$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/891200df-1fd8-3d70-8932-c0cbb249ba2e.roa File: 891200df-1fd8-3d70-8932-c0cbb249ba2e.roa (raw, json) Hash identifier: Ebg2fyNVsz6QmjPOdWAdc8svKouW/8OyzooHxBEFe8Y= Subject key identifier: 58:8F:5C:B4:1B:F1:2B:BC:AE:30:2A:CA:D1:9C:F6:2D:20:13:97:BC Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285849BDDA27C6C75E1F609EAB9C80 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/891200df-1fd8-3d70-8932-c0cbb249ba2e.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 399672 IP address blocks: 173.211.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:27:c6:c7:5e:1f:60:9e:ab:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=442b98c1-3576-4303-8f32-19bfe7f6b4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:63:ae:06:ef:b9:9a:88:71:85:9e:0f:5f: 03:37:4e:50:59:25:50:a7:84:3f:ba:2a:c7:6a:f4: 3a:eb:f7:e3:5c:f0:57:a2:1d:bb:82:a9:0e:26:d3: 0e:68:40:eb:00:10:52:b3:c1:e1:68:81:5b:08:f5: 03:97:8e:1d:9c:97:f3:43:4d:08:16:a3:f0:ad:40: a0:70:3f:e9:eb:e2:a3:20:1d:83:ac:79:75:44:a1: 5f:70:da:91:59:a5:62:85:c7:e2:ea:d5:8c:52:97: d2:f4:8d:08:ab:ce:a8:3d:20:7c:84:d8:aa:c6:a5: 48:a5:7e:8b:15:fa:bb:6a:c3:9b:19:95:dc:e3:af: c7:31:0d:cf:9b:05:ea:7d:02:ba:b8:af:01:a2:9e: e1:f7:5a:34:69:44:e1:90:03:d9:f5:2f:5c:97:29: 22:f3:5c:ea:34:ec:cc:4b:b0:59:40:0b:2d:51:26: a4:6d:21:94:54:1d:c0:8f:22:19:4f:68:43:54:ff: bf:05:00:53:97:2e:ab:a4:6b:88:91:aa:4b:cc:7f: bd:99:34:ff:7a:d1:e9:e4:e7:51:a4:5e:e1:b5:e4: cd:2a:7c:d5:e0:95:96:75:76:94:63:59:f6:94:0d: 4c:d4:f0:3d:80:23:cd:aa:2a:38:cf:dc:08:51:c4: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:5C:B4:1B:F1:2B:BC:AE:30:2A:CA:D1:9C:F6:2D:20:13:97:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/891200df-1fd8-3d70-8932-c0cbb249ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9b:2e:14:14:c6:29:74:bb:ff:97:77:27:60:da:e3:db:2b: 07:60:63:9f:c9:75:b0:d1:22:b4:7a:17:6e:15:5c:b4:23:dd: 13:c1:bf:06:df:a4:ca:40:a6:09:f9:b9:26:a6:9c:ae:54:b5: 3f:fa:c8:4a:47:19:02:c5:dc:31:0d:7d:f6:c1:37:72:92:31: 78:59:69:7f:7d:77:36:f7:2b:1e:d7:9a:db:6e:18:8d:0e:21: eb:9f:a3:11:1d:76:d2:1e:0c:c6:c4:8a:47:44:a7:b1:4b:d0: 33:a5:bf:0c:73:c4:27:4a:cd:92:7e:cc:3c:9f:6e:52:d1:96: 64:27:31:b1:ab:49:40:8b:61:98:7a:66:e7:bb:67:7c:02:68: 1b:d1:57:d9:69:17:c4:86:12:94:1a:cb:6a:f9:e3:34:cf:f8: ac:3f:78:5b:5b:5b:20:e5:42:b1:c5:dd:d9:3f:f6:25:fc:9d: f8:19:b5:b5:ef:a3:b9:c2:c1:2d:b4:48:7b:1f:6e:71:fb:51: 3f:a4:4f:c0:0c:08:87:e6:91:f0:9b:de:5a:d7:41:97:94:d3: 02:d2:05:dd:36:20:47:34:c6:15:29:60:23:59:2b:2d:18:75: 82:6e:12:93:fa:89:df:21:52:c8:e6:6d:d5:d5:12:fd:d9:1b: a6:37:fb:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92ifGx14fYJ6rnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NDQyYjk4YzEtMzU3Ni00MzAzLThmMzItMTliZmU3ZjZiNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8ljrgbvuZqIcYWeD18DN05QWSVQp4Q/uirH avQ66/fjXPBXoh27gqkOJtMOaEDrABBSs8HhaIFbCPUDl44dnJfzQ00IFqPwrUCg cD/p6+KjIB2DrHl1RKFfcNqRWaVihcfi6tWMUpfS9I0Iq86oPSB8hNiqxqVIpX6L Ffq7asObGZXc46/HMQ3PmwXqfQK6uK8Bop7h91o0aUThkAPZ9S9clyki81zqNOzM S7BZQAstUSakbSGUVB3AjyIZT2hDVP+/BQBTly6rpGuIkapLzH+9mTT/etHp5OdR pF7hteTNKnzV4JWWdXaUY1n2lA1M1PA9gCPNqio4z9wIUcRvWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiPXLQb8Su8rjAqytGc9i0gE5e8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvODkxMjAwZGYtMWZkOC0z ZDcwLTg5MzItYzBjYmIyNDliYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdN9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImbLhQUxil0u/+Xdydg2uPbKwdgY5/JdbDRIrR6F24VXLQj3RPBvwbf pMpApgn5uSamnK5UtT/6yEpHGQLF3DENffbBN3KSMXhZaX99dzb3Kx7XmttuGI0O IeufoxEddtIeDMbEikdEp7FL0DOlvwxzxCdKzZJ+zDyfblLRlmQnMbGrSUCLYZh6 Zue7Z3wCaBvRV9lpF8SGEpQay2r54zTP+Kw/eFtbWyDlQrHF3dk/9iX8nfgZtbXv o7nCwS20SHsfbnH7UT+kT8AMCIfmkfCb3lrXQZeU0wLSBd02IEc0xhUpYCNZKy0Y dYJuEpP6id8hUsjmbdXVEv3ZG6Y3+wE= -----END CERTIFICATE-----Generated at Mon May 5 09:17:38 2025 by rpki-client