$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa File: 8a80ef84-72eb-37af-86ea-3e37d2bac157.roa (raw, json) Hash identifier: IB2CaEdb/SszOyBT4SFmm5Ln6e2GuF6fiM20QFEUsJ0= Subject key identifier: 77:DA:59:6E:5B:8F:9D:D5:5D:BC:60:69:12:B5:E3:48:0D:03:EC:ED Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584898D60E511EE5E25D4FB0F900 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 834 IP address blocks: 43.255.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0e:51:1e:e5:e2:5d:4f:b0:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=061c3e24-98eb-400d-a8a1-ef204e4d5810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:72:fa:ba:e8:89:ee:00:67:b0:ea:e3:d5: e4:b2:e5:5b:44:a1:03:3e:ee:63:87:0a:e5:dc:9a: dd:85:82:36:61:88:5e:96:7b:16:f4:85:99:21:c3: 9b:d6:d1:22:a3:96:0c:a4:e9:1d:1f:bd:69:aa:6b: c1:4f:2c:ab:0f:79:a9:84:36:70:e6:3d:88:55:9d: 45:9f:84:c8:55:41:94:88:f6:84:cf:72:bd:94:ea: 91:eb:71:76:0d:d6:7c:29:be:b6:fb:ef:a3:ca:58: 8b:43:ae:42:6b:82:7a:64:5d:9b:a0:f6:1c:c2:76: 73:97:76:11:03:ee:f2:18:3b:6b:8b:37:ea:d4:aa: 5c:35:0d:82:3a:49:d1:cb:6e:8e:71:91:3f:2c:71: b0:73:68:c4:7a:66:92:8f:f8:78:e5:85:b5:ad:17: ce:62:31:1e:78:ee:cf:5e:7e:7d:1c:47:64:e9:0e: 2b:29:92:c6:06:17:59:6a:f5:81:44:22:16:20:fa: c8:a7:33:30:13:f2:91:7d:9e:b3:49:2b:52:52:8a: 2f:aa:62:cd:61:3c:32:08:12:52:b6:f1:4a:68:7b: 2c:39:de:49:8f:80:32:fb:4e:0c:5a:2d:32:44:80: 6d:d6:dc:b8:de:e5:90:19:2c:dd:b4:3b:6d:69:e6: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DA:59:6E:5B:8F:9D:D5:5D:BC:60:69:12:B5:E3:48:0D:03:EC:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 43.255.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:43:11:e7:1b:2e:53:ca:10:6d:7a:ab:ba:c7:b2:89:8d:f6: b3:79:9b:39:61:25:8f:a0:2a:f3:0b:8e:6c:9a:73:d7:c2:b8: b7:9f:8a:c9:50:ad:b1:35:b9:6c:02:4a:9b:ab:b5:23:32:31: 41:3b:5a:1b:43:6a:d0:01:fa:07:6e:b1:d2:88:2b:2e:8b:e2: 7b:73:d2:e2:50:7a:04:19:57:94:27:71:aa:70:a1:07:b4:4e: 9e:78:39:4f:a0:45:64:f9:3c:71:6b:26:49:4c:8f:ad:61:b1: fb:fd:fd:fe:2d:dc:c2:67:8c:22:3b:29:76:0f:75:78:54:10: 16:8a:6b:41:fb:36:0e:55:63:70:07:7c:73:85:08:51:a4:7f: ea:ec:9e:8c:4b:ac:63:de:63:d8:87:34:4e:72:b1:6b:12:7f: 69:d6:4b:d3:90:ae:9e:2e:fd:ac:20:fd:53:73:d9:7b:12:8b: a2:b0:01:63:8e:12:ef:9c:f9:5f:4b:49:4a:16:f6:33:e1:d0: 20:d7:9e:75:a0:2b:33:72:f4:59:e0:ca:72:c0:8e:6b:b8:61: 70:18:0b:aa:7c:de:6c:63:46:ac:35:1b:d9:11:63:7c:33:e0: d9:d5:e9:fe:e8:07:84:ce:d5:9d:40:23:db:20:10:e1:b6:58: 5d:e2:5a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1g5RHuXiXU+w+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MDYxYzNlMjQtOThlYi00MDBkLWE4YTEtZWYyMDRlNGQ1ODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HJy+rroie4AZ7Dq49XksuVbRKEDPu5jhwrl 3JrdhYI2YYhelnsW9IWZIcOb1tEio5YMpOkdH71pqmvBTyyrD3mphDZw5j2IVZ1F n4TIVUGUiPaEz3K9lOqR63F2DdZ8Kb62+++jyliLQ65Ca4J6ZF2boPYcwnZzl3YR A+7yGDtrizfq1KpcNQ2COknRy26OcZE/LHGwc2jEemaSj/h45YW1rRfOYjEeeO7P Xn59HEdk6Q4rKZLGBhdZavWBRCIWIPrIpzMwE/KRfZ6zSStSUoovqmLNYTwyCBJS tvFKaHssOd5Jj4Ay+04MWi0yRIBt1ty43uWQGSzdtDttaeasEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfaWW5bj53VXbxgaRK140gNA+ztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOGE4MGVmODQtNzJlYi0z N2FmLTg2ZWEtM2UzN2QyYmFjMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9DEecbLlPKEG16q7rHsomN9rN5mzlhJY+gKvMLjmyac9fCuLefislQ rbE1uWwCSpurtSMyMUE7WhtDatAB+gdusdKIKy6L4ntz0uJQegQZV5QncapwoQe0 Tp54OU+gRWT5PHFrJklMj61hsfv9/f4t3MJnjCI7KXYPdXhUEBaKa0H7Ng5VY3AH fHOFCFGkf+rsnoxLrGPeY9iHNE5ysWsSf2nWS9OQrp4u/awg/VNz2XsSi6KwAWOO Eu+c+V9LSUoW9jPh0CDXnnWgKzNy9FngynLAjmu4YXAYC6p83mxjRqw1G9kRY3wz 4NnV6f7oB4TO1Z1AI9sgEOG2WF3iWv8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:00 2025 by rpki-client