$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e5409b7e-7219-3484-b789-a42083f54a78.roa File: e5409b7e-7219-3484-b789-a42083f54a78.roa (raw, json) Hash identifier: +pqZ0AGXWwMv2d4It4bD2tT+70KEec1cCRcdTffjmb4= Subject key identifier: E1:DE:6A:F8:69:3E:41:54:03:06:E8:49:7E:5F:81:27:02:C1:05:04 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584869D1A21A6AB80CE9F1BC2080 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e5409b7e-7219-3484-b789-a42083f54a78.roa Signing time: Thu 02 Jan 2025 17:49:09 +0000 ROA not before: Thu 02 Jan 2025 17:49:09 +0000 ROA not after: Wed 02 Apr 2025 16:49:09 +0000 asID: 834 IP address blocks: 104.129.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:d1:a2:1a:6a:b8:0c:e9:f1:bc:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 2 17:49:09 2025 GMT Not After : Apr 2 16:49:09 2025 GMT Subject: CN=b8a6b5fa-412f-4420-b9d8-d9864f1118e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:34:eb:d5:81:58:69:4b:d9:c0:ce:a1:5f:5c: 60:fd:ba:4f:0d:56:ac:70:c5:32:7d:95:e0:b4:52: 8f:f7:da:34:df:20:94:4e:79:ff:ab:66:2d:58:34: 38:3d:af:09:a5:a9:fa:02:05:bd:ac:cc:5e:65:15: 66:05:a9:f6:51:5a:88:4d:57:aa:4d:9a:a5:50:f7: b0:fb:ba:34:38:c7:5e:10:24:c7:10:b5:46:7a:b1: 23:44:ec:9a:5c:72:ba:c7:77:2c:35:71:b1:8d:11: 85:c0:e8:be:ca:1d:95:85:07:71:5f:3c:fa:49:2f: ae:fb:30:68:d5:a1:8b:65:20:ca:7c:03:d4:86:0a: 46:59:a0:9c:07:ab:ce:0f:67:c5:0a:0b:07:c4:20: 0e:94:37:e1:6e:cb:55:4d:80:a5:a0:44:f4:71:e9: cb:87:9f:6c:5c:db:8d:6b:ee:88:f6:07:e5:a2:05: 61:34:95:c5:57:2e:10:72:af:ee:c4:e5:2c:d5:ac: 06:0b:19:e7:8d:b0:8f:80:56:bd:c3:8e:28:97:d2: ef:6b:ca:b0:80:cb:58:8d:d7:e6:23:06:ad:39:fa: c6:4f:dc:df:11:4e:13:d0:40:8d:b0:b0:2f:4c:20: 61:78:38:38:e4:f5:66:5d:43:78:fa:63:aa:78:b9: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:6A:F8:69:3E:41:54:03:06:E8:49:7E:5F:81:27:02:C1:05:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e5409b7e-7219-3484-b789-a42083f54a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 104.129.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:86:17:0d:2f:3f:12:9e:35:19:4c:ca:34:00:fc:9d:0f:44: fe:22:25:a9:41:00:75:1e:fe:f8:bd:63:63:9d:26:69:ed:a9: 0e:c3:32:35:68:1b:38:80:99:7f:62:33:a6:22:e2:49:f5:31: d0:fa:b2:79:f0:c7:75:32:ca:e3:29:4c:86:e7:54:dd:c1:c5: 33:75:96:74:bd:91:95:7a:aa:d1:9f:c7:b1:d3:d0:e5:ec:5b: a4:50:c4:50:b3:1e:a0:dc:33:a1:28:86:16:c3:2d:be:d1:44: 61:53:e0:d5:6c:38:b5:9c:a2:78:3e:d5:49:a0:e6:21:eb:d3: ce:03:6c:32:ea:e3:a0:2a:1c:54:e0:66:d3:b7:00:7e:ed:e9: df:48:cb:b8:d0:82:45:4c:48:1f:e9:94:29:0e:42:6e:cb:82: b9:8c:33:21:d6:61:00:06:23:62:35:ca:4d:dc:90:b6:17:db: fe:c3:ff:2b:0b:bf:a9:bb:c7:77:3c:29:b7:28:4a:bd:78:76: 8a:57:29:6a:ed:94:b8:e3:d2:62:b4:40:2d:21:9c:c3:9b:00: 4f:d2:7e:61:2d:c8:a4:d3:3d:e1:9e:2d:a9:4e:78:37:59:86: f9:fb:73:01:e2:7c:0f:39:88:52:5e:ea:b0:3a:13:63:08:6c: a5:9b:07:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhp0aIaargM6fG8IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEwMjE3NDkwOVoXDTI1MDQwMjE2NDkwOVowLzEtMCsGA1UEAxMk YjhhNmI1ZmEtNDEyZi00NDIwLWI5ZDgtZDk4NjRmMTExOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzTr1YFYaUvZwM6hX1xg/bpPDVascMUyfZXg tFKP99o03yCUTnn/q2YtWDQ4Pa8Jpan6AgW9rMxeZRVmBan2UVqITVeqTZqlUPew +7o0OMdeECTHELVGerEjROyaXHK6x3csNXGxjRGFwOi+yh2VhQdxXzz6SS+u+zBo 1aGLZSDKfAPUhgpGWaCcB6vOD2fFCgsHxCAOlDfhbstVTYCloET0cenLh59sXNuN a+6I9gflogVhNJXFVy4Qcq/uxOUs1awGCxnnjbCPgFa9w44ol9Lva8qwgMtYjdfm IwatOfrGT9zfEU4T0ECNsLAvTCBheDg45PVmXUN4+mOqeLkLhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHeavhpPkFUAwboSX5fgScCwQUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZTU0MDliN2UtNzIxOS0z NDg0LWI3ODktYTQyMDgzZjU0YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaGFw0vPxKeNRlMyjQA/J0PRP4iJalBAHUe/vi9Y2OdJmntqQ7DMjVo GziAmX9iM6Yi4kn1MdD6snnwx3UyyuMpTIbnVN3BxTN1lnS9kZV6qtGfx7HT0OXs W6RQxFCzHqDcM6EohhbDLb7RRGFT4NVsOLWcong+1Umg5iHr084DbDLq46AqHFTg ZtO3AH7t6d9Iy7jQgkVMSB/plCkOQm7LgrmMMyHWYQAGI2I1yk3ckLYX2/7D/ysL v6m7x3c8KbcoSr14dopXKWrtlLjj0mK0QC0hnMObAE/SfmEtyKTTPeGeLalOeDdZ hvn7cwHifA85iFJe6rA6E2MIbKWbB5k= -----END CERTIFICATE-----Generated at Wed Feb 5 14:54:50 2025 by rpki-client