$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e1127a1a-9930-3595-9653-2fa98ca9dae8.roa File: e1127a1a-9930-3595-9653-2fa98ca9dae8.roa (raw, json) Hash identifier: eqSdvoXlogBVGqPbO5FAiB5Jt1m+8/0Grli3YiiHbFo= Subject key identifier: 40:BE:06:70:37:92:77:1A:A2:73:35:79:F6:06:FD:9C:34:C5:3B:27 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858494B640FCF1570A007D156E700 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e1127a1a-9930-3595-9653-2fa98ca9dae8.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 19437 IP address blocks: 173.211.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0f:cf:15:70:a0:07:d1:56:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=5de24572-d774-41e2-a81e-cabc928a0a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:d0:c5:ed:68:d9:a7:a8:f1:24:bd:86:30: d3:0a:fe:0c:cd:62:9b:c3:41:32:9c:7a:79:74:cc: 8e:d6:cf:4c:31:3f:51:45:ab:7a:62:06:45:53:5d: 4b:98:87:14:6b:30:e3:94:4e:38:66:cb:2a:77:ff: 41:5d:45:87:44:48:05:a3:95:86:63:96:ed:2d:89: 30:08:06:3b:a3:50:cf:18:e1:88:78:48:12:b7:d6: 49:b1:30:1e:3e:c6:49:f2:f6:6e:4b:a0:10:89:26: 6d:30:58:5c:98:3c:53:29:b0:20:60:3d:13:d3:00: d1:6e:f8:45:e2:21:90:c3:ec:e0:d0:c2:bf:65:f0: 2e:6e:f3:85:e8:1f:31:76:06:e2:88:67:a6:46:5b: 0f:56:10:6f:ba:9a:24:4d:3b:0a:b1:41:0c:5b:e4: d9:99:d3:44:46:c2:0b:78:dd:05:ab:4c:02:51:dd: 8a:9f:b1:ce:f4:df:ab:79:74:95:17:8d:8d:cf:81: 57:15:af:d8:dc:e4:f6:9c:b7:4c:b7:b3:34:fc:b6: df:ba:80:6a:47:bb:2b:d2:9d:52:a1:3f:d0:8a:05: 52:ab:9c:2a:5b:28:41:cd:47:ce:7f:64:de:b7:4c: 82:a5:ec:29:36:f3:69:04:20:10:31:e1:9e:00:a4: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BE:06:70:37:92:77:1A:A2:73:35:79:F6:06:FD:9C:34:C5:3B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e1127a1a-9930-3595-9653-2fa98ca9dae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f6:bc:8c:79:1b:b5:1b:f3:f1:15:ac:7b:e1:ff:16:0d:68: 9c:a8:2b:4f:56:98:2a:86:9c:4e:30:35:09:5e:5d:b3:10:f0: 29:ad:7f:a2:84:07:27:47:36:7c:f3:0e:d7:f1:ab:64:09:e7: c8:3a:8c:35:c9:f9:53:c4:34:e6:b4:42:85:02:af:b5:e0:b0: 4f:7d:bb:e3:a9:c0:5b:4d:9c:b8:b8:fb:9d:41:84:3b:cb:09: 93:68:b0:b3:65:1b:41:d2:e9:49:54:86:df:98:94:94:0f:28: 00:be:34:de:40:bb:73:69:ec:02:f0:b8:3b:b2:5e:48:0a:3e: 88:19:8f:0b:c7:0c:0e:c5:d3:8d:76:76:83:da:2b:f2:00:3e: 92:0a:1f:e5:8a:61:9b:83:e5:47:df:6c:f4:1b:84:a7:32:6e: 50:11:54:99:c5:f6:0e:05:ab:23:bb:97:e3:95:ff:2c:e4:d4: eb:af:ef:97:e2:fa:76:fc:b0:d7:a0:60:5e:dd:5d:ab:5d:6a: 17:e3:a6:ab:b5:18:99:b8:b9:e8:33:d0:d2:ef:b6:e3:19:03: 46:59:6e:42:05:2c:a5:3f:7b:be:cc:99:ff:b3:eb:ba:0e:87: 71:fd:60:da:0c:67:b3:95:43:47:db:b0:09:1a:d6:7e:55:91: 3b:6b:fc:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA/PFXCgB9FW5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NWRlMjQ1NzItZDc3NC00MWUyLWE4MWUtY2FiYzkyOGEwYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV/Qxe1o2aeo8SS9hjDTCv4MzWKbw0EynHp5 dMyO1s9MMT9RRat6YgZFU11LmIcUazDjlE44Zssqd/9BXUWHREgFo5WGY5btLYkw CAY7o1DPGOGIeEgSt9ZJsTAePsZJ8vZuS6AQiSZtMFhcmDxTKbAgYD0T0wDRbvhF 4iGQw+zg0MK/ZfAubvOF6B8xdgbiiGemRlsPVhBvupokTTsKsUEMW+TZmdNERsIL eN0Fq0wCUd2Kn7HO9N+reXSVF42Nz4FXFa/Y3OT2nLdMt7M0/LbfuoBqR7sr0p1S oT/QigVSq5wqWyhBzUfOf2Tet0yCpewpNvNpBCAQMeGeAKSguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC+BnA3kncaonM1efYG/Zw0xTsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZTExMjdhMWEtOTkzMC0z NTk1LTk2NTMtMmZhOThjYTlkYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX2vIx5G7Ub8/EVrHvh/xYNaJyoK09WmCqGnE4wNQleXbMQ8Cmtf6KE BydHNnzzDtfxq2QJ58g6jDXJ+VPENOa0QoUCr7XgsE99u+OpwFtNnLi4+51BhDvL CZNosLNlG0HS6UlUht+YlJQPKAC+NN5Au3Np7ALwuDuyXkgKPogZjwvHDA7F0412 doPaK/IAPpIKH+WKYZuD5UffbPQbhKcyblARVJnF9g4FqyO7l+OV/yzk1Ouv75fi +nb8sNegYF7dXatdahfjpqu1GJm4uegz0NLvtuMZA0ZZbkIFLKU/e77Mmf+z67oO h3H9YNoMZ7OVQ0fbsAka1n5VkTtr/Po= -----END CERTIFICATE-----Generated at Sun Apr 27 02:40:52 2025 by rpki-client