$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cd4e4ed4-5b88-3df6-a0d5-3cce76ba0d0d.roa File: cd4e4ed4-5b88-3df6-a0d5-3cce76ba0d0d.roa (raw, json) Hash identifier: vUOAVsD60R9p0TVqWUdjgSnTrs6ZfIz5Hxg5uZpAmqI= Subject key identifier: 83:04:D4:AF:C3:29:01:CA:3F:1B:86:CC:D1:08:63:3D:61:B9:98:8E Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848AF2B8195CDDDBD07FB06D480 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cd4e4ed4-5b88-3df6-a0d5-3cce76ba0d0d.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 211373 IP address blocks: 104.224.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:81:95:cd:dd:bd:07:fb:06:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=dae440e5-9b06-483e-b581-73167144416a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:c8:78:ca:d5:4a:1c:36:e3:20:e9:6d:da: 04:ba:02:71:e1:78:d7:74:22:75:5b:69:52:ab:87: fb:9a:5d:19:b2:21:68:00:ca:9d:9c:23:2b:16:46: c6:7a:60:86:a9:a2:df:f2:01:4c:74:6a:7c:fc:bb: 15:d4:30:64:bb:0c:cf:4c:83:e4:d2:27:2c:1c:92: 6b:9e:18:dc:45:11:6d:97:ea:3b:18:66:d0:bf:01: a6:46:e8:f1:e9:be:6d:e9:6a:c0:e2:1c:fe:7a:e5: 2b:65:2b:3e:30:66:47:5d:bf:3a:64:d5:9e:10:19: b2:ac:92:58:94:23:b2:81:7a:d6:ac:48:d2:1f:d4: b9:a3:8c:12:af:18:0e:b8:ad:57:44:d5:4e:1f:12: 42:c6:55:50:47:71:11:19:e4:e8:af:cc:02:0c:e8: 9f:4d:fb:e6:52:37:63:51:fc:bc:a3:95:67:ea:0e: 28:1c:41:4c:b7:da:bb:20:d8:55:ec:b7:7c:d6:bf: 2f:59:9a:2b:33:27:2b:19:54:0e:e9:ad:a9:fc:13: 59:36:80:6b:df:85:4f:94:2b:ba:70:30:81:b0:85: 11:5d:3e:91:6c:c8:5d:51:07:f5:45:c5:e4:14:d4: 2a:0d:a0:c8:e3:8d:77:6f:6f:bd:24:d8:31:66:0c: 24:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:04:D4:AF:C3:29:01:CA:3F:1B:86:CC:D1:08:63:3D:61:B9:98:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cd4e4ed4-5b88-3df6-a0d5-3cce76ba0d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 104.224.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9e:31:46:76:d7:0f:f9:10:1a:c9:ba:05:71:2b:e0:bb:e4: 99:09:b6:14:8b:53:ca:b4:53:fa:5c:d6:ee:a5:99:5d:54:ba: 8e:f3:0f:db:15:e4:1a:57:d2:8e:23:1c:2a:63:46:1f:3b:e6: 61:38:b6:f7:8b:7a:14:57:c9:e7:3a:a4:c2:34:68:1b:d8:b8: 62:09:a4:52:1a:c4:e0:dc:e8:b6:4d:c8:3b:e7:02:4e:2b:33: 8f:0e:9e:dd:52:e2:1c:05:8b:d9:fa:f7:8c:6d:96:41:f0:0c: 7c:53:62:a0:35:e8:77:41:0b:ae:3c:7f:8a:dc:d5:ae:e1:37: 11:1c:3a:14:00:37:6e:d2:99:f1:01:9e:0f:52:4c:7e:50:92: bb:7c:0b:ba:a3:a8:20:bd:59:72:b0:d2:e9:32:9e:e7:5c:2a: 18:17:18:77:37:2f:a8:4b:d2:2e:6a:d9:b0:cf:31:04:1f:77: 37:8a:49:fe:c1:21:53:f4:6f:ad:fb:2e:bf:93:ed:69:38:bd: 38:47:e5:af:96:72:58:7a:cc:76:70:4d:e8:03:f2:95:63:c5: ac:46:63:1d:77:46:8d:5f:37:de:28:14:bf:6b:de:26:2a:de: 28:28:18:61:c6:68:77:9c:af:a3:8b:7c:90:9e:b5:f9:a4:9d: 23:c0:e9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4GVzd29B/sG1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGFlNDQwZTUtOWIwNi00ODNlLWI1ODEtNzMxNjcxNDQ0MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18rIeMrVShw24yDpbdoEugJx4XjXdCJ1W2lS q4f7ml0ZsiFoAMqdnCMrFkbGemCGqaLf8gFMdGp8/LsV1DBkuwzPTIPk0icsHJJr nhjcRRFtl+o7GGbQvwGmRujx6b5t6WrA4hz+euUrZSs+MGZHXb86ZNWeEBmyrJJY lCOygXrWrEjSH9S5o4wSrxgOuK1XRNVOHxJCxlVQR3ERGeTor8wCDOifTfvmUjdj Ufy8o5Vn6g4oHEFMt9q7INhV7Ld81r8vWZorMycrGVQO6a2p/BNZNoBr34VPlCu6 cDCBsIURXT6RbMhdUQf1RcXkFNQqDaDI4413b2+9JNgxZgwkBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIME1K/DKQHKPxuGzNEIYz1huZiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvY2Q0ZTRlZDQtNWI4OC0z ZGY2LWEwZDUtM2NjZTc2YmEwZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOBKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKeMUZ21w/5EBrJugVxK+C75JkJthSLU8q0U/pc1u6lmV1Uuo7zD9sV 5BpX0o4jHCpjRh875mE4tveLehRXyec6pMI0aBvYuGIJpFIaxODc6LZNyDvnAk4r M48Ont1S4hwFi9n694xtlkHwDHxTYqA16HdBC648f4rc1a7hNxEcOhQAN27SmfEB ng9STH5Qkrt8C7qjqCC9WXKw0ukynudcKhgXGHc3L6hL0i5q2bDPMQQfdzeKSf7B IVP0b637Lr+T7Wk4vThH5a+Wclh6zHZwTegD8pVjxaxGYx13Ro1fN94oFL9r3iYq 3igoGGHGaHecr6OLfJCetfmknSPA6Qk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:32 2025 by rpki-client