$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f5edc0f9-6827-3c57-b54c-d5cec20e0b58.roa File: f5edc0f9-6827-3c57-b54c-d5cec20e0b58.roa (raw, json) Hash identifier: QBOO0R1hmDq7ltAvjKlgBQKVwVxpJhKsqdE9jB4BslU= Subject key identifier: F9:FD:F8:64:5F:CC:9A:19:3E:AD:78:95:87:64:69:20:91:CF:43:C1 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858487DD1554EC914925D56FA1600 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f5edc0f9-6827-3c57-b54c-d5cec20e0b58.roa Signing time: Thu 09 Jan 2025 21:44:43 +0000 ROA not before: Thu 09 Jan 2025 21:44:43 +0000 ROA not after: Wed 09 Apr 2025 20:44:43 +0000 asID: 21769 IP address blocks: 198.89.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7d:d1:55:4e:c9:14:92:5d:56:fa:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jan 9 21:44:43 2025 GMT Not After : Apr 9 20:44:43 2025 GMT Subject: CN=34f689a8-2a73-4689-8030-b3d0defd6889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:af:24:9e:cd:1e:33:66:66:90:33:6a:4b: cf:42:bb:dd:b3:dd:ac:fc:a0:32:5b:14:6d:d9:9d: 2d:71:6a:95:fd:84:fb:a1:9d:e0:36:b9:af:dc:6a: e0:ad:e0:56:1a:e3:ca:7e:b9:2c:fb:19:05:8f:69: 95:e0:99:57:2b:ff:a0:5f:98:f4:0d:04:44:05:2d: cd:90:ae:1f:9a:a7:bc:fe:11:62:1d:37:2c:97:b4: 7b:a9:d6:ad:4a:c7:ab:32:d9:b4:d4:37:1f:e8:5e: 41:e3:bf:b1:1a:c8:1b:f2:a1:34:be:e0:ed:e2:72: b3:8b:7b:3a:7c:4e:63:9a:44:ae:2d:0f:51:59:c6: b6:47:fa:e9:ad:35:82:76:4d:67:ec:1e:fa:01:92: 27:b4:d8:f1:e9:0e:2a:26:89:f9:2b:83:71:a6:e5: e9:68:1c:20:58:c9:9e:ae:49:9b:74:72:0c:25:7b: 79:ed:62:30:bc:ed:33:07:2d:d5:a2:ad:af:bc:23: 2f:f7:de:f2:21:d1:15:41:d2:86:be:96:2a:03:ca: 30:d8:a4:d9:0b:10:8d:ed:0e:14:50:65:40:f1:bb: b5:3f:58:64:d4:18:30:a1:43:bb:4f:81:da:04:47: e8:79:b4:9e:a0:82:bf:61:8e:61:63:b6:e2:be:e8: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:F8:64:5F:CC:9A:19:3E:AD:78:95:87:64:69:20:91:CF:43:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f5edc0f9-6827-3c57-b54c-d5cec20e0b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:b3:33:e8:3e:30:47:6d:45:7e:b9:d3:01:7b:a3:ac:8b:eb: 23:e8:d9:73:fe:b3:9f:87:a3:20:5b:d7:36:5a:bd:29:3a:84: f9:11:41:d9:19:06:f8:96:9a:c7:b1:20:8b:15:18:80:18:69: c5:2f:69:2b:dd:5b:c2:de:b4:e0:dd:c0:12:4a:a1:3b:2a:b5: f3:86:fa:d3:b8:9c:76:e8:37:2b:76:b6:8f:e0:87:5d:fa:a2: 8b:cd:18:b5:86:3c:83:73:e2:58:98:c2:b2:1b:28:68:4b:95: d3:b1:fd:7c:fb:da:a4:4b:86:91:9c:e1:54:12:f4:d8:a7:23: 48:a2:91:42:4f:c5:8f:b0:e8:e2:87:2b:44:8f:78:e2:6d:13: 94:18:ff:50:0f:17:57:ca:f7:d9:10:c6:1d:5f:1a:e8:f9:52: a9:5c:a6:d5:e2:d5:6e:15:80:c7:51:d9:f2:f1:88:1c:da:bd: ad:30:27:b7:86:6e:42:89:b4:76:37:45:24:84:4d:89:a2:a0: 39:c6:9e:d3:c1:9c:b0:7c:b7:ed:bc:9c:d1:9f:0e:9b:14:92: aa:9e:d1:f7:ff:bf:86:c2:80:4e:e8:a4:09:5d:b0:cc:af:7f: 34:da:cd:12:30:fa:2d:8c:ef:60:90:25:81:99:b8:ae:4b:82: 50:aa:25:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh90VVOyRSSXVb6FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDEwOTIxNDQ0M1oXDTI1MDQwOTIwNDQ0M1owLzEtMCsGA1UEAxMk MzRmNjg5YTgtMmE3My00Njg5LTgwMzAtYjNkMGRlZmQ2ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3CvJJ7NHjNmZpAzakvPQrvds92s/KAyWxRt 2Z0tcWqV/YT7oZ3gNrmv3GrgreBWGuPKfrks+xkFj2mV4JlXK/+gX5j0DQREBS3N kK4fmqe8/hFiHTcsl7R7qdatSserMtm01Dcf6F5B47+xGsgb8qE0vuDt4nKzi3s6 fE5jmkSuLQ9RWca2R/rprTWCdk1n7B76AZIntNjx6Q4qJon5K4NxpuXpaBwgWMme rkmbdHIMJXt57WIwvO0zBy3Voq2vvCMv997yIdEVQdKGvpYqA8ow2KTZCxCN7Q4U UGVA8bu1P1hk1BgwoUO7T4HaBEfoebSeoIK/YY5hY7bivuhJJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn9+GRfzJoZPq14lYdkaSCRz0PBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjVlZGMwZjktNjgyNy0z YzU3LWI1NGMtZDVjZWMyMGUwYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxllkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmzM+g+MEdtRX650wF7o6yL6yPo2XP+s5+HoyBb1zZavSk6hPkRQdkZ BviWmsexIIsVGIAYacUvaSvdW8LetODdwBJKoTsqtfOG+tO4nHboNyt2to/gh136 oovNGLWGPINz4liYwrIbKGhLldOx/Xz72qRLhpGc4VQS9NinI0iikUJPxY+w6OKH K0SPeOJtE5QY/1APF1fK99kQxh1fGuj5UqlcptXi1W4VgMdR2fLxiBzava0wJ7eG bkKJtHY3RSSETYmioDnGntPBnLB8t+28nNGfDpsUkqqe0ff/v4bCgE7opAldsMyv fzTazRIw+i2M72CQJYGZuK5LglCqJe4= -----END CERTIFICATE-----Generated at Wed Feb 5 14:48:05 2025 by rpki-client