$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa File: 01ec5871-ae4b-3568-b911-9714c4ac218c.roa (raw, json) Hash identifier: XZkM2xvVdefq5gY9eUpE/w75PmZq1W5KvE39EcldJTI= Subject key identifier: 19:58:68:18:82:45:31:5A:C2:08:B5:96:E5:4E:B3:1A:7C:74:68:8A Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285849D16504C6151407F2904012C0 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 14618 IP address blocks: 157.166.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:04:c6:15:14:07:f2:90:40:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=1c07c2c4-714c-492d-bf02-ab7ff96348ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:bb:36:b4:77:af:09:bc:89:30:4c:fe:57: fe:16:ca:25:c2:37:ae:e7:45:60:42:ae:70:b5:3c: 76:24:2c:82:16:b8:cc:7e:c5:e5:f0:00:a4:a5:08: 48:34:53:a7:90:49:97:3b:d4:b0:3e:0d:bd:64:d6: dc:1d:15:f8:7c:ed:f3:78:8b:10:4a:a9:07:34:d0: 20:4e:70:57:2d:b3:b1:bc:5a:05:59:14:eb:b2:19: ab:a5:79:78:41:46:6a:bd:0f:ac:29:1d:01:89:6c: 69:24:36:05:60:22:a7:b6:14:46:5d:73:2d:a8:86: d1:3d:0f:89:41:f4:89:8a:04:3b:f7:3d:6e:0a:af: 3e:00:d7:26:06:84:29:72:cb:15:23:b5:13:aa:bd: e2:d6:e0:7b:df:f3:5e:29:12:95:36:3d:2f:1b:00: 0e:c4:a0:a8:68:7b:2f:74:bd:2c:21:a8:75:30:c9: 18:ce:5b:1e:20:e8:72:0d:16:7d:ff:c9:5b:a1:7a: c3:1e:0e:fb:61:3d:5e:08:ed:f8:a9:df:4f:02:16: a4:a2:1c:58:1c:4a:eb:6e:85:70:a3:63:98:c1:03: 31:c0:d8:7b:15:a1:50:5b:8d:0c:61:64:74:e3:b9: 4e:e6:cf:3e:57:b9:02:18:ed:a1:f7:4c:05:19:a9: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:68:18:82:45:31:5A:C2:08:B5:96:E5:4E:B3:1A:7C:74:68:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ae:72:54:2d:ea:45:d3:9f:5b:d2:88:09:ac:8b:44:72:1a: 5d:58:c8:7f:49:9d:4e:b0:ff:f3:62:7b:4a:e2:64:67:ab:1b: a4:b9:99:82:2d:fe:d6:17:55:08:46:7f:f6:a8:46:59:9c:97: bc:14:9c:37:6d:3e:81:6c:29:f5:af:0b:18:f4:9c:88:45:64: cd:d5:74:6b:3a:ac:ab:79:f0:9a:fa:25:d9:af:a0:64:77:fc: 04:7f:96:59:7f:f7:4a:12:11:cc:7e:d1:4a:45:e0:78:dd:5d: bb:6c:27:9e:09:63:23:48:15:fc:8a:94:17:bc:d5:b2:77:85: 1a:23:f6:8a:bd:a7:ca:f6:6a:82:15:72:7b:e0:09:89:41:86: 87:ac:70:d5:bf:30:ab:b5:9b:0d:29:8c:09:7b:38:b9:3c:d0: eb:a4:85:b6:6c:df:04:fb:ff:ad:b3:84:86:0e:82:69:6c:7f: b3:9b:14:1e:c1:d3:58:f0:36:a5:88:68:00:52:14:41:c0:51: b6:30:60:81:8b:77:0f:77:23:a9:2f:af:35:3e:ad:ed:e0:29: f2:80:c4:b3:be:c1:1b:17:91:67:b8:ab:4b:14:d8:0c:80:1b: 8d:48:83:52:32:e6:12:25:5e:79:5c:a0:2d:38:23:80:5c:91: 08:14:6c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQTGFRQH8pBAEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MWMwN2MyYzQtNzE0Yy00OTJkLWJmMDItYWI3ZmY5NjM0OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE27NrR3rwm8iTBM/lf+Fsolwjeu50VgQq5w tTx2JCyCFrjMfsXl8ACkpQhINFOnkEmXO9SwPg29ZNbcHRX4fO3zeIsQSqkHNNAg TnBXLbOxvFoFWRTrshmrpXl4QUZqvQ+sKR0BiWxpJDYFYCKnthRGXXMtqIbRPQ+J QfSJigQ79z1uCq8+ANcmBoQpcssVI7UTqr3i1uB73/NeKRKVNj0vGwAOxKCoaHsv dL0sIah1MMkYzlseIOhyDRZ9/8lboXrDHg77YT1eCO34qd9PAhakohxYHErrboVw o2OYwQMxwNh7FaFQW40MYWR047lO5s8+V7kCGO2h90wFGalYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlYaBiCRTFawgi1luVOsxp8dGiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMDFlYzU4NzEtYWU0Yi0z NTY4LWI5MTEtOTcxNGM0YWMyMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFauclQt6kXTn1vSiAmsi0RyGl1YyH9JnU6w//Nie0riZGerG6S5mYIt /tYXVQhGf/aoRlmcl7wUnDdtPoFsKfWvCxj0nIhFZM3VdGs6rKt58Jr6JdmvoGR3 /AR/lll/90oSEcx+0UpF4HjdXbtsJ54JYyNIFfyKlBe81bJ3hRoj9oq9p8r2aoIV cnvgCYlBhoescNW/MKu1mw0pjAl7OLk80OukhbZs3wT7/62zhIYOgmlsf7ObFB7B 01jwNqWIaABSFEHAUbYwYIGLdw93I6kvrzU+re3gKfKAxLO+wRsXkWe4q0sU2AyA G41Ig1Iy5hIlXnlcoC04I4BckQgUbFA= -----END CERTIFICATE-----Generated at Sun Jun 8 18:35:53 2025 by rpki-client