$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa File: f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa (raw, json) Hash identifier: HmkuQysCA6Gskzi7AKP6HCOPXGhFl/RfQTVcBUxMFuE= Subject key identifier: BE:D2:97:A8:16:6A:9B:55:72:91:E0:BC:63:9B:90:FB:22:80:BE:B9 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848AF2B847349A5AA9C394A5940 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 396356 IP address blocks: 173.211.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:84:73:49:a5:aa:9c:39:4a:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=33c7e2fb-0493-4822-ad34-3d8652c5163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:63:e0:cd:f8:52:08:ed:97:e9:ea:fc:5c: 7a:55:b9:64:8f:ab:1f:8c:bb:80:1d:c0:fc:dd:06: 86:86:0a:65:72:a6:82:05:f0:b2:78:dd:1a:a9:96: 6e:0a:b1:a3:84:6a:02:c7:51:92:ec:78:2d:29:7a: 27:e0:6a:07:e7:e1:22:a1:e2:a4:98:e2:e3:e0:b6: a1:66:c8:85:33:9e:4f:3d:de:9c:05:25:10:44:04: 6f:03:35:48:9a:b0:99:c2:73:b2:8e:1f:7c:ac:1f: af:5d:47:2e:de:a8:69:b0:8c:f6:80:32:ff:94:a2: 7c:df:ee:f6:bf:72:80:69:76:08:ea:64:8e:cc:02: 82:95:98:99:44:76:39:ba:2c:f1:e9:40:df:5d:cd: a5:0b:d1:f2:0e:52:da:6f:ba:ce:d9:89:0b:a6:07: 37:53:d9:b9:d0:f7:fb:d2:95:4a:1e:3d:e7:7a:33: 74:5e:81:29:f7:71:9a:89:49:5b:32:71:b5:b0:21: 6c:2e:f9:27:e4:04:ae:69:8f:40:a8:2b:83:dd:b6: a1:28:0a:c3:d0:3e:07:a3:df:4a:e1:a0:40:d1:86: 2a:18:33:22:91:86:1f:7c:09:9e:d7:3a:87:44:d6: ae:89:0a:79:37:55:7b:65:b8:7e:96:95:c2:d2:78: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:97:A8:16:6A:9B:55:72:91:E0:BC:63:9B:90:FB:22:80:BE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:0d:a8:4b:f0:7d:c1:76:cd:00:bc:fe:27:4b:6e:94:09:c5: 63:ee:61:3e:2b:7f:5c:43:d8:3d:66:02:1d:05:92:2c:f3:08: 15:e1:df:a1:d8:7c:94:54:65:ae:91:de:3e:4f:fe:9e:4d:8b: 60:48:7e:28:29:42:7d:e4:11:57:00:32:7d:d1:6f:f6:c6:34: 68:46:ed:5e:5e:15:fc:0a:18:0c:5c:1a:76:f2:10:6a:dd:f7: 5c:7d:4f:1f:7b:d6:bf:54:7f:5c:a7:bb:0a:52:00:6f:fc:73: c7:4c:61:67:0b:fe:04:31:21:f3:3f:46:b0:46:04:d2:23:12: 05:5d:9d:ed:40:cf:30:d9:42:55:d2:47:93:f8:0e:cc:bf:c6: 02:4e:a8:bd:18:f3:df:3f:ee:e0:93:88:4d:e6:f0:d7:1e:17: e9:84:a4:69:c4:b4:48:52:d7:e3:fd:cc:b3:d9:52:3b:a9:8d: 83:6d:59:07:6d:0f:82:0d:1c:86:bf:61:9f:d5:74:e7:e3:b3: 68:c2:f8:7f:82:f6:b2:01:e7:d0:f2:1d:e6:ff:68:03:d9:36: 62:28:4e:d3:2b:73:98:0c:3a:a4:16:90:6e:52:6f:da:02:24: 0c:21:31:ed:5e:48:59:42:08:81:0a:a6:e9:37:08:6e:12:17: 1d:4c:8d:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4RzSaWqnDlKWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MzNjN2UyZmItMDQ5My00ODIyLWFkMzQtM2Q4NjUyYzUxNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVZj4M34Ugjtl+nq/Fx6Vblkj6sfjLuAHcD8 3QaGhgplcqaCBfCyeN0aqZZuCrGjhGoCx1GS7HgtKXon4GoH5+EioeKkmOLj4Lah ZsiFM55PPd6cBSUQRARvAzVImrCZwnOyjh98rB+vXUcu3qhpsIz2gDL/lKJ83+72 v3KAaXYI6mSOzAKClZiZRHY5uizx6UDfXc2lC9HyDlLab7rO2YkLpgc3U9m50Pf7 0pVKHj3nejN0XoEp93GaiUlbMnG1sCFsLvkn5ASuaY9AqCuD3bahKArD0D4Ho99K 4aBA0YYqGDMikYYffAme1zqHRNauiQp5N1V7Zbh+lpXC0niRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7Sl6gWaptVcpHgvGObkPsigL65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjA0MGRiODctOWNjMi0z NWY0LWI1Y2QtNTQ2NWU1OWEzYjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0NqEvwfcF2zQC8/idLbpQJxWPuYT4rf1xD2D1mAh0FkizzCBXh36HY fJRUZa6R3j5P/p5Ni2BIfigpQn3kEVcAMn3Rb/bGNGhG7V5eFfwKGAxcGnbyEGrd 91x9Tx971r9Uf1ynuwpSAG/8c8dMYWcL/gQxIfM/RrBGBNIjEgVdne1AzzDZQlXS R5P4Dsy/xgJOqL0Y898/7uCTiE3m8NceF+mEpGnEtEhS1+P9zLPZUjupjYNtWQdt D4INHIa/YZ/VdOfjs2jC+H+C9rIB59DyHeb/aAPZNmIoTtMrc5gMOqQWkG5Sb9oC JAwhMe1eSFlCCIEKpuk3CG4SFx1MjSA= -----END CERTIFICATE-----Generated at Wed Feb 12 11:02:51 2025 by rpki-client