$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa File: 1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa (raw, json) Hash identifier: llrwffFkYBmIE7ex726e1NlbtdnK6U2T4+obDehqA90= Subject key identifier: A5:FF:26:F4:14:C1:1D:73:2C:E7:38:07:74:B3:EE:B2:7B:89:49:C4 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584917DC2FAEECD55C8F24198B00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 5662 IP address blocks: 157.166.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2f:ae:ec:d5:5c:8f:24:19:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=a558c6c0-a7e5-4370-aa6d-fcac50f82fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:2e:f0:d5:7d:d8:cb:fb:6d:76:18:78:d5: 6f:c6:0e:77:32:ef:2e:70:91:7f:67:8d:a3:80:5c: 5b:1e:ee:5b:1e:2d:c9:cb:ff:c7:3c:be:b8:42:f2: 0b:eb:8e:98:8e:7b:2e:48:65:68:cb:d0:d5:1e:39: e4:61:6e:27:fe:8d:fd:d2:56:c3:4e:41:ce:bc:e3: 72:bf:70:8c:50:aa:7a:ec:eb:56:ff:38:2d:1c:e3: ec:09:62:95:f1:83:6a:a8:29:80:60:64:4b:0c:89: 19:f8:f0:9e:7b:ef:d8:0e:06:6b:7a:52:9c:6e:0f: 67:7f:8a:e2:84:f1:ea:5e:96:fd:fa:3b:2e:50:96: 98:6b:4a:37:69:a2:ea:c8:b0:57:0c:b8:88:30:14: b2:45:93:ad:dd:e0:b6:2f:45:ca:08:64:5f:f3:de: 9a:a0:53:62:8d:2c:88:29:a1:06:88:44:d9:b4:31: 7e:21:44:71:73:33:d9:4f:b0:4d:0d:f4:c3:eb:fc: 29:67:5f:8f:39:4f:66:00:27:a4:4a:db:0d:85:68: aa:9c:2a:71:79:28:0b:81:1b:31:98:9a:81:8e:39: b8:fa:64:54:ba:04:31:0c:c5:4b:dc:be:ef:48:11: 5e:6f:0e:5b:9b:5a:e0:ca:a8:28:15:c8:a8:b7:87: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:26:F4:14:C1:1D:73:2C:E7:38:07:74:B3:EE:B2:7B:89:49:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0f:3d:83:22:ef:eb:68:09:2d:91:81:6f:5c:d6:83:24:1b: 73:6b:46:39:99:3b:29:72:05:e8:7b:79:a4:12:d0:41:19:2f: 7a:79:14:0f:43:20:a8:06:41:a7:c0:05:a4:93:a9:f0:1e:bd: ba:31:9a:20:9c:e6:4d:95:2a:02:2a:0b:5b:b3:3d:22:70:68: 80:39:83:0f:61:29:dd:0a:7a:5d:5e:4d:e4:5e:82:0f:56:df: 6e:25:27:f4:66:fa:5f:18:d1:68:b8:a0:6a:ca:40:42:f7:75: dc:7d:d3:a5:a9:ea:ca:72:ab:1f:e3:e3:b9:4b:69:b1:76:ea: 50:0c:c9:5d:55:66:02:bb:84:59:8c:b1:a9:1e:c8:c5:ae:47: 49:10:87:1f:de:ef:20:15:ad:f4:82:d9:a4:3c:b5:15:75:e0: 43:db:1d:20:b5:12:c4:e8:15:4a:2d:96:0e:ad:62:08:79:49: bc:c9:1a:c3:77:5c:5f:e4:6b:09:18:ce:75:71:37:84:f4:6c: 11:e8:de:c4:15:e4:11:7c:56:86:75:0a:02:c1:7d:d2:e8:8a: 3c:e8:a1:dd:13:6d:4b:e1:81:94:7d:58:fd:cf:da:43:b0:2a: d3:88:fe:6d:74:39:a8:96:91:da:a2:da:b2:31:e8:f7:14:eb: 96:02:2b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3C+u7NVcjyQZiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YTU1OGM2YzAtYTdlNS00MzcwLWFhNmQtZmNhYzUwZjgyZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt08u8NV92Mv7bXYYeNVvxg53Mu8ucJF/Z42j gFxbHu5bHi3Jy//HPL64QvIL646YjnsuSGVoy9DVHjnkYW4n/o390lbDTkHOvONy v3CMUKp67OtW/zgtHOPsCWKV8YNqqCmAYGRLDIkZ+PCee+/YDgZrelKcbg9nf4ri hPHqXpb9+jsuUJaYa0o3aaLqyLBXDLiIMBSyRZOt3eC2L0XKCGRf896aoFNijSyI KaEGiETZtDF+IURxczPZT7BNDfTD6/wpZ1+POU9mACekStsNhWiqnCpxeSgLgRsx mJqBjjm4+mRUugQxDMVL3L7vSBFebw5bm1rgyqgoFciot4dMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX/JvQUwR1zLOc4B3Sz7rJ7iUnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMWVlNjhkYjAtNzM0Zi0z MWQ2LThhYzUtYjVmZDk3MzcyMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUPPYMi7+toCS2RgW9c1oMkG3NrRjmZOylyBeh7eaQS0EEZL3p5FA9D IKgGQafABaSTqfAevboxmiCc5k2VKgIqC1uzPSJwaIA5gw9hKd0Kel1eTeRegg9W 324lJ/Rm+l8Y0Wi4oGrKQEL3ddx906Wp6spyqx/j47lLabF26lAMyV1VZgK7hFmM sakeyMWuR0kQhx/e7yAVrfSC2aQ8tRV14EPbHSC1EsToFUotlg6tYgh5SbzJGsN3 XF/kawkYznVxN4T0bBHo3sQV5BF8VoZ1CgLBfdLoijzood0TbUvhgZR9WP3P2kOw KtOI/m10OaiWkdqi2rIx6PcU65YCKyM= -----END CERTIFICATE-----Generated at Sat Apr 19 18:00:06 2025 by rpki-client