$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2631c6f4-cc6f-3657-ac0f-a0cb0a76b88b.roa File: 2631c6f4-cc6f-3657-ac0f-a0cb0a76b88b.roa (raw, json) Hash identifier: i32oP3XpJ3zXX5iwDkEm1tm9OfX0LR9Vt4IXFlFLeF0= Subject key identifier: EB:79:8B:97:85:BF:4F:8B:41:F9:4F:68:BD:CE:DF:B6:CF:FA:D6:BA Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584894A5EFB94DF8CAA8CE7C2FE0 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2631c6f4-cc6f-3657-ac0f-a0cb0a76b88b.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 14618 IP address blocks: 157.166.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:ef:b9:4d:f8:ca:a8:ce:7c:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=569a7ced-80ad-4aa0-a8cf-adc602bdcc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:c4:f4:1c:74:13:d1:30:fe:80:ed:a3:76: cb:49:55:b6:7a:c2:03:9e:95:61:d5:42:e7:37:28: 6c:dd:2c:fe:38:8f:af:22:14:35:dc:0f:7d:b0:66: a4:5e:37:79:09:92:21:90:2c:90:4c:b2:84:23:7f: 29:ae:2e:d3:47:28:b1:bf:e6:9e:b5:72:86:07:f7: bb:62:42:c4:b8:80:32:5b:eb:8d:13:22:da:08:5c: 0a:f2:3a:bb:ad:a8:27:21:75:5c:64:ed:18:11:89: a3:49:9b:44:62:99:99:79:58:c6:27:a5:9b:b8:bc: 4e:10:4f:77:51:e4:db:1d:52:57:76:45:09:2e:85: d9:7e:ad:25:dc:7c:23:80:dc:73:78:a3:95:72:7c: 3c:02:c5:e3:97:3e:eb:63:8a:ff:01:58:6b:f6:5c: 48:32:28:2f:2b:46:bf:cd:9d:a0:38:d8:1c:36:a0: 52:19:73:0e:c8:aa:fd:13:a7:f3:35:10:6a:0b:d4: 86:ae:db:56:c5:dc:7b:e9:bc:9c:9f:6f:0c:0c:88: 35:dd:20:f1:f2:37:38:25:50:94:94:76:48:f1:9c: ed:8d:fa:90:a2:c3:06:7f:55:7e:68:4c:ee:69:94: bf:e6:98:82:a2:11:7f:09:2c:9d:ae:5f:bc:54:18: 47:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:8B:97:85:BF:4F:8B:41:F9:4F:68:BD:CE:DF:B6:CF:FA:D6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2631c6f4-cc6f-3657-ac0f-a0cb0a76b88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:96:8e:f9:72:1b:d4:2c:a6:a4:26:d6:28:7c:c2:73:98:7b: da:32:2c:3a:10:74:99:9f:91:8a:bb:7f:72:30:ed:a0:d5:cd: 05:a9:62:d3:ba:bf:b5:02:9d:7b:26:ed:73:59:ad:9b:43:32: 9f:44:d5:ff:49:9b:64:50:ef:4f:3c:04:35:69:e2:50:d8:d8: 5e:32:fa:c1:d2:89:8d:1a:05:b0:d4:96:b9:e6:23:64:4b:93: 53:e4:2e:d9:11:04:92:e5:c3:d3:db:95:00:eb:b7:dc:98:1a: af:c8:27:02:58:98:bb:4b:76:d4:74:36:6a:9e:1f:b5:85:cb: 39:d4:d0:a9:22:35:a2:06:c0:32:ab:d2:37:74:81:be:31:9f: 83:5a:78:7b:57:cb:37:33:43:8d:46:69:4a:b1:81:6f:48:5f: 16:92:a5:19:dc:47:b6:1d:a6:ab:c0:e9:dc:2f:fd:88:ff:21: b3:e7:cd:f5:e6:25:e7:18:be:29:05:f2:75:de:a2:f3:eb:d8: 9b:b7:35:c9:bf:88:1e:3c:ca:6d:6d:7b:1a:2e:f3:e3:2d:d2: d8:56:46:3d:31:cb:c5:83:5d:4c:e1:62:68:dc:c7:d5:66:be: 7a:57:07:6a:58:18:da:38:6b:13:e0:59:f2:39:77:8f:a2:68: c6:07:14:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpe+5TfjKqM58L+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk NTY5YTdjZWQtODBhZC00YWEwLWE4Y2YtYWRjNjAyYmRjYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxbE9Bx0E9Ew/oDto3bLSVW2esIDnpVh1ULn Nyhs3Sz+OI+vIhQ13A99sGakXjd5CZIhkCyQTLKEI38pri7TRyixv+aetXKGB/e7 YkLEuIAyW+uNEyLaCFwK8jq7ragnIXVcZO0YEYmjSZtEYpmZeVjGJ6WbuLxOEE93 UeTbHVJXdkUJLoXZfq0l3HwjgNxzeKOVcnw8AsXjlz7rY4r/AVhr9lxIMigvK0a/ zZ2gONgcNqBSGXMOyKr9E6fzNRBqC9SGrttWxdx76bycn28MDIg13SDx8jc4JVCU lHZI8ZztjfqQosMGf1V+aEzuaZS/5piCohF/CSydrl+8VBhHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt5i5eFv0+LQflPaL3O37bP+ta6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMjYzMWM2ZjQtY2M2Zi0z NjU3LWFjMGYtYTBjYjBhNzZiODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeWjvlyG9QspqQm1ih8wnOYe9oyLDoQdJmfkYq7f3Iw7aDVzQWpYtO6 v7UCnXsm7XNZrZtDMp9E1f9Jm2RQ7088BDVp4lDY2F4y+sHSiY0aBbDUlrnmI2RL k1PkLtkRBJLlw9PblQDrt9yYGq/IJwJYmLtLdtR0NmqeH7WFyznU0KkiNaIGwDKr 0jd0gb4xn4NaeHtXyzczQ41GaUqxgW9IXxaSpRncR7YdpqvA6dwv/Yj/IbPnzfXm JecYvikF8nXeovPr2Ju3Ncm/iB48ym1texou8+Mt0thWRj0xy8WDXUzhYmjcx9Vm vnpXB2pYGNo4axPgWfI5d4+iaMYHFO4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:01 2025 by rpki-client