$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa File: e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa (raw, json) Hash identifier: PeZcQ7b7YIzm++5io7y5R4G4Y1XaIFyLc8uS3MlXKAQ= Subject key identifier: 59:A7:EE:6B:B3:EF:2F:F0:8F:C2:FE:17:78:AE:5D:38:75:A4:14:7F Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848A6CB6A97019A7F4456ECFA40 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 21700 IP address blocks: 216.74.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6a:97:01:9a:7f:44:56:ec:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=473408c1-83b1-450c-a5ce-76ecee6df231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:5a:ed:27:5f:c2:6e:b1:40:95:a7:de:c3: fb:30:09:14:3c:4f:d5:de:c8:b1:f4:70:af:2a:2f: 05:f3:e6:ab:50:df:51:94:d3:74:9d:25:95:0a:22: d1:a3:0e:fe:bb:b3:de:4f:d5:31:f3:2b:25:de:d1: ea:6f:e9:aa:f2:78:2a:d8:84:10:a2:d2:bc:06:51: 2e:d5:ff:62:65:28:b9:cc:5d:3d:4c:97:98:a1:29: a3:ea:12:8e:e9:a9:b2:96:3a:0a:93:d1:d0:30:15: 30:5a:8b:37:c5:b0:17:db:c9:a6:2f:7e:0b:77:4e: eb:74:40:58:9c:1d:04:82:1f:3c:df:e7:1c:f5:4a: 65:ba:c3:35:13:26:fb:5c:68:9e:9f:0e:f7:1e:93: 60:3b:7e:6c:d5:9d:84:a4:93:83:23:0c:f1:72:7d: d7:d6:37:db:67:db:7c:20:a0:75:41:62:2a:77:6b: b6:80:a8:48:b6:73:2a:90:e0:3a:15:34:17:fe:e9: d1:2f:67:1c:3a:8b:54:a8:25:6f:55:69:ba:d7:d7: 1b:a8:73:e0:4b:10:9c:8d:10:b8:e1:b8:77:75:76: 6e:3e:65:88:31:17:1d:91:84:81:e4:48:4a:7f:fa: 09:1b:65:09:9b:f7:49:f5:29:72:b8:c2:0c:c2:5b: f1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:EE:6B:B3:EF:2F:F0:8F:C2:FE:17:78:AE:5D:38:75:A4:14:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 216.74.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:85:56:24:71:fc:3c:0d:a4:ee:37:8b:89:07:72:36:4d:02: 46:05:4a:91:1e:b7:33:29:ea:e5:33:5d:6c:a9:71:9c:38:47: 0e:64:6e:e7:41:ab:8b:de:2d:88:c1:47:e8:f3:39:5f:be:e6: f3:bb:92:15:75:3f:63:8b:41:51:c6:6c:7f:7a:05:3b:41:63: 73:84:13:c8:22:52:16:da:d1:cf:97:31:bb:42:1d:e0:78:40: 46:1b:f1:c7:09:f4:50:36:b4:b1:de:41:8c:e4:fc:00:f9:ac: 98:b1:8d:ff:a7:51:55:f3:58:12:c9:df:6f:18:32:e3:0b:e5: cd:be:58:04:df:f2:85:19:54:ac:7e:1d:ae:f2:03:5d:b7:6f: a7:d7:a8:d9:49:4a:36:5b:e3:2b:75:cd:a8:bc:a8:1d:b7:21: 40:60:ff:f1:20:a5:3d:3e:cd:14:71:95:95:b5:bc:68:7c:8d: 1f:ec:8c:c7:d1:14:d5:fe:67:4e:36:d2:10:af:7d:35:c5:c9: 46:d9:e2:eb:6f:b1:db:a3:88:6b:5c:0f:3e:40:d7:06:d4:73: c9:1e:c3:59:53:d5:e5:3f:1c:8e:6c:42:38:9b:02:13:15:15: bc:e0:7a:ec:53:a1:54:67:99:1e:3b:1f:c8:69:88:d6:ff:71: a3:ca:7b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2qXAZp/RFbs+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk NDczNDA4YzEtODNiMS00NTBjLWE1Y2UtNzZlY2VlNmRmMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqda7Sdfwm6xQJWn3sP7MAkUPE/V3six9HCv Ki8F8+arUN9RlNN0nSWVCiLRow7+u7PeT9Ux8ysl3tHqb+mq8ngq2IQQotK8BlEu 1f9iZSi5zF09TJeYoSmj6hKO6amyljoKk9HQMBUwWos3xbAX28mmL34Ld07rdEBY nB0Egh883+cc9UplusM1Eyb7XGienw73HpNgO35s1Z2EpJODIwzxcn3X1jfbZ9t8 IKB1QWIqd2u2gKhItnMqkOA6FTQX/unRL2ccOotUqCVvVWm619cbqHPgSxCcjRC4 4bh3dXZuPmWIMRcdkYSB5EhKf/oJG2UJm/dJ9SlyuMIMwlvxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmn7muz7y/wj8L+F3iuXTh1pBR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZTNkM2JkMDItM2Q1NC0z OGUwLTk1NGQtZDNlOWEzNjA2ZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ep5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESFViRx/DwNpO43i4kHcjZNAkYFSpEetzMp6uUzXWypcZw4Rw5kbudB q4veLYjBR+jzOV++5vO7khV1P2OLQVHGbH96BTtBY3OEE8giUhba0c+XMbtCHeB4 QEYb8ccJ9FA2tLHeQYzk/AD5rJixjf+nUVXzWBLJ328YMuML5c2+WATf8oUZVKx+ Ha7yA123b6fXqNlJSjZb4yt1zai8qB23IUBg//EgpT0+zRRxlZW1vGh8jR/sjMfR FNX+Z0420hCvfTXFyUbZ4utvsdujiGtcDz5A1wbUc8kew1lT1eU/HI5sQjibAhMV FbzgeuxToVRnmR47H8hpiNb/caPKe/A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:51 2025 by rpki-client