$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa File: eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa (raw, json) Hash identifier: sxS2J5zZSS2FjeSoEudlYc4Yfl9MKEzVY8y9FnZtwhc= Subject key identifier: 41:EA:D9:BD:95:1B:FB:8D:A8:78:83:B9:C0:CE:B7:47:1C:FD:E4:91 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285849C0A4D01CCC9C742B43F4A9C0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 834 IP address blocks: 173.214.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d0:1c:cc:9c:74:2b:43:f4:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=77c218ea-a909-420a-9333-7641506abc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:21:f7:75:69:6d:bd:35:da:e7:eb:1f:5d: 8a:63:ed:2e:3f:4e:95:c4:66:39:70:62:57:08:73: bf:74:2d:2e:db:5c:b6:a0:57:0e:77:af:1a:c6:a7: 51:a8:5b:6e:f7:41:ad:09:03:0e:f5:fd:e7:23:79: 18:71:c5:5e:c3:39:b6:bc:3a:dc:aa:5a:5e:d7:69: a0:1b:38:bc:15:09:9e:8f:e2:4b:b0:89:76:be:60: 42:68:5a:ea:a4:2a:d7:7b:74:f9:7b:c2:10:80:1d: b2:26:6a:bc:6d:a9:6d:b9:a3:0e:df:a0:ee:e5:e1: 95:7e:dc:66:2a:47:e7:9d:3b:0a:55:e6:cd:07:ac: a0:28:97:77:f9:be:f0:57:7a:55:3f:1d:af:af:6f: 72:6a:c4:dd:dc:8a:1c:90:01:d7:39:43:fa:04:9c: 00:f9:b6:d5:91:62:9b:81:5c:c6:4f:ee:d2:91:46: 5f:e4:f6:fd:95:46:0d:86:3e:34:c8:ab:70:4d:9c: 42:44:06:25:0b:fc:50:ba:21:9c:ef:d3:c7:d1:f8: 6a:c9:c8:c3:42:46:5a:f9:7a:d7:29:8e:5f:13:bf: 23:7f:fd:09:b2:99:aa:d3:27:1d:b4:73:ce:d3:03: a6:39:cb:84:ff:cf:25:19:ea:3c:71:80:f4:c0:a5: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EA:D9:BD:95:1B:FB:8D:A8:78:83:B9:C0:CE:B7:47:1C:FD:E4:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.214.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:db:03:ad:73:ae:cd:4d:48:22:62:e7:f5:97:01:a7:28:1a: e1:67:ab:b3:6e:f2:b7:70:f0:31:7a:f9:c4:78:f7:4a:b4:a9: 6b:9e:04:93:5f:9c:1b:58:57:cc:89:01:76:18:af:7e:dc:b4: 51:81:e8:6e:96:26:ff:ad:16:44:d0:30:06:16:35:e0:e3:11: 6d:ae:c2:fe:d2:c5:4e:55:a4:21:f3:27:84:61:bb:c8:7f:2b: 78:05:a2:a9:41:4f:02:bf:9a:97:db:f7:c4:cb:d9:a5:b8:a1: 6e:dc:e4:3a:fc:ee:5a:a4:86:06:33:61:c2:5c:d1:15:87:5c: 53:b9:ed:39:97:78:48:1c:0b:dd:04:b7:ff:91:52:94:55:af: b1:96:b2:61:2e:3e:d2:7b:b8:d8:c8:1a:a5:fb:74:0d:15:78: b7:58:e1:dc:bf:6e:19:3c:04:81:1f:3f:f6:55:e8:64:cd:b5: da:f9:63:c9:2f:7c:c2:26:52:64:80:cf:02:83:22:7c:6b:2b: 01:7a:67:cd:a4:18:1a:7e:ec:71:3f:95:fd:cc:69:c8:ca:59: 53:ed:7a:43:6f:57:d3:60:55:33:f5:db:47:ab:69:d3:0d:5b: f0:b6:0f:b2:7a:bd:0e:ff:ac:a8:1a:80:c6:2c:0c:b7:92:b4: 26:da:4a:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNAczJx0K0P0qcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NzdjMjE4ZWEtYTkwOS00MjBhLTkzMzMtNzY0MTUwNmFiYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJkh93Vpbb012ufrH12KY+0uP06VxGY5cGJX CHO/dC0u21y2oFcOd68axqdRqFtu90GtCQMO9f3nI3kYccVewzm2vDrcqlpe12mg Gzi8FQmej+JLsIl2vmBCaFrqpCrXe3T5e8IQgB2yJmq8baltuaMO36Du5eGVftxm KkfnnTsKVebNB6ygKJd3+b7wV3pVPx2vr29yasTd3IockAHXOUP6BJwA+bbVkWKb gVzGT+7SkUZf5Pb9lUYNhj40yKtwTZxCRAYlC/xQuiGc79PH0fhqycjDQkZa+XrX KY5fE78jf/0Jspmq0ycdtHPO0wOmOcuE/88lGeo8cYD0wKVE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHq2b2VG/uNqHiDucDOt0cc/eSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZWFmOTFmNzUtMjFhMy0z Zjc4LWFiOTEtN2RlODQ1N2VjMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7bA61zrs1NSCJi5/WXAacoGuFnq7Nu8rdw8DF6+cR490q0qWueBJNf nBtYV8yJAXYYr37ctFGB6G6WJv+tFkTQMAYWNeDjEW2uwv7SxU5VpCHzJ4Rhu8h/ K3gFoqlBTwK/mpfb98TL2aW4oW7c5Dr87lqkhgYzYcJc0RWHXFO57TmXeEgcC90E t/+RUpRVr7GWsmEuPtJ7uNjIGqX7dA0VeLdY4dy/bhk8BIEfP/ZV6GTNtdr5Y8kv fMImUmSAzwKDInxrKwF6Z82kGBp+7HE/lf3MacjKWVPtekNvV9NgVTP120eradMN W/C2D7J6vQ7/rKgagMYsDLeStCbaSqA= -----END CERTIFICATE-----Generated at Mon May 5 15:47:42 2025 by rpki-client