$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa File: 70cdd98f-46e9-3001-aca9-1db52b65e840.roa (raw, json) Hash identifier: TQCciZ/pKp3JkoL+KCAXdtjTaQGiTNU6wr9w2TZlEGU= Subject key identifier: 7A:E5:C9:99:CE:AE:70:56:22:E7:72:CF:8D:31:B2:A6:C2:0D:5E:09 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858487B85B93E45F73DEFB8C0C200 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa Signing time: Thu 09 Jan 2025 02:00:40 +0000 ROA not before: Thu 09 Jan 2025 02:00:40 +0000 ROA not after: Wed 09 Apr 2025 01:00:40 +0000 asID: 9009 IP address blocks: 174.140.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:85:b9:3e:45:f7:3d:ef:b8:c0:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 9 02:00:40 2025 GMT Not After : Apr 9 01:00:40 2025 GMT Subject: CN=c4d7519c-741c-4ee8-8b95-8ed617bd1f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:55:82:8f:12:95:66:94:db:28:ef:ff:1c:ab: 3d:db:f7:56:c6:f8:b5:18:f7:4d:66:48:1e:25:79: d6:8c:34:e6:9c:9f:a6:46:c3:56:c2:5a:b2:4a:7f: db:e7:84:9f:e3:68:ee:8c:51:74:d4:c3:6f:3b:a4: 88:86:33:47:6c:5b:21:dd:cf:7c:35:83:b6:bd:6f: af:b4:dd:12:8d:7b:72:55:a9:64:f3:ec:0f:f1:c9: d7:01:de:bd:65:bf:bf:8e:5e:27:44:ad:83:e2:22: 95:ab:ad:32:c5:9f:8a:47:9e:c6:74:fd:bd:c6:69: e8:62:29:a7:b7:99:a9:64:36:9c:37:41:47:89:30: d0:2b:98:b7:9c:c5:31:10:54:57:f1:a8:ad:be:b2: 63:eb:20:ce:a0:9a:db:c7:57:ff:13:1a:64:94:59: dd:5a:a7:58:21:3d:85:a6:8e:63:d5:aa:2e:01:e1: 0a:e8:fb:a3:de:05:20:c7:7e:48:81:6d:5e:dc:31: 50:5a:23:25:34:bd:28:d1:0e:cc:cc:47:3f:c7:5f: 1b:5d:97:ea:2a:19:13:b9:6e:85:f6:97:13:67:42: 3d:93:c6:f1:31:75:aa:17:34:57:f8:c9:ba:2b:e1: 35:97:7a:59:bf:85:40:7f:7e:58:5e:f2:f6:72:d8: 2e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:C9:99:CE:AE:70:56:22:E7:72:CF:8D:31:B2:A6:C2:0D:5E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 174.140.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:31:6b:64:04:87:82:99:b9:36:e9:87:03:4c:40:a0:1e:04: dc:94:a9:55:08:95:5e:ba:68:1c:45:22:14:49:9f:2d:54:c2: 0d:6d:b9:1b:01:2f:e5:51:92:e6:a5:30:ef:c7:02:15:64:78: 34:15:0d:a6:33:13:8e:60:45:98:5e:a4:5e:a2:58:53:7e:0d: 10:0b:5b:38:42:c1:a7:20:97:16:98:91:5c:64:62:b6:09:be: 2f:45:a5:1e:48:9f:4b:d7:3f:90:c3:22:45:7a:90:14:85:41: 68:98:00:76:39:0e:72:7a:4f:f7:2c:79:6d:f2:06:2a:de:d6: 9d:79:e9:7b:c4:5a:d9:41:de:31:a1:b0:4e:98:2b:7d:39:3b: 44:53:fe:6a:8b:de:88:d4:ec:27:f5:28:6a:c2:1f:09:8b:45: 71:cf:72:b6:da:2e:3a:71:03:e1:4d:c6:86:f2:c2:8e:00:bc: ec:d2:0e:c7:c4:a6:95:51:c5:b4:b5:b7:78:77:9a:3b:25:41: 04:01:b5:e7:ac:e9:16:eb:cb:35:ea:2b:5e:0d:e2:0a:5c:4f: b2:34:b1:a3:de:f6:8c:cc:21:89:6b:5a:53:a8:16:95:d5:94: 9a:95:4c:63:c6:0c:b2:9a:95:56:b4:75:5c:1b:00:2f:1d:70: 21:e4:2a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbk+Rfc977jAwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk YzRkNzUxOWMtNzQxYy00ZWU4LThiOTUtOGVkNjE3YmQxZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lWCjxKVZpTbKO//HKs92/dWxvi1GPdNZkge JXnWjDTmnJ+mRsNWwlqySn/b54Sf42jujFF01MNvO6SIhjNHbFsh3c98NYO2vW+v tN0SjXtyValk8+wP8cnXAd69Zb+/jl4nRK2D4iKVq60yxZ+KR57GdP29xmnoYimn t5mpZDacN0FHiTDQK5i3nMUxEFRX8aitvrJj6yDOoJrbx1f/ExpklFndWqdYIT2F po5j1aouAeEK6Puj3gUgx35IgW1e3DFQWiMlNL0o0Q7MzEc/x18bXZfqKhkTuW6F 9pcTZ0I9k8bxMXWqFzRX+Mm6K+E1l3pZv4VAf35YXvL2ctgumQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrlyZnOrnBWIudyz40xsqbCDV4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzBjZGQ5OGYtNDZlOS0z MDAxLWFjYTktMWRiNTJiNjVlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrozAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQxa2QEh4KZuTbphwNMQKAeBNyUqVUIlV66aBxFIhRJny1Uwg1tuRsB L+VRkualMO/HAhVkeDQVDaYzE45gRZhepF6iWFN+DRALWzhCwacglxaYkVxkYrYJ vi9FpR5In0vXP5DDIkV6kBSFQWiYAHY5DnJ6T/cseW3yBire1p156XvEWtlB3jGh sE6YK305O0RT/mqL3ojU7Cf1KGrCHwmLRXHPcrbaLjpxA+FNxobywo4AvOzSDsfE ppVRxbS1t3h3mjslQQQBtees6RbryzXqK14N4gpcT7I0saPe9ozMIYlrWlOoFpXV lJqVTGPGDLKalVa0dVwbAC8dcCHkKpQ= -----END CERTIFICATE-----Generated at Sat Feb 8 12:55:30 2025 by rpki-client