$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a7451f8e-0af8-3bff-9a7d-f960111c8c7c.roa File: a7451f8e-0af8-3bff-9a7d-f960111c8c7c.roa (raw, json) Hash identifier: WvvrObnTzoBsy/v7xp4jtNkyUoQQxB0U+z0Qu/UM0lA= Subject key identifier: 31:66:50:79:E0:83:34:CD:EC:BB:27:83:24:ED:A2:0B:A4:FE:6E:73 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848AC60D3A21B070CAA926D7034 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a7451f8e-0af8-3bff-9a7d-f960111c8c7c.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 395839 IP address blocks: 216.74.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d3:a2:1b:07:0c:aa:92:6d:70:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=57eb64c5-1135-4a4d-9846-356ae9be38c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f7:e7:b9:56:c7:27:fd:20:12:00:a1:9b:4b: b1:2d:44:0a:6e:8f:6d:71:4e:12:45:37:c6:71:5f: d8:38:a6:36:06:e6:46:54:37:17:c6:53:d3:5d:b0: 5f:80:dc:63:9e:4e:a9:91:f3:fd:b8:1b:92:41:2d: d7:11:85:21:2c:27:9d:b4:6f:c7:b2:d1:39:37:ca: b3:6f:4e:dc:cd:c7:27:2b:c3:10:78:53:28:55:00: 96:7f:29:43:c1:19:7e:19:ee:96:df:b9:8f:da:5a: fd:a0:8e:e7:67:95:87:ec:45:64:1d:95:60:ea:52: ab:86:77:18:e9:9b:05:56:2e:67:46:5d:e9:f7:06: 49:e2:b3:a9:e7:15:6e:ee:2d:ef:53:9c:b7:df:36: 58:71:a2:e1:8c:93:4d:92:55:61:bf:ca:43:a3:28: f3:78:2e:97:bc:0e:3c:77:43:9f:dd:10:2f:62:db: 94:8a:8a:fa:e7:cc:df:16:50:7e:01:d1:a4:68:41: 84:76:9e:00:5c:86:e6:77:70:2e:d1:39:fe:ec:e2: 01:c8:a7:ed:f6:20:98:94:f5:30:38:72:4b:8d:02: e0:7a:53:5c:1d:89:9a:80:da:7c:14:42:40:fa:ac: cd:c9:dd:a0:b3:63:7a:3d:30:22:4e:bc:94:b7:25: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:66:50:79:E0:83:34:CD:EC:BB:27:83:24:ED:A2:0B:A4:FE:6E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a7451f8e-0af8-3bff-9a7d-f960111c8c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 216.74.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:19:6d:fb:a5:14:65:39:e6:06:52:cd:84:3c:40:e7:85:a4: 54:e2:ff:35:67:98:97:db:b2:0f:86:bb:49:3d:e4:a8:9a:aa: 46:71:2e:c7:16:a5:fb:6c:fd:80:40:f9:0c:4c:a2:18:59:78: 65:3d:50:95:59:c0:4d:ec:56:f4:13:f2:f1:dd:21:e7:7f:74: 0b:18:af:29:95:73:22:1f:d6:dd:d7:0c:5c:eb:5c:89:34:3b: 92:bf:56:c0:5d:c8:35:94:c4:a9:32:51:91:b2:5f:90:8d:71: fa:08:71:e6:ca:75:7c:39:5a:01:ac:f1:23:9b:b1:83:7b:13: 64:11:37:68:90:bb:14:8f:fa:6c:06:64:f1:c8:69:f2:36:94: cf:c2:a8:9e:ee:20:86:82:31:00:b5:97:78:ac:6f:0f:b2:20: c6:fe:07:1e:67:50:49:d7:21:10:62:fe:0d:3a:bb:35:34:ff: 01:af:88:7f:78:00:54:aa:f3:23:ab:28:17:70:5f:98:0e:4c: b4:a0:5d:02:85:0a:ea:a8:19:b9:d1:bb:4a:c2:35:62:5c:c3: e5:e3:a8:5a:77:51:8a:78:d6:29:f1:9b:9a:d3:22:5a:56:35: 2d:43:f7:fe:c7:b9:b3:67:c9:51:86:41:d3:b2:7a:c2:e6:3b: c2:a5:81:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNOiGwcMqpJtcDQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk NTdlYjY0YzUtMTEzNS00YTRkLTk4NDYtMzU2YWU5YmUzOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvfnuVbHJ/0gEgChm0uxLUQKbo9tcU4SRTfG cV/YOKY2BuZGVDcXxlPTXbBfgNxjnk6pkfP9uBuSQS3XEYUhLCedtG/HstE5N8qz b07czccnK8MQeFMoVQCWfylDwRl+Ge6W37mP2lr9oI7nZ5WH7EVkHZVg6lKrhncY 6ZsFVi5nRl3p9wZJ4rOp5xVu7i3vU5y33zZYcaLhjJNNklVhv8pDoyjzeC6XvA48 d0Of3RAvYtuUior658zfFlB+AdGkaEGEdp4AXIbmd3Au0Tn+7OIByKft9iCYlPUw OHJLjQLgelNcHYmagNp8FEJA+qzNyd2gs2N6PTAiTryUtyXhJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFmUHnggzTN7LsngyTtoguk/m5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTc0NTFmOGUtMGFmOC0z YmZmLTlhN2QtZjk2MDExMWM4YzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOUZbfulFGU55gZSzYQ8QOeFpFTi/zVnmJfbsg+Gu0k95KiaqkZxLscW pfts/YBA+QxMohhZeGU9UJVZwE3sVvQT8vHdIed/dAsYrymVcyIf1t3XDFzrXIk0 O5K/VsBdyDWUxKkyUZGyX5CNcfoIcebKdXw5WgGs8SObsYN7E2QRN2iQuxSP+mwG ZPHIafI2lM/CqJ7uIIaCMQC1l3isbw+yIMb+Bx5nUEnXIRBi/g06uzU0/wGviH94 AFSq8yOrKBdwX5gOTLSgXQKFCuqoGbnRu0rCNWJcw+XjqFp3UYp41inxm5rTIlpW NS1D9/7HubNnyVGGQdOyesLmO8KlgYo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:22 2025 by rpki-client