$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa File: 538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa (raw, json) Hash identifier: gokiCY/MA4e4GYaqQW1sL+MY8WRRJnIi8XH6mjb7qaM= Subject key identifier: 29:5D:D9:57:4A:E8:E7:3B:AF:F4:37:B4:E5:6E:22:D6:BB:9D:B9:6A Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858496B7ED3456DE8A272DD8E4580 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 21769 IP address blocks: 174.140.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d3:45:6d:e8:a2:72:dd:8e:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=429c870d-aabe-4fab-bd32-ba2f7406cc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:85:4d:d9:ee:eb:68:4b:c4:51:a3:92:2a:83: 30:8c:2b:c6:24:fe:5a:d1:7b:62:84:df:65:79:62: 42:8c:5f:b5:da:63:9c:2b:0a:e4:d1:50:56:1d:f4: 17:2c:2d:3a:21:0a:e5:4b:b0:6f:b9:e7:07:ee:41: 9f:1b:7a:25:03:75:fe:aa:12:35:dd:e6:a0:27:29: 5a:97:e4:51:be:eb:cd:76:9f:3e:59:fa:10:24:9f: ed:9f:c5:18:a5:a1:1f:db:21:8a:7f:7f:4a:2d:d1: 03:20:9b:11:5f:52:de:f5:79:82:98:75:a7:a7:22: 1f:63:4d:f4:e2:65:d3:80:37:b8:be:02:d0:e5:5c: 8b:8e:e7:e0:ab:f9:bd:99:98:e2:fa:1d:c0:3f:f8: 67:8f:fe:ee:1e:52:31:0a:c7:d0:6c:0b:c1:f5:1f: 8a:83:e7:b2:f1:69:cf:41:b3:d4:c5:57:0e:82:8a: 64:18:d3:22:bb:22:a1:04:02:f4:28:55:b3:d4:99: a5:ea:f8:c0:37:6d:5e:a5:5a:ec:eb:d7:a4:b4:90: e3:6b:79:45:fc:f4:cc:d0:fa:6c:7d:db:79:c2:10: f4:5d:eb:79:95:a1:3a:82:97:c0:72:99:9d:a5:31: ec:03:da:d9:32:92:81:59:b2:7e:a0:8b:fe:34:d8: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5D:D9:57:4A:E8:E7:3B:AF:F4:37:B4:E5:6E:22:D6:BB:9D:B9:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 174.140.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5b:47:2a:cd:06:fc:84:d3:e0:11:25:9b:3e:14:89:d4:69: fb:f6:af:51:3e:96:c1:e2:5d:20:f1:76:01:cd:85:51:76:fc: ba:98:cc:a4:6e:d1:fd:d1:32:e6:81:cc:31:ff:6e:d9:ce:c2: 5f:c7:a8:1b:8e:ce:00:56:10:ae:33:8d:33:2a:8c:61:9d:52: b1:79:0a:2d:f1:a5:4e:6b:d1:8a:ec:77:41:ff:22:60:79:e9: 32:cc:19:92:b8:b9:12:66:5b:55:eb:13:57:93:8b:9b:04:69: fd:ce:5f:66:a8:a6:e9:6f:58:25:e2:b8:da:9f:5c:ed:3d:95: 0f:5f:36:96:2f:21:e7:a9:19:d5:b0:fe:a2:74:6c:53:d2:91: 14:bd:c3:0f:91:89:50:ae:31:90:28:86:07:fe:bc:58:b9:b2: ee:17:4e:3a:53:c9:01:7c:ef:3b:65:6b:07:1b:bc:bf:3a:96: db:a7:48:75:ba:b0:a2:b7:65:0a:fa:1c:d5:4c:e6:4f:8f:5e: b7:f0:14:7e:c2:c6:b1:f3:64:7a:62:46:35:3b:27:f5:88:02: 12:54:c8:a5:a2:48:ab:8c:87:b9:af:e2:27:a3:bf:2c:0c:25: 5e:b4:ea:79:b8:17:36:ed:8b:11:8b:df:ef:cf:b8:10:be:a8: d6:d6:7c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftNFbeiict2ORYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk NDI5Yzg3MGQtYWFiZS00ZmFiLWJkMzItYmEyZjc0MDZjYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4VN2e7raEvEUaOSKoMwjCvGJP5a0XtihN9l eWJCjF+12mOcKwrk0VBWHfQXLC06IQrlS7BvuecH7kGfG3olA3X+qhI13eagJyla l+RRvuvNdp8+WfoQJJ/tn8UYpaEf2yGKf39KLdEDIJsRX1Le9XmCmHWnpyIfY030 4mXTgDe4vgLQ5VyLjufgq/m9mZji+h3AP/hnj/7uHlIxCsfQbAvB9R+Kg+ey8WnP QbPUxVcOgopkGNMiuyKhBAL0KFWz1Jml6vjAN21epVrs69ektJDja3lF/PTM0Pps fdt5whD0Xet5laE6gpfAcpmdpTHsA9rZMpKBWbJ+oIv+NNjMUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCld2VdK6Oc7r/Q3tOVuIta7nblqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTM4ZTdlYzQtYjY0Zi0z YjQwLWE0NTUtMDE2YTFkMWZiNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArozJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtbRyrNBvyE0+ARJZs+FInUafv2r1E+lsHiXSDxdgHNhVF2/LqYzKRu 0f3RMuaBzDH/btnOwl/HqBuOzgBWEK4zjTMqjGGdUrF5Ci3xpU5r0Yrsd0H/ImB5 6TLMGZK4uRJmW1XrE1eTi5sEaf3OX2aopulvWCXiuNqfXO09lQ9fNpYvIeepGdWw /qJ0bFPSkRS9ww+RiVCuMZAohgf+vFi5su4XTjpTyQF87ztlawcbvL86ltunSHW6 sKK3ZQr6HNVM5k+PXrfwFH7CxrHzZHpiRjU7J/WIAhJUyKWiSKuMh7mv4iejvywM JV606nm4FzbtixGL3+/PuBC+qNbWfPk= -----END CERTIFICATE-----Generated at Sat Apr 5 22:26:57 2025 by rpki-client