$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f46b662d-04c5-3bd1-8a44-62ddf5f03532.roa File: f46b662d-04c5-3bd1-8a44-62ddf5f03532.roa (raw, json) Hash identifier: avlINbNb9ueN3b+uAZR7f7yI3Nf+QvwnXvd6XGYdqEs= Subject key identifier: 65:67:CE:38:85:1B:F5:C5:2F:BC:B9:D4:89:D1:9D:33:79:74:6E:D9 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584888C75FF3E98883422FBCAF40 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f46b662d-04c5-3bd1-8a44-62ddf5f03532.roa Signing time: Mon 13 Jan 2025 19:58:32 +0000 ROA not before: Mon 13 Jan 2025 19:58:32 +0000 ROA not after: Sun 13 Apr 2025 18:58:32 +0000 asID: 19148 IP address blocks: 173.211.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:c7:5f:f3:e9:88:83:42:2f:bc:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 13 19:58:32 2025 GMT Not After : Apr 13 18:58:32 2025 GMT Subject: CN=2227b2ed-8092-4d5d-995c-583e5bacb790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:21:0f:74:9e:04:f7:a5:6a:21:da:e4:4d: ba:6f:d1:13:16:46:8e:5a:6b:0d:7e:2d:38:84:1c: 74:7e:00:0d:1c:d2:83:55:4a:14:96:60:21:ae:33: 1f:81:1d:cf:1f:d3:42:fa:3c:a6:7d:fd:28:27:c0: 1e:8e:4d:5a:69:82:42:38:c4:c2:fd:3f:0d:9b:0b: 35:91:7f:35:69:fb:21:b9:ab:be:dc:2a:ae:8e:97: d5:5c:c9:76:dc:89:fe:b5:70:d3:d3:2f:a4:77:66: 75:ab:fd:0d:e8:e4:a8:9f:68:9b:47:5a:21:45:69: 03:1c:db:0d:02:f4:e3:50:c6:95:0a:b2:14:37:ba: 93:15:16:6f:03:54:d0:29:6b:4d:7f:9f:72:06:7d: 65:55:0d:8e:44:af:c6:cb:dd:80:91:27:f2:d2:27: 24:7e:a4:f9:4f:48:2c:ac:b4:d1:79:d6:46:da:4d: b9:4b:c2:71:0d:8c:8d:d1:22:81:2c:dd:2d:26:20: ab:d1:0d:29:21:96:eb:2a:99:81:b0:b5:25:2c:a1: 4b:f5:15:d7:b6:2a:9a:e5:7e:d3:4f:b7:05:45:e7: 05:c3:a8:73:ed:c1:5c:25:0f:f8:d5:3e:f0:3e:4b: c7:ed:70:a4:1b:38:88:dc:e1:91:e3:13:b3:bf:2c: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:67:CE:38:85:1B:F5:C5:2F:BC:B9:D4:89:D1:9D:33:79:74:6E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f46b662d-04c5-3bd1-8a44-62ddf5f03532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b5:0e:b4:67:48:17:2b:39:f8:75:4d:f3:01:cf:e1:4f:4f: cf:80:c2:d5:a6:98:1e:5f:48:ad:06:eb:25:43:1e:03:77:8e: 5d:be:4d:25:36:38:b4:07:4c:af:0f:a4:97:34:c1:e7:e1:20: b1:26:ee:ba:62:43:b8:a7:b1:df:b3:7d:3c:41:d0:b3:4e:62: 96:dc:31:74:1d:db:1a:99:01:cc:c4:3b:f0:ce:40:46:dc:c0: 56:a2:93:07:c7:f3:5c:83:65:d1:5f:fe:ba:69:4d:3d:97:bf: d6:42:e3:3c:7c:0c:20:c7:f1:84:3e:bc:01:25:bc:4b:0b:c5: c5:5e:c9:e5:b6:74:ce:ea:a7:f5:eb:d6:75:a5:ed:56:c5:05: 7f:ed:fe:63:24:9a:3a:0f:6c:7f:64:e8:18:4f:2f:18:08:db: 37:71:c3:fc:eb:03:dd:fe:d8:8c:14:2d:3b:72:b5:84:a2:1a: 95:32:00:c0:27:94:c9:fd:72:7a:43:6f:2d:09:19:9b:5c:be: c1:c2:08:e0:d4:9f:fd:41:0e:0f:ad:0b:5e:0b:f3:ef:5c:df: 66:5e:4a:1a:8b:17:42:65:18:fc:c8:4c:aa:38:ca:dd:bf:3a: ae:59:bc:ad:22:2f:5e:ee:df:60:0e:9f:07:f0:21:39:86:10: d6:de:26:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIx1/z6YiDQi+8r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDExMzE5NTgzMloXDTI1MDQxMzE4NTgzMlowLzEtMCsGA1UEAxMk MjIyN2IyZWQtODA5Mi00ZDVkLTk5NWMtNTgzZTViYWNiNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDwhD3SeBPelaiHa5E26b9ETFkaOWmsNfi04 hBx0fgANHNKDVUoUlmAhrjMfgR3PH9NC+jymff0oJ8Aejk1aaYJCOMTC/T8Nmws1 kX81afshuau+3CqujpfVXMl23In+tXDT0y+kd2Z1q/0N6OSon2ibR1ohRWkDHNsN AvTjUMaVCrIUN7qTFRZvA1TQKWtNf59yBn1lVQ2ORK/Gy92AkSfy0ickfqT5T0gs rLTRedZG2k25S8JxDYyN0SKBLN0tJiCr0Q0pIZbrKpmBsLUlLKFL9RXXtiqa5X7T T7cFRecFw6hz7cFcJQ/41T7wPkvH7XCkGziI3OGR4xOzvyyOcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVnzjiFG/XFL7y51InRnTN5dG7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjQ2YjY2MmQtMDRjNS0z YmQxLThhNDQtNjJkZGY1ZjAzNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy1DrRnSBcrOfh1TfMBz+FPT8+AwtWmmB5fSK0G6yVDHgN3jl2+TSU2 OLQHTK8PpJc0wefhILEm7rpiQ7insd+zfTxB0LNOYpbcMXQd2xqZAczEO/DOQEbc wFaikwfH81yDZdFf/rppTT2Xv9ZC4zx8DCDH8YQ+vAElvEsLxcVeyeW2dM7qp/Xr 1nWl7VbFBX/t/mMkmjoPbH9k6BhPLxgI2zdxw/zrA93+2IwULTtytYSiGpUyAMAn lMn9cnpDby0JGZtcvsHCCODUn/1BDg+tC14L8+9c32ZeShqLF0JlGPzITKo4yt2/ Oq5ZvK0iL17u32AOnwfwITmGENbeJiU= -----END CERTIFICATE-----Generated at Wed Feb 5 14:53:39 2025 by rpki-client