$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa File: 1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa (raw, json) Hash identifier: WY553L2szMbm/BEJPmLZnoDyxw2XpGF0b7wDA6kKsRo= Subject key identifier: 63:F5:1C:F5:4A:EA:0E:BC:C6:A2:58:5A:85:66:B5:80:71:D0:89:B3 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285849F71519922AB5F96630D69F60 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 5662 IP address blocks: 157.166.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:19:92:2a:b5:f9:66:30:d6:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=b602ab9b-0fe9-4e7e-9bdf-ccc97371a894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:09:6d:c9:df:f3:11:ec:a4:22:ea:ff:51: f1:9a:a4:70:8c:28:8d:36:2a:81:fb:f4:ce:3c:a5: f3:81:7b:56:cb:1d:fa:ee:3d:b3:20:dd:2c:25:69: 8b:06:e7:8c:e2:13:81:ba:0e:4d:72:0b:76:92:ce: 09:90:7c:4f:cc:de:84:f4:d6:69:c0:fb:8e:ff:47: 3a:ee:37:be:0a:28:06:b0:18:ab:4b:ed:96:3b:a9: d9:ba:87:2c:36:13:9b:3e:f6:f4:01:ea:85:af:16: 5f:a6:fe:05:8f:4e:e1:34:c3:16:5c:23:58:b1:c2: b7:b8:78:93:7e:6a:1e:46:03:bb:96:d8:4b:e3:43: 62:0b:c3:b2:82:12:73:40:da:7c:5c:cc:24:06:6a: 83:43:a6:34:aa:af:4d:45:87:a6:db:2f:ed:4e:b9: f1:1c:d9:eb:de:79:c8:96:32:7d:99:a6:33:25:73: ec:7d:7c:5d:12:84:47:3e:d2:15:58:e0:a9:c6:1f: 06:fd:5c:0a:91:1b:70:d1:be:71:98:f0:f4:10:dd: 1e:a4:63:49:52:52:bf:ba:85:78:f1:ba:ae:b7:40: 53:d8:c3:8e:3f:b8:5c:46:67:4d:b5:c2:b1:4f:fd: 02:38:fd:67:72:91:7c:f1:2d:13:ce:dd:a8:49:8f: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F5:1C:F5:4A:EA:0E:BC:C6:A2:58:5A:85:66:B5:80:71:D0:89:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:34:45:c2:63:9b:9f:a6:7f:d3:a4:63:ff:8b:e3:26:e7:db: a6:67:50:ab:55:49:c6:15:bf:f6:17:1b:aa:83:87:4a:d7:8a: e6:4c:e6:d3:ce:50:73:f5:6b:1c:1d:18:ba:ac:87:17:3f:92: 6f:1a:23:78:f0:cc:05:15:9b:af:5c:d6:dd:85:16:6f:3d:4c: e4:95:b4:d6:3a:be:1f:21:e1:60:6a:25:ea:c9:a8:c2:84:38: 0d:4e:98:e2:6b:db:5e:c3:3c:6d:d4:d5:59:3b:d4:8e:11:f2: eb:98:9a:38:0a:c7:46:ff:8c:a6:c2:f1:3b:8a:54:e5:2e:5e: bd:83:4f:0e:2d:22:78:14:48:f2:57:4c:7f:78:cd:d0:c3:1d: c5:ee:93:c1:fb:ab:0a:f7:a0:20:9e:65:4c:94:85:66:88:64: 05:38:29:65:20:3d:cc:53:65:03:76:44:f2:05:0c:f1:d8:67: 67:b6:bd:45:d9:fd:3a:5e:af:cc:41:e1:2e:6d:a8:c8:b5:64: 62:7f:35:dc:d6:90:c1:67:4d:df:83:f7:e7:4a:0c:50:eb:af: 8a:02:68:92:33:57:95:93:0b:58:cb:d5:60:99:40:a5:85:e0: 73:5e:f9:f1:5e:a5:47:38:bf:c9:3f:d4:4d:b4:8d:91:04:ec: 56:35:ce:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRmSKrX5ZjDWn2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YjYwMmFiOWItMGZlOS00ZTdlLTliZGYtY2NjOTczNzFhODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7oJbcnf8xHspCLq/1HxmqRwjCiNNiqB+/TO PKXzgXtWyx367j2zIN0sJWmLBueM4hOBug5Ncgt2ks4JkHxPzN6E9NZpwPuO/0c6 7je+CigGsBirS+2WO6nZuocsNhObPvb0AeqFrxZfpv4Fj07hNMMWXCNYscK3uHiT fmoeRgO7lthL40NiC8OyghJzQNp8XMwkBmqDQ6Y0qq9NRYem2y/tTrnxHNnr3nnI ljJ9maYzJXPsfXxdEoRHPtIVWOCpxh8G/VwKkRtw0b5xmPD0EN0epGNJUlK/uoV4 8bqut0BT2MOOP7hcRmdNtcKxT/0COP1ncpF88S0Tzt2oSY8J/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP1HPVK6g68xqJYWoVmtYBx0ImzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMWVlNjhkYjAtNzM0Zi0z MWQ2LThhYzUtYjVmZDk3MzcyMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU0RcJjm5+mf9OkY/+L4ybn26ZnUKtVScYVv/YXG6qDh0rXiuZM5tPO UHP1axwdGLqshxc/km8aI3jwzAUVm69c1t2FFm89TOSVtNY6vh8h4WBqJerJqMKE OA1OmOJr217DPG3U1Vk71I4R8uuYmjgKx0b/jKbC8TuKVOUuXr2DTw4tIngUSPJX TH94zdDDHcXuk8H7qwr3oCCeZUyUhWaIZAU4KWUgPcxTZQN2RPIFDPHYZ2e2vUXZ /Tper8xB4S5tqMi1ZGJ/NdzWkMFnTd+D9+dKDFDrr4oCaJIzV5WTC1jL1WCZQKWF 4HNe+fFepUc4v8k/1E20jZEE7FY1zjM= -----END CERTIFICATE-----Generated at Sun Jun 8 18:30:38 2025 by rpki-client