$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa File: 70cdd98f-46e9-3001-aca9-1db52b65e840.roa (raw, json) Hash identifier: I5UMRFBaLAPNrhH7NCvNDfLEtG0v/3MLUI+Ip+r+clA= Subject key identifier: 62:5A:4A:2A:3E:75:48:08:ED:DB:0A:FF:4F:F3:89:9C:C3:8D:17:EC Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858495ABEE62335CCADB2996B7B40 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 9009 IP address blocks: 174.140.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e6:23:35:cc:ad:b2:99:6b:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=2c0f13d3-8fb5-48ba-a63b-7af914d0d7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:7d:30:be:a3:48:3a:e1:d2:26:e9:64:2a: 3a:15:51:71:6f:e8:55:93:ef:ca:02:61:a6:76:36: 2f:3b:af:19:15:e2:99:e9:91:b4:7f:ca:ab:b5:df: 87:0e:ad:50:26:19:fe:ac:d6:42:54:64:62:47:27: 3e:76:81:04:38:63:ec:5b:e1:d4:ae:5b:5e:29:b6: 52:6e:c5:e2:22:d0:d6:22:24:10:37:2a:d5:0a:53: 84:f4:b9:d9:52:1c:ee:e3:72:21:6c:30:68:f4:f1: cf:d8:86:74:64:5e:4f:62:62:05:ff:44:66:b4:38: e2:4f:f0:7e:b4:1e:87:42:bb:af:56:80:9e:40:80: 89:24:b7:f3:03:bf:ed:30:c1:29:e0:f2:db:6f:b1: 68:f5:d8:59:43:8d:90:fb:14:88:51:6e:f8:12:5d: 12:4b:e4:77:01:c8:d4:9c:2c:2d:94:f0:50:d7:ac: bc:3c:35:21:52:a8:e6:11:ec:02:16:90:08:b0:75: 1b:ba:fc:39:66:83:48:aa:c5:9b:aa:0d:58:c0:81: b6:75:6f:8f:92:e3:93:00:22:20:2a:fb:0f:a6:93: 64:67:0a:f3:90:f8:18:8b:a4:ea:2d:e0:55:01:0a: 19:2b:e6:bd:21:d8:e1:cd:53:c1:f1:e4:5e:84:c5: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5A:4A:2A:3E:75:48:08:ED:DB:0A:FF:4F:F3:89:9C:C3:8D:17:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 174.140.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:46:fa:78:65:c3:dc:7b:e7:27:9c:48:51:1d:b2:65:98:99: ef:2b:da:97:c1:e9:98:18:df:df:f4:9c:e6:ae:e7:dc:d9:16: dd:86:51:d7:80:27:f6:d3:65:6a:ce:9e:c2:34:01:37:95:a7: 57:c8:e3:d1:26:91:e4:c8:a1:a1:e3:71:3b:a5:4d:57:f8:d3: d6:a8:51:f3:e1:f1:d4:37:a8:31:5a:8f:76:fd:52:9f:5e:f4: e0:e1:34:4c:a7:d3:a0:85:94:13:a2:92:99:a4:0f:9e:9f:b6: b6:5c:c4:53:d9:4e:30:91:9c:94:3a:24:5f:9e:8f:8d:1a:54: 6e:11:81:1b:09:8a:51:19:da:2d:29:23:39:b8:82:6f:34:92: 3c:3c:db:58:23:8c:cf:21:fc:74:21:ff:1b:f6:7e:bd:83:ec: 8c:56:01:99:1b:1e:83:e9:2e:e5:32:1b:ab:0d:36:f6:f8:79: dd:9a:d6:e0:55:d2:fc:77:ec:53:99:4f:5f:65:8f:00:c6:ba: 80:26:ae:46:d0:c6:02:bc:42:d8:23:bf:89:1a:48:cc:75:45: 24:cb:b0:aa:f2:d9:f8:94:aa:05:74:51:e3:b8:5d:cc:bb:b0: 58:ea:35:54:13:17:26:4d:95:a6:a8:9d:7e:66:c5:91:4b:e4: 01:fd:60:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuYjNcytsplre0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MmMwZjEzZDMtOGZiNS00OGJhLWE2M2ItN2FmOTE0ZDBkN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDx9ML6jSDrh0ibpZCo6FVFxb+hVk+/KAmGm djYvO68ZFeKZ6ZG0f8qrtd+HDq1QJhn+rNZCVGRiRyc+doEEOGPsW+HUrlteKbZS bsXiItDWIiQQNyrVClOE9LnZUhzu43IhbDBo9PHP2IZ0ZF5PYmIF/0RmtDjiT/B+ tB6HQruvVoCeQICJJLfzA7/tMMEp4PLbb7Fo9dhZQ42Q+xSIUW74El0SS+R3AcjU nCwtlPBQ16y8PDUhUqjmEewCFpAIsHUbuvw5ZoNIqsWbqg1YwIG2dW+PkuOTACIg KvsPppNkZwrzkPgYi6TqLeBVAQoZK+a9IdjhzVPB8eRehMXZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJaSio+dUgI7dsK/0/ziZzDjRfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzBjZGQ5OGYtNDZlOS0z MDAxLWFjYTktMWRiNTJiNjVlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrozAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9G+nhlw9x75yecSFEdsmWYme8r2pfB6ZgY39/0nOau59zZFt2GUdeA J/bTZWrOnsI0ATeVp1fI49EmkeTIoaHjcTulTVf409aoUfPh8dQ3qDFaj3b9Up9e 9ODhNEyn06CFlBOikpmkD56ftrZcxFPZTjCRnJQ6JF+ej40aVG4RgRsJilEZ2i0p Izm4gm80kjw821gjjM8h/HQh/xv2fr2D7IxWAZkbHoPpLuUyG6sNNvb4ed2a1uBV 0vx37FOZT19ljwDGuoAmrkbQxgK8Qtgjv4kaSMx1RSTLsKry2fiUqgV0UeO4Xcy7 sFjqNVQTFyZNlaaonX5mxZFL5AH9YJ4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:22:59 2025 by rpki-client