$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa File: eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa (raw, json) Hash identifier: nhI2X0l2cp/UsW6I9HuTtlNrXEeBUeJwExnGTND30z4= Subject key identifier: 0A:73:E6:9C:84:17:FA:FB:9E:E3:9D:67:46:02:F5:7B:80:71:84:81 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285848E16BD259F0696853A79D3380 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 834 IP address blocks: 173.214.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d2:59:f0:69:68:53:a7:9d:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=bf99dd30-d68c-40a9-aefc-38287a87d60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:7e:24:86:44:ae:2b:19:40:5c:47:90:74: 1b:03:62:c4:dc:c7:37:11:0b:5f:84:d9:6a:c4:1f: 10:97:6e:f9:cd:54:01:ab:af:b6:3f:a6:59:52:01: 1a:95:c9:5a:8d:60:05:89:78:5a:dc:f8:43:fd:af: 56:ca:6f:cf:d6:6c:f9:45:9e:45:a0:c9:37:93:12: 44:ab:74:4b:9c:d8:ba:5f:17:c6:39:e9:04:92:86: 90:a0:d9:9f:de:9d:6e:8f:ba:66:98:34:76:71:e2: 2f:e8:96:fa:25:ba:3d:c2:55:d0:3b:c8:21:1d:e7: f0:1b:e5:31:21:c6:b8:5c:85:13:b2:b0:d6:55:fe: 67:b2:a5:80:4f:d1:6d:65:e5:4d:43:84:57:e8:13: 4a:bb:2c:de:ba:5e:f3:53:29:4a:4b:a6:ad:6e:64: 6e:04:c2:60:84:50:e3:00:d6:9c:39:b4:2e:5c:6b: 3e:53:6f:a5:4e:6a:7f:c8:f9:73:f6:10:af:1b:3e: ed:59:0b:94:23:09:9c:58:36:62:05:4e:3f:fe:1b: 5b:89:94:20:a9:9c:e0:22:1e:28:8c:70:b6:32:90: e3:c4:1f:51:00:3e:e3:44:2d:4a:c8:6a:3c:c7:35: c1:96:d3:bf:2e:da:15:98:50:e0:27:58:9a:43:df: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:73:E6:9C:84:17:FA:FB:9E:E3:9D:67:46:02:F5:7B:80:71:84:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.214.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:96:13:dc:ea:68:ad:eb:cb:72:b3:cc:ff:2b:57:61:24:df: 01:47:0a:49:41:11:0a:76:44:12:a7:b3:52:70:85:18:9e:87: d3:13:76:5f:33:bd:91:fd:da:60:b4:80:a2:24:bd:e2:82:3c: c8:e8:be:69:ad:ba:80:0f:e0:e3:bc:3e:1c:ef:0b:04:dc:42: db:b9:d4:14:5d:fd:e8:e9:1c:72:a5:99:02:c2:3b:7b:7b:28: 13:48:fa:fa:ee:4b:84:94:7d:83:31:58:7e:d4:0e:f1:20:cd: 8d:97:a6:fa:ed:91:92:1d:fa:38:e0:cb:7d:8f:23:84:d0:0f: a9:74:57:d4:0e:3e:69:54:5e:4a:57:de:a7:e7:5e:ad:1f:ae: 0b:2d:c0:a7:3c:f1:32:9a:3c:b6:20:b4:10:93:4e:a9:06:05: 0d:48:ab:da:c9:50:80:e5:33:26:05:bb:77:9e:4e:9b:85:b1: e1:b9:92:3b:4e:65:27:49:bf:25:9e:76:2a:32:6d:29:e7:1b: 7d:9c:e5:37:15:c6:68:1a:32:00:f7:84:20:1f:6e:cf:68:e1: 9e:75:2a:2d:97:a2:63:22:b7:57:1a:cd:be:b1:18:a3:98:81: c7:17:ce:fe:df:43:29:1a:64:a0:19:98:6a:5a:7e:1b:84:e9: 83:b1:ed:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9JZ8GloU6edM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YmY5OWRkMzAtZDY4Yy00MGE5LWFlZmMtMzgyODdhODdkNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy9+JIZErisZQFxHkHQbA2LE3Mc3EQtfhNlq xB8Ql275zVQBq6+2P6ZZUgEalclajWAFiXha3PhD/a9Wym/P1mz5RZ5FoMk3kxJE q3RLnNi6XxfGOekEkoaQoNmf3p1uj7pmmDR2ceIv6Jb6Jbo9wlXQO8ghHefwG+Ux Ica4XIUTsrDWVf5nsqWAT9FtZeVNQ4RX6BNKuyzeul7zUylKS6atbmRuBMJghFDj ANacObQuXGs+U2+lTmp/yPlz9hCvGz7tWQuUIwmcWDZiBU4//htbiZQgqZzgIh4o jHC2MpDjxB9RAD7jRC1KyGo8xzXBltO/LtoVmFDgJ1iaQ9/07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApz5pyEF/r7nuOdZ0YC9XuAcYSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZWFmOTFmNzUtMjFhMy0z Zjc4LWFiOTEtN2RlODQ1N2VjMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGWE9zqaK3ry3KzzP8rV2Ek3wFHCklBEQp2RBKns1JwhRieh9MTdl8z vZH92mC0gKIkveKCPMjovmmtuoAP4OO8PhzvCwTcQtu51BRd/ejpHHKlmQLCO3t7 KBNI+vruS4SUfYMxWH7UDvEgzY2XpvrtkZId+jjgy32PI4TQD6l0V9QOPmlUXkpX 3qfnXq0frgstwKc88TKaPLYgtBCTTqkGBQ1Iq9rJUIDlMyYFu3eeTpuFseG5kjtO ZSdJvyWedioybSnnG32c5TcVxmgaMgD3hCAfbs9o4Z51Ki2XomMit1cazb6xGKOY gccXzv7fQykaZKAZmGpafhuE6YOx7aI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:51 2025 by rpki-client