC5iePstAOT5jLQBSA1sWCXYsNnk1 EtORD052/1v5Z+es8xn1QCipOLniI2EJ1z7YTaJ3Yk5xQBX8BXz4TLtGs/la4aVV DpDryf3myTqQHryx4IzkZs373qFoIfk6jMrB/tsbqVwNoBVPfsH2vlZBxf0cPMYI D/IMbCeU/ZzP+NhMgMORCevJ1GtwMytcRZIaiNqF29laCpin2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1Ci7KgOKag50us4USHM1oW7zCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjkwODkxZTEtZDhhZi0z NmRhLTkxOTgtZmI4MzQ3ODNiOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8sLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDXoMr34pDHZitTDu2UEx7gXqoNb7NtYwdYtvhkqD6xnXOQOKF5X458 KsuauvnjmbKBLjhHlAJsxnjLBBkmPXm0nwfOeCJk2ABFrE+7cusG0nsjwUEFy2ZV jQ2Qejr8g2IvDSrBV95k6TEBRB/vWeroGMWggiDyehstz1mKbbOUH+wqS2/AGMox qszAdwe58vNWjNuj31929dqO76hFE46n2DbOSJ6KDRJ1JR/NITCk7VrQd+lZVdMt r/YoBoONZir0jWb6aHCZmG8+VzjmKFWklIXlkv3U5kvLxh+pwbmmcVXm67B+kjt9 F6RYnvKyDg06EW6a+0/EQMsqAMsZpCE= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:02 2025 by rpki-client