$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd26385c-0def-3683-b88b-a128dd3191e3.roa File: bd26385c-0def-3683-b88b-a128dd3191e3.roa (raw, json) Hash identifier: ftgM9wn/9znmFCAb0rjzL4YY/SgB9w/hQS+VffMWe+I= Subject key identifier: FF:1A:C7:67:80:74:C8:AE:03:D1:FB:2A:31:DC:CE:15:60:DA:74:87 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858496E498A634B7B18A535EFA660 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd26385c-0def-3683-b88b-a128dd3191e3.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 209043 IP address blocks: 43.255.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:8a:63:4b:7b:18:a5:35:ef:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=dc34c140-f0a9-4e24-9570-51445fbd2985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:55:3e:79:8e:d2:01:2a:e0:d9:0e:5e:5f:6c: 67:c4:9a:a9:33:b5:59:27:52:89:22:5c:93:04:bc: 2c:e6:a8:2b:f1:e5:79:2f:2f:ed:2f:d9:73:6d:2a: b3:7f:42:e9:e1:1d:a2:e0:2a:72:00:69:fe:cf:2a: e8:b0:79:9f:ab:7e:0c:3f:95:a8:d0:7d:1b:89:0e: 38:7e:e4:32:b2:92:b4:f4:e6:be:59:e7:d9:89:b3: c9:c8:48:7c:50:07:07:91:bc:ca:55:46:e6:2e:d3: 6e:af:d9:c0:ce:8b:be:65:55:1f:f3:f4:c9:24:a4: 75:9b:17:72:76:ae:d2:84:c0:ef:c9:d1:4f:9c:56: c6:64:2d:88:a1:d5:20:e8:16:99:52:f9:2a:60:0e: c7:cb:15:9f:55:2f:60:c4:6a:db:5f:d3:6e:02:cd: 91:1a:b1:72:25:be:0b:a4:2e:92:ba:6d:10:a0:01: 21:76:00:91:6c:af:e4:5b:0b:05:aa:47:66:a9:0a: 65:31:9f:2f:0e:5e:af:c9:91:a9:26:dd:f8:2e:88: 09:d9:3f:d3:6d:8c:9c:6c:de:1f:17:09:e9:c9:40: 7b:56:02:40:9e:fb:ac:ca:f2:78:05:80:29:45:87: f1:28:bc:c4:61:69:5d:87:d1:3d:ce:d7:3f:f9:20: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1A:C7:67:80:74:C8:AE:03:D1:FB:2A:31:DC:CE:15:60:DA:74:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd26385c-0def-3683-b88b-a128dd3191e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 43.255.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:66:07:56:3f:da:12:4c:e5:d5:81:45:95:00:6a:b3:50:96: 0c:85:42:ff:ca:aa:8e:a9:93:41:ad:ab:82:f7:60:10:12:8a: fa:5b:79:0f:bd:7c:aa:f8:00:65:81:0e:74:dc:35:ed:90:69: 6d:cb:d5:d5:f4:ae:49:d1:f5:4c:fb:0e:62:c8:15:3a:4d:8e: 04:60:51:ba:93:92:9e:41:df:f1:f2:ee:13:67:cd:ca:d2:fe: 0c:99:5e:de:b7:b1:fa:14:19:31:ab:8d:59:c3:b4:f3:49:75: 30:49:e2:e5:9d:27:7c:b7:bd:46:3d:d5:5d:93:aa:d6:5e:b2: d4:e7:4e:a6:40:bf:49:1d:5a:8e:d7:62:e9:67:d0:58:71:d1: ac:c3:5f:28:f6:8d:5f:5d:ff:4e:ba:cb:ca:f8:7a:20:64:eb: e2:bf:1b:13:1c:b0:d8:23:11:47:1f:e2:6d:0a:e9:a9:52:ea: 47:0c:cf:cd:18:5d:53:44:ad:75:4d:c9:9e:fe:63:6d:1d:7a: 23:d9:47:c2:20:75:69:4a:7f:19:40:9b:da:6a:c3:c2:21:22: 48:17:30:20:a8:dc:20:cf:57:4c:a1:7c:12:d4:a6:08:2c:9f: 9d:52:50:50:95:9d:13:d6:ca:34:57:cc:a0:11:ae:83:56:6d: d8:6d:bc:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYpjS3sYpTXvpmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ZGMzNGMxNDAtZjBhOS00ZTI0LTk1NzAtNTE0NDVmYmQyOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lU+eY7SASrg2Q5eX2xnxJqpM7VZJ1KJIlyT BLws5qgr8eV5Ly/tL9lzbSqzf0Lp4R2i4CpyAGn+zyrosHmfq34MP5Wo0H0biQ44 fuQyspK09Oa+WefZibPJyEh8UAcHkbzKVUbmLtNur9nAzou+ZVUf8/TJJKR1mxdy dq7ShMDvydFPnFbGZC2IodUg6BaZUvkqYA7HyxWfVS9gxGrbX9NuAs2RGrFyJb4L pC6Sum0QoAEhdgCRbK/kWwsFqkdmqQplMZ8vDl6vyZGpJt34LogJ2T/TbYycbN4f FwnpyUB7VgJAnvusyvJ4BYApRYfxKLzEYWldh9E9ztc/+SCaVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8ax2eAdMiuA9H7KjHczhVg2nSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmQyNjM4NWMtMGRlZi0z NjgzLWI4OGItYTEyOGRkMzE5MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/+8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpmB1Y/2hJM5dWBRZUAarNQlgyFQv/Kqo6pk0Gtq4L3YBASivpbeQ+9 fKr4AGWBDnTcNe2QaW3L1dX0rknR9Uz7DmLIFTpNjgRgUbqTkp5B3/Hy7hNnzcrS /gyZXt63sfoUGTGrjVnDtPNJdTBJ4uWdJ3y3vUY91V2TqtZestTnTqZAv0kdWo7X Yuln0Fhx0azDXyj2jV9d/066y8r4eiBk6+K/GxMcsNgjEUcf4m0K6alS6kcMz80Y XVNErXVNyZ7+Y20deiPZR8IgdWlKfxlAm9pqw8IhIkgXMCCo3CDPV0yhfBLUpggs n51SUFCVnRPWyjRXzKARroNWbdhtvJs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:40 2025 by rpki-client