$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa File: 01ec5871-ae4b-3568-b911-9714c4ac218c.roa (raw, json) Hash identifier: kluyZ1od9dd7TWIIvkpmazNEGII7Ht73gnZCrGnSNXg= Subject key identifier: 04:2A:96:9B:33:69:76:18:1F:77:CA:BD:66:B2:32:5E:28:22:F6:2C Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584812D52FAAC6AD8D39B875A6E0 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 14618 IP address blocks: 157.166.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:2f:aa:c6:ad:8d:39:b8:75:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=55d37006-9e31-4a8d-b898-09f6d062e4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:93:7a:0a:d4:02:6d:f2:c7:f6:eb:0b:73: 4c:48:75:75:41:87:44:10:c3:67:36:eb:68:c0:db: d6:0b:7d:c5:41:70:a2:f8:f8:dd:1f:2a:9b:d6:b5: 2b:e1:d9:f0:db:f8:69:79:77:0c:78:fa:d4:92:10: a2:cb:dd:eb:57:be:60:c3:4b:ed:81:19:55:1c:92: 59:fe:14:95:8a:b9:ec:e2:a9:a5:7c:bd:cc:2d:84: e6:04:2b:2b:93:c9:b4:53:d3:a2:22:52:f3:8f:b2: ed:9f:fc:d7:2c:f6:77:6e:8e:49:08:bf:00:6c:81: 7c:df:51:64:e0:9a:42:75:c3:cb:75:5a:66:d4:ed: 16:0c:24:ff:a7:8e:5c:79:8b:7b:d1:60:ac:1a:9c: 81:93:52:2e:45:cb:f3:cf:74:25:9e:bd:ee:91:08: 50:08:15:cc:90:cb:a6:1e:d7:98:8f:6f:53:5b:84: d3:10:ef:00:b8:d5:0f:8a:8e:9b:e9:88:3a:12:c5: 09:41:7c:48:5a:e1:0b:b3:37:a8:75:7d:a7:93:9e: 95:98:41:de:80:6e:a1:7e:07:63:1e:c4:9a:cc:94: 37:9c:62:a2:60:c7:3d:42:f9:6f:11:70:b5:5f:b8: 1e:12:a8:99:2b:9a:e0:bb:0e:9e:1f:08:1a:10:98: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2A:96:9B:33:69:76:18:1F:77:CA:BD:66:B2:32:5E:28:22:F6:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f1:72:5a:a8:04:7a:e3:b6:f8:99:8f:87:01:e1:96:97:89: 23:9f:5b:0d:0e:6e:59:ba:0a:74:a8:0c:da:40:07:32:99:20: e2:75:88:a1:f5:20:b6:3a:31:39:b1:7c:c9:35:d8:e2:8c:66: 92:df:cb:aa:9b:01:2d:5d:a5:7f:a6:1d:fa:36:93:aa:59:a7: 1a:1e:2d:22:bf:1a:69:68:88:a2:b1:61:b4:82:e0:cc:7a:be: 45:b9:74:c5:96:c2:ea:06:30:ce:00:87:eb:03:cf:91:41:bf: 9f:ac:64:f6:0e:46:1a:0b:70:70:61:21:f3:26:d2:97:01:65: bd:8b:7b:14:a3:24:9b:9d:de:8a:90:41:43:a5:bc:cf:5d:5d: f3:ae:a9:07:4d:9c:3e:2c:c9:59:9a:0a:fa:d0:8e:f1:8a:4e: fb:81:39:76:c4:cd:05:8c:6d:0b:14:fa:1b:7b:16:02:30:b7: 76:66:08:9d:70:c7:e9:89:80:09:58:da:20:6d:a6:40:34:7b: bc:6b:5d:15:d7:de:5a:f4:16:2e:e1:21:b1:71:f8:65:4b:80: 64:d2:ab:ad:72:e6:1b:19:ac:39:42:8f:9a:f0:b3:80:c3:32: f1:6f:69:a0:96:80:91:dd:c6:f0:e6:ce:43:90:c2:e5:e7:ce: e5:75:79:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1S+qxq2NObh1puAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk NTVkMzcwMDYtOWUzMS00YThkLWI4OTgtMDlmNmQwNjJlNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/STegrUAm3yx/brC3NMSHV1QYdEEMNnNuto wNvWC33FQXCi+PjdHyqb1rUr4dnw2/hpeXcMePrUkhCiy93rV75gw0vtgRlVHJJZ /hSVirns4qmlfL3MLYTmBCsrk8m0U9OiIlLzj7Ltn/zXLPZ3bo5JCL8AbIF831Fk 4JpCdcPLdVpm1O0WDCT/p45ceYt70WCsGpyBk1IuRcvzz3Qlnr3ukQhQCBXMkMum HteYj29TW4TTEO8AuNUPio6b6Yg6EsUJQXxIWuELszeodX2nk56VmEHegG6hfgdj HsSazJQ3nGKiYMc9QvlvEXC1X7geEqiZK5rguw6eHwgaEJj/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQqlpszaXYYH3fKvWayMl4oIvYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMDFlYzU4NzEtYWU0Yi0z NTY4LWI5MTEtOTcxNGM0YWMyMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzxclqoBHrjtviZj4cB4ZaXiSOfWw0Oblm6CnSoDNpABzKZIOJ1iKH1 ILY6MTmxfMk12OKMZpLfy6qbAS1dpX+mHfo2k6pZpxoeLSK/GmloiKKxYbSC4Mx6 vkW5dMWWwuoGMM4Ah+sDz5FBv5+sZPYORhoLcHBhIfMm0pcBZb2LexSjJJud3oqQ QUOlvM9dXfOuqQdNnD4syVmaCvrQjvGKTvuBOXbEzQWMbQsU+ht7FgIwt3ZmCJ1w x+mJgAlY2iBtpkA0e7xrXRXX3lr0Fi7hIbFx+GVLgGTSq61y5hsZrDlCj5rws4DD MvFvaaCWgJHdxvDmzkOQwuXnzuV1eUE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:56 2025 by rpki-client