$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c7c7810-8bab-31b5-a04b-e1f71f947173.roa File: 3c7c7810-8bab-31b5-a04b-e1f71f947173.roa (raw, json) Hash identifier: pCxxZqsaTsDvn54LmJbsvaEnGZ3g8m25gOrwPgZvOF0= Subject key identifier: 18:30:52:36:48:5A:E7:F8:29:E6:E5:DE:54:DF:52:00:55:1F:9D:07 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858498769B7C503BD81BABE5C5D00 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c7c7810-8bab-31b5-a04b-e1f71f947173.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 399672 IP address blocks: 173.211.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b7:c5:03:bd:81:ba:be:5c:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c1d4a8f5-e578-440f-9a9f-867c1eeed82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:77:09:5c:8e:4a:54:70:29:78:b8:ac:93: 19:f3:0f:39:31:1a:62:0c:7b:98:c4:f8:0b:83:d8: 01:7f:79:a0:df:f7:b1:61:d0:39:cc:a6:15:75:66: 95:22:9f:b6:b9:e6:79:16:84:8a:dd:6b:87:10:ff: c5:5c:2c:41:05:b0:aa:64:ca:5c:21:1c:98:1f:46: b3:63:12:f9:e8:54:f9:0a:ab:11:da:e9:49:90:90: 27:34:fe:a9:f5:c8:dd:55:54:4f:79:94:1c:b3:5a: 0b:19:5e:be:e6:41:fe:f5:70:4b:a5:3c:ab:fd:ca: 32:f3:b2:02:ac:ad:c4:34:5a:d1:dd:80:b0:b3:82: fd:8b:fa:cc:f0:13:ff:53:16:85:33:1b:fc:06:fd: 1d:05:ab:58:ef:07:2f:6b:3c:1a:96:4e:96:ba:a6: 23:ac:c9:8a:7d:b8:12:d8:b6:74:8d:d5:1b:97:86: ee:e4:63:36:2b:25:9b:14:af:22:03:0b:c0:11:93: 0c:fd:69:9b:56:40:e1:2b:1a:e9:51:a6:7e:d9:24: dd:c2:49:f7:b5:0d:8e:56:6a:42:3f:57:38:5d:00: d9:97:80:9e:2b:f0:7d:22:fe:2e:61:b0:43:7c:f3: 92:49:9f:a6:e8:71:5a:e8:8e:01:cf:66:e0:47:aa: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:52:36:48:5A:E7:F8:29:E6:E5:DE:54:DF:52:00:55:1F:9D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3c7c7810-8bab-31b5-a04b-e1f71f947173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c7:f7:a8:23:24:89:07:be:b3:a3:e4:55:63:1a:77:cd:d6: f9:fd:13:7d:56:1d:56:8e:8d:15:35:e4:f1:91:ea:26:fd:82: 79:3f:08:84:f1:54:b6:49:6a:92:14:09:01:ac:7c:62:ee:ef: 19:54:b8:c7:b8:88:e1:6d:8b:61:80:ca:bd:98:e5:54:97:36: 0d:19:eb:6f:7d:dd:01:4c:b0:31:fe:12:e4:a8:cb:44:bb:9b: 1e:c0:19:59:45:31:ae:28:50:43:73:c9:41:f0:59:84:ec:eb: 31:2d:d3:13:fe:a0:51:3f:81:1d:1b:a1:7e:24:82:04:4b:46: 67:48:d4:86:f3:21:20:c1:2c:0f:b4:9c:50:91:e1:b5:13:a2: 7f:4b:3a:de:e8:78:e4:1a:b0:29:19:ec:aa:21:48:01:82:2e: 35:9e:9d:50:2d:a4:e5:a1:b8:1e:18:f6:b8:c1:9d:9b:d0:5e: 4f:09:3a:cf:dd:07:41:01:d1:a1:dd:d2:a5:4f:6a:26:05:82: 75:1b:ee:30:cb:15:eb:39:39:05:b5:d6:f8:01:13:da:26:8d: 02:19:e2:10:20:a6:f7:e8:84:14:a3:e0:3b:06:09:4c:22:ca: 55:51:80:25:d0:69:9f:cd:60:80:57:b8:e4:71:ec:f0:46:54: 1e:95:39:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabfFA72Bur5cXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzFkNGE4ZjUtZTU3OC00NDBmLTlhOWYtODY3YzFlZWVkODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z53CVyOSlRwKXi4rJMZ8w85MRpiDHuYxPgL g9gBf3mg3/exYdA5zKYVdWaVIp+2ueZ5FoSK3WuHEP/FXCxBBbCqZMpcIRyYH0az YxL56FT5CqsR2ulJkJAnNP6p9cjdVVRPeZQcs1oLGV6+5kH+9XBLpTyr/coy87IC rK3ENFrR3YCws4L9i/rM8BP/UxaFMxv8Bv0dBatY7wcvazwalk6WuqYjrMmKfbgS 2LZ0jdUbl4bu5GM2KyWbFK8iAwvAEZMM/WmbVkDhKxrpUaZ+2STdwkn3tQ2OVmpC P1c4XQDZl4CeK/B9Iv4uYbBDfPOSSZ+m6HFa6I4Bz2bgR6rf3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgwUjZIWuf4Kebl3lTfUgBVH50HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2M3Yzc4MTAtOGJhYi0z MWI1LWEwNGItZTFmNzFmOTQ3MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrdNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHH96gjJIkHvrOj5FVjGnfN1vn9E31WHVaOjRU15PGR6ib9gnk/CITx VLZJapIUCQGsfGLu7xlUuMe4iOFti2GAyr2Y5VSXNg0Z62993QFMsDH+EuSoy0S7 mx7AGVlFMa4oUENzyUHwWYTs6zEt0xP+oFE/gR0boX4kggRLRmdI1IbzISDBLA+0 nFCR4bUTon9LOt7oeOQasCkZ7KohSAGCLjWenVAtpOWhuB4Y9rjBnZvQXk8JOs/d B0EB0aHd0qVPaiYFgnUb7jDLFes5OQW11vgBE9omjQIZ4hAgpvfohBSj4DsGCUwi ylVRgCXQaZ/NYIBXuORx7PBGVB6VOWk= -----END CERTIFICATE-----Generated at Sat Apr 26 22:06:21 2025 by rpki-client