$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6555c3a0-93cd-3539-9e29-0be1b7117976.roa File: 6555c3a0-93cd-3539-9e29-0be1b7117976.roa (raw, json) Hash identifier: 8aP/lKuN0Ak6lkx0WSApK7LFLVUartCnw7ZzQEoQDhM= Subject key identifier: 1C:88:6F:48:CC:EA:49:2F:B6:F4:91:E9:8B:AB:99:D9:84:BF:29:93 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848AF2B817A289E6B47C7E092E0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6555c3a0-93cd-3539-9e29-0be1b7117976.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 211373 IP address blocks: 173.211.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:81:7a:28:9e:6b:47:c7:e0:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=25389f65-b22b-40c4-b253-7ccb1ae83a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:d7:7c:f9:fa:12:38:8d:70:72:9a:ce:f7: aa:a9:57:b7:a0:58:4e:5e:86:b9:28:8d:4c:c9:5c: 46:52:15:98:b2:0f:fb:77:30:c6:47:82:eb:3e:d8: d7:31:a5:14:c1:0d:39:58:ab:8e:75:93:2d:a0:77: 13:59:e3:f0:07:67:5b:e8:2e:94:b9:e2:bb:1b:d4: 2c:75:62:2c:bd:eb:68:97:78:d5:66:d9:0e:b8:dd: 91:d9:7f:9b:e0:e4:ce:b7:4a:d2:a0:c8:32:1f:e7: 64:0e:bb:61:30:73:cd:52:8e:d3:3f:97:6d:31:b7: 58:93:7d:aa:a4:5a:b3:bf:9f:fc:ad:86:b1:37:6c: 80:79:54:6f:f3:a0:d1:01:1b:2f:2e:3d:cc:c3:d7: 6b:ae:5b:fb:bb:6d:eb:3a:0f:85:8a:d8:9c:4b:98: 4c:b0:77:11:c0:98:8e:06:15:78:2a:c9:47:9a:b6: fa:c3:0b:a9:f3:b1:74:fc:0d:c2:60:d1:89:b2:da: 3a:06:f1:da:00:08:d7:45:9f:e3:cc:8f:fe:37:68: 9e:42:23:1d:86:1d:d2:0f:1c:8b:f8:0f:2f:7f:87: 9f:3a:3a:9b:5b:c4:1c:0b:38:7b:61:83:cb:67:2b: fc:26:8c:a5:d8:83:70:6a:2a:76:26:a0:88:5f:7e: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:88:6F:48:CC:EA:49:2F:B6:F4:91:E9:8B:AB:99:D9:84:BF:29:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6555c3a0-93cd-3539-9e29-0be1b7117976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c8:97:41:57:74:de:2e:27:61:24:e8:60:16:d8:30:68:aa: 02:f7:a4:70:d5:e0:6e:ae:f5:43:f6:fa:7a:86:66:fe:80:b6: 79:65:84:5b:ee:c2:08:aa:95:03:34:4e:74:1c:b2:f3:41:02: fa:f2:4f:ad:7c:47:c5:7e:7a:37:a7:13:5e:b8:d1:ea:81:df: d8:77:f2:b8:a6:61:82:e5:69:03:e3:06:b5:f0:73:f1:7b:bd: f4:04:89:0d:cf:3a:e0:d1:87:12:0b:fd:cb:33:51:8b:65:8e: be:87:b5:67:31:63:b7:6a:0c:0b:0a:1c:c7:ca:84:21:fb:b0: 9d:82:a0:4b:79:bf:c5:f4:a8:3a:47:a0:3a:63:17:3d:5f:a2: 5a:97:d0:92:c9:e1:62:be:7e:8d:10:80:a9:44:95:0a:9c:2f: a4:35:42:e1:e7:ae:ea:52:bc:6f:13:50:79:12:2b:74:a0:86: d7:98:1e:de:d6:cd:4b:d2:0b:c3:1a:38:5e:73:be:da:f2:bb: 37:59:03:79:95:76:c5:a5:ef:2b:a2:6b:bd:17:60:d2:34:1d: e8:78:ad:16:e6:9d:84:b8:96:7b:51:aa:1b:a3:03:06:e8:96: ae:16:77:9f:3f:25:e3:ca:92:98:82:e8:19:23:a0:a6:6f:7a: e5:74:f0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4F6KJ5rR8fgkuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MjUzODlmNjUtYjIyYi00MGM0LWIyNTMtN2NjYjFhZTgzYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmvXfPn6EjiNcHKazveqqVe3oFhOXoa5KI1M yVxGUhWYsg/7dzDGR4LrPtjXMaUUwQ05WKuOdZMtoHcTWePwB2db6C6UueK7G9Qs dWIsvetol3jVZtkOuN2R2X+b4OTOt0rSoMgyH+dkDrthMHPNUo7TP5dtMbdYk32q pFqzv5/8rYaxN2yAeVRv86DRARsvLj3Mw9drrlv7u23rOg+FiticS5hMsHcRwJiO BhV4KslHmrb6wwup87F0/A3CYNGJsto6BvHaAAjXRZ/jzI/+N2ieQiMdhh3SDxyL +A8vf4efOjqbW8QcCzh7YYPLZyv8Joyl2INwaip2JqCIX37u2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByIb0jM6kkvtvSR6YurmdmEvymTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNjU1NWMzYTAtOTNjZC0z NTM5LTllMjktMGJlMWI3MTE3OTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvIl0FXdN4uJ2Ek6GAW2DBoqgL3pHDV4G6u9UP2+nqGZv6AtnllhFvu wgiqlQM0TnQcsvNBAvryT618R8V+ejenE1640eqB39h38rimYYLlaQPjBrXwc/F7 vfQEiQ3POuDRhxIL/cszUYtljr6HtWcxY7dqDAsKHMfKhCH7sJ2CoEt5v8X0qDpH oDpjFz1folqX0JLJ4WK+fo0QgKlElQqcL6Q1QuHnrupSvG8TUHkSK3SghteYHt7W zUvSC8MaOF5zvtryuzdZA3mVdsWl7yuia70XYNI0Heh4rRbmnYS4lntRqhujAwbo lq4Wd58/JePKkpiC6BkjoKZveuV08J4= -----END CERTIFICATE-----Generated at Fri Apr 4 19:29:44 2025 by rpki-client