$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9ec17919-0fea-3de1-aa82-53aaa8e8b44a.roa File: 9ec17919-0fea-3de1-aa82-53aaa8e8b44a.roa (raw, json) Hash identifier: JFKASCO6Osp95pSnn3Kt5EEy9Gvd0G8HhoTS+fdKjXU= Subject key identifier: 23:67:D6:55:95:AB:D4:AF:E1:98:0B:60:5D:59:B8:76:C9:4E:0B:F9 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848D2113F6904500FD06054E960 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9ec17919-0fea-3de1-aa82-53aaa8e8b44a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 185.194.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:3f:69:04:50:0f:d0:60:54:e9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c00859da-8cb4-4358-b496-8faba1612a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:27:33:a0:a2:b3:fd:67:85:3f:13:ac:b3: 19:a9:7e:14:84:a1:0a:c0:87:fb:da:68:e1:2e:f6: 5e:b7:74:e9:52:7b:c3:d7:19:1a:7e:66:67:10:ea: a8:d4:e2:c5:db:09:20:b9:25:50:e1:52:28:e9:a0: af:32:42:18:d5:25:d2:94:99:2a:b3:c8:06:a4:2d: e8:a4:a4:f6:c3:fb:57:f6:25:2b:00:05:00:fd:81: 84:61:35:4f:b2:0b:bc:fe:5c:13:57:a4:3f:4d:73: 05:b8:de:d7:53:92:bd:de:18:26:16:f9:cd:c7:73: 9f:e7:24:84:4c:e7:3a:1e:68:88:d9:38:71:46:08: b3:6e:01:bb:cc:64:c0:6d:54:b4:92:ed:07:1d:29: 4c:8a:c9:38:90:04:a0:c1:96:47:60:29:e3:2b:7d: 29:6b:7f:46:45:0d:13:c1:ff:20:f4:83:49:b1:93: 3d:c5:a1:e6:f3:92:dd:ef:8f:07:be:f1:a8:74:97: f6:39:ed:ab:c2:e2:bc:81:65:b1:a4:65:89:06:75: 20:09:fb:ea:2a:99:7f:b4:c8:90:e5:f0:4f:cd:47: ea:22:93:fd:f5:25:17:c4:e3:7b:3b:69:14:43:2e: a9:86:84:a1:c3:05:e4:36:29:8d:78:4b:b4:83:6f: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:67:D6:55:95:AB:D4:AF:E1:98:0B:60:5D:59:B8:76:C9:4E:0B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9ec17919-0fea-3de1-aa82-53aaa8e8b44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 185.194.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bc:3a:7d:a8:cd:87:95:47:c5:b6:bf:ea:fe:11:81:27:e2: ca:a5:49:c6:c1:72:46:a1:94:e7:9a:2c:79:94:e9:ed:1c:bc: 50:ad:0e:6f:6c:9e:8b:5e:e7:ac:83:5e:7d:8b:1a:63:39:a9: 24:2e:d9:1a:18:a6:5b:c6:f1:a4:76:bb:c0:e6:a4:fd:47:c8: d8:95:a0:3a:a1:c4:90:65:01:6e:69:9b:21:bd:07:bd:97:c2: 28:51:50:c4:7d:0f:bc:0f:e1:0a:53:d5:1c:83:51:6c:03:29: bf:5c:d6:36:a9:be:33:ea:10:59:96:e9:e0:76:3e:b1:bb:b4: 4d:c9:f4:1f:ba:36:17:b4:90:a5:30:89:21:06:89:4e:c0:2c: 39:f8:39:cf:f9:51:ba:94:c8:95:4d:ac:d9:1b:f2:b6:45:3b: 41:49:ff:3d:fb:36:96:e4:40:6e:a5:f2:e6:a6:8b:c0:6d:6a: a7:bd:b7:bc:ec:33:23:d6:ae:d3:40:39:0b:2b:12:cc:2e:bd: b7:88:02:8d:95:20:b7:eb:25:0e:9e:05:28:2d:fb:c3:8b:63: 58:b0:02:a2:ca:e7:33:54:84:ee:4b:13:2b:cf:14:0f:33:9c: a5:21:1c:18:43:92:41:25:ca:63:3f:28:5e:b6:24:58:15:af: f0:6a:14:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSET9pBFAP0GBU6WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzAwODU5ZGEtOGNiNC00MzU4LWI0OTYtOGZhYmExNjEyYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyUnM6Cis/1nhT8TrLMZqX4UhKEKwIf72mjh LvZet3TpUnvD1xkafmZnEOqo1OLF2wkguSVQ4VIo6aCvMkIY1SXSlJkqs8gGpC3o pKT2w/tX9iUrAAUA/YGEYTVPsgu8/lwTV6Q/TXMFuN7XU5K93hgmFvnNx3Of5ySE TOc6HmiI2ThxRgizbgG7zGTAbVS0ku0HHSlMisk4kASgwZZHYCnjK30pa39GRQ0T wf8g9INJsZM9xaHm85Ld748HvvGodJf2Oe2rwuK8gWWxpGWJBnUgCfvqKpl/tMiQ 5fBPzUfqIpP99SUXxON7O2kUQy6phoShwwXkNimNeEu0g2+FPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNn1lWVq9Sv4ZgLYF1ZuHbJTgv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOWVjMTc5MTktMGZlYS0z ZGUxLWFhODItNTNhYWE4ZThiNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucLnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq8On2ozYeVR8W2v+r+EYEn4sqlScbBckahlOeaLHmU6e0cvFCtDm9s note56yDXn2LGmM5qSQu2RoYplvG8aR2u8DmpP1HyNiVoDqhxJBlAW5pmyG9B72X wihRUMR9D7wP4QpT1RyDUWwDKb9c1japvjPqEFmW6eB2PrG7tE3J9B+6Nhe0kKUw iSEGiU7ALDn4Oc/5UbqUyJVNrNkb8rZFO0FJ/z37NpbkQG6l8uami8Btaqe9t7zs MyPWrtNAOQsrEswuvbeIAo2VILfrJQ6eBSgt+8OLY1iwAqLK5zNUhO5LEyvPFA8z nKUhHBhDkkElymM/KF62JFgVr/BqFCo= -----END CERTIFICATE-----Generated at Fri Feb 14 10:30:02 2025 by rpki-client