$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa File: 60570c79-bb16-3b4c-a1e3-6b396870d864.roa (raw, json) Hash identifier: EDIshPTPS6oxbGgcfWGzpPP+W7btaUNMpC5e+DSnuEs= Subject key identifier: 95:31:10:A2:21:47:25:84:D9:2E:DB:57:1E:CB:91:6D:BB:F7:3C:FF Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848F22C64F463548348B1E86E20 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 157.166.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:64:f4:63:54:83:48:b1:e8:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=f36ee5fa-e67d-4a31-abdc-44a7ffac7952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:fb:7e:83:fb:f6:13:9a:61:2a:7b:46:68: ae:be:39:34:a0:7d:a1:98:3a:a1:26:73:49:cb:e9: a2:e2:fa:5b:46:07:3a:72:15:a1:6e:28:2b:c4:13: 1e:af:13:3d:94:3b:c9:ea:56:e3:64:19:36:07:e5: a8:4b:14:dc:e1:a1:1e:fe:45:9d:59:40:71:9e:d3: 03:d4:7a:dd:87:a3:fe:c3:eb:3c:a9:cb:8a:a1:0e: 22:25:81:6e:e9:27:aa:b6:64:57:b7:84:a1:20:0e: db:62:ea:83:ca:79:ed:6b:72:e0:46:57:72:9e:7e: c3:8e:0f:6e:bf:81:a0:52:8d:4e:74:cf:23:46:8c: c5:65:91:be:f4:da:29:8d:94:0d:af:9a:d5:9d:7a: 9f:00:7a:77:59:6d:31:ff:8d:e5:76:76:2b:92:91: 66:4d:25:8e:68:97:7d:d7:cf:cc:a5:ee:f0:50:84: 7f:b2:72:fd:49:b4:1b:04:98:d8:fe:55:3a:b7:7e: ed:bf:49:ad:50:f7:c5:22:05:ee:e6:ee:5a:4b:c3: 02:73:1d:d5:a1:14:9e:65:ba:09:b2:ca:dc:cc:d5: af:41:f8:d1:2a:72:4f:c2:da:3b:83:65:d1:b3:15: c9:64:8c:b4:0d:ca:1f:ab:3f:05:2a:0b:32:7e:74: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:31:10:A2:21:47:25:84:D9:2E:DB:57:1E:CB:91:6D:BB:F7:3C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:30:5b:d2:d5:7f:98:d4:03:f3:cb:83:a3:99:26:6a:b3:22: 70:5c:64:c8:77:7e:ad:3f:cd:2b:23:aa:e9:a4:67:3a:c1:5e: 7b:e2:f2:cd:03:37:47:6c:fd:fd:a4:75:f4:85:de:82:a5:b6: 8d:30:d4:90:ae:b1:54:52:ac:86:d3:50:c7:82:78:15:6b:38: a3:0b:76:f9:b7:04:4f:3c:34:86:8f:87:f8:47:09:a7:4e:c2: fe:6d:fd:4a:98:32:fd:c7:2c:77:38:6c:f1:b9:1a:ea:74:0f: ce:02:68:8c:fa:ad:64:fa:6f:6d:24:4a:30:4c:12:76:d3:8d: d0:e2:87:f0:3d:f4:cd:59:41:67:cf:90:74:94:55:7f:2e:f6: f8:08:7e:2c:55:76:41:5b:dc:66:47:57:6c:5e:f7:30:4e:fb: 4e:72:c0:e9:a3:62:76:f2:94:23:1f:89:16:40:67:10:9b:14: b3:c4:7d:0e:be:23:4b:c5:ef:9f:79:24:8d:60:8d:88:16:11: 4e:bb:9b:2f:af:fd:91:92:0f:d3:0d:76:43:a6:49:36:7b:dd: 8d:de:e3:c7:16:cf:78:a3:fd:32:ba:d4:7d:00:01:65:51:a1: 00:0d:8f:04:28:04:73:75:6f:85:d6:2a:cb:c2:40:e1:81:ee: 4e:58:45:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGT0Y1SDSLHobiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjM2ZWU1ZmEtZTY3ZC00YTMxLWFiZGMtNDRhN2ZmYWM3OTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39D7foP79hOaYSp7Rmiuvjk0oH2hmDqhJnNJ y+mi4vpbRgc6chWhbigrxBMerxM9lDvJ6lbjZBk2B+WoSxTc4aEe/kWdWUBxntMD 1Hrdh6P+w+s8qcuKoQ4iJYFu6SeqtmRXt4ShIA7bYuqDynnta3LgRldynn7Djg9u v4GgUo1OdM8jRozFZZG+9NopjZQNr5rVnXqfAHp3WW0x/43ldnYrkpFmTSWOaJd9 18/Mpe7wUIR/snL9SbQbBJjY/lU6t37tv0mtUPfFIgXu5u5aS8MCcx3VoRSeZboJ ssrczNWvQfjRKnJPwto7g2XRsxXJZIy0Dcofqz8FKgsyfnThlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUxEKIhRyWE2S7bVx7LkW279zz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNjA1NzBjNzktYmIxNi0z YjRjLWExZTMtNmIzOTY4NzBkODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0wW9LVf5jUA/PLg6OZJmqzInBcZMh3fq0/zSsjqumkZzrBXnvi8s0D N0ds/f2kdfSF3oKlto0w1JCusVRSrIbTUMeCeBVrOKMLdvm3BE88NIaPh/hHCadO wv5t/UqYMv3HLHc4bPG5Gup0D84CaIz6rWT6b20kSjBMEnbTjdDih/A99M1ZQWfP kHSUVX8u9vgIfixVdkFb3GZHV2xe9zBO+05ywOmjYnbylCMfiRZAZxCbFLPEfQ6+ I0vF7595JI1gjYgWEU67my+v/ZGSD9MNdkOmSTZ73Y3e48cWz3ij/TK61H0AAWVR oQANjwQoBHN1b4XWKsvCQOGB7k5YRZ8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:37 2025 by rpki-client