$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa File: 01ec5871-ae4b-3568-b911-9714c4ac218c.roa (raw, json) Hash identifier: Ct5D2FmovloPvyj935f1afCk/He7F4E1S2vkWkMuk68= Subject key identifier: 8B:B1:BB:AF:E5:E7:C7:E1:36:F0:F0:FB:4F:75:EF:2C:6D:F1:28:D6 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848F22C64E657E200BB466C1280 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 157.166.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:64:e6:57:e2:00:bb:46:6c:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=9459d17e-1ca7-4637-9287-e772bd6e7b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:f0:10:f3:44:98:0d:c6:07:3f:62:68:de: 9e:80:54:90:f1:5f:0e:2e:87:d7:bc:0b:66:15:ab: 73:23:2a:f3:2d:87:1d:50:43:31:c5:0b:97:31:0e: b1:93:57:9f:f1:42:78:75:84:3f:f8:f0:68:b4:ee: 1d:ae:61:90:73:1b:8c:97:00:d9:50:fb:fa:53:e0: 5e:0c:90:91:7b:4d:c1:99:5a:36:67:66:86:76:14: f9:5b:9d:54:5f:69:cb:40:6b:39:77:6d:83:77:a0: 6d:15:ae:e3:72:ee:e4:cd:ce:c9:86:3f:0b:6b:2b: 10:43:d3:8b:bb:db:ce:4b:35:a3:91:40:c7:b0:19: 8d:bc:63:a8:40:09:86:9e:7d:04:db:c4:21:9e:3f: 4f:d9:a9:ab:28:a4:c3:02:0c:49:6e:8c:c6:ea:8a: 62:0a:38:2c:71:6f:2b:df:3b:54:43:94:5b:74:95: 19:22:1b:67:eb:7f:47:d5:25:06:81:0c:74:d4:9a: 59:31:34:a4:6d:15:7a:8c:24:72:ef:34:75:c6:06: 54:81:c4:0c:a9:24:a9:4f:30:c4:be:e2:ae:8c:2c: 94:0f:46:83:f2:18:2f:8c:d9:5c:0e:52:a3:64:92: f2:a9:a1:ad:a0:97:d3:0e:ce:50:f4:77:16:62:33: ac:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B1:BB:AF:E5:E7:C7:E1:36:F0:F0:FB:4F:75:EF:2C:6D:F1:28:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c7:b0:ef:19:24:e3:29:83:aa:16:a6:e3:1e:4a:72:cb:d8: a1:cd:66:9a:2e:9a:f8:89:12:f3:63:72:cf:bb:17:ae:20:7c: 97:08:63:ce:ff:9f:16:36:4d:f8:b9:35:d8:bd:83:02:fb:ea: 9a:e7:c3:13:db:dc:67:6d:4f:06:f6:5b:2e:ae:31:e3:2a:ec: 2e:ff:7c:be:b1:bc:fb:a1:82:3c:df:39:d1:ee:1c:31:ae:d3: 20:ef:6f:2f:36:17:f7:d2:23:0c:c4:c1:4c:1a:0a:18:2a:8b: fe:49:57:db:3d:dd:53:92:c2:b7:38:26:f1:5c:05:c6:a5:2a: 38:bd:4c:e4:f3:cc:56:79:2a:32:18:0a:e5:fa:b0:43:12:8c: 15:f1:58:69:05:e9:69:ad:08:42:82:7a:54:a6:32:f3:0c:18: 12:bd:dd:34:f3:22:5c:12:6e:c7:4e:33:12:7d:bd:59:7f:cd: e4:ca:90:fa:05:2b:47:57:76:0f:74:78:e2:ad:a0:86:2b:33: 51:8d:3e:a0:75:1d:9b:d8:2f:14:e3:80:81:55:1b:44:b3:18: dd:20:6f:8a:d7:c9:a1:3c:be:a2:d8:10:1c:e8:54:db:f3:19: 69:8b:db:49:88:c7:04:b2:67:5b:54:3e:85:22:a5:4f:b0:b1: aa:5e:86:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGTmV+IAu0ZsEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk OTQ1OWQxN2UtMWNhNy00NjM3LTkyODctZTc3MmJkNmU3YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw3wEPNEmA3GBz9iaN6egFSQ8V8OLofXvAtm FatzIyrzLYcdUEMxxQuXMQ6xk1ef8UJ4dYQ/+PBotO4drmGQcxuMlwDZUPv6U+Be DJCRe03BmVo2Z2aGdhT5W51UX2nLQGs5d22Dd6BtFa7jcu7kzc7Jhj8LaysQQ9OL u9vOSzWjkUDHsBmNvGOoQAmGnn0E28Qhnj9P2amrKKTDAgxJbozG6opiCjgscW8r 3ztUQ5RbdJUZIhtn639H1SUGgQx01JpZMTSkbRV6jCRy7zR1xgZUgcQMqSSpTzDE vuKujCyUD0aD8hgvjNlcDlKjZJLyqaGtoJfTDs5Q9HcWYjOsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuxu6/l58fhNvDw+0917yxt8SjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMDFlYzU4NzEtYWU0Yi0z NTY4LWI5MTEtOTcxNGM0YWMyMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvHsO8ZJOMpg6oWpuMeSnLL2KHNZpoumviJEvNjcs+7F64gfJcIY87/ nxY2Tfi5Ndi9gwL76prnwxPb3GdtTwb2Wy6uMeMq7C7/fL6xvPuhgjzfOdHuHDGu 0yDvby82F/fSIwzEwUwaChgqi/5JV9s93VOSwrc4JvFcBcalKji9TOTzzFZ5KjIY CuX6sEMSjBXxWGkF6WmtCEKCelSmMvMMGBK93TTzIlwSbsdOMxJ9vVl/zeTKkPoF K0dXdg90eOKtoIYrM1GNPqB1HZvYLxTjgIFVG0SzGN0gb4rXyaE8vqLYEBzoVNvz GWmL20mIxwSyZ1tUPoUipU+wsapehpA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:00:57 2025 by rpki-client