$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa File: 28d5ed5a-717b-35dc-b627-203d741bc9dc.roa (raw, json) Hash identifier: 4ebUWVl+1kMkH21RM0H0MB8qQzAnX3zrqy/il3RrbV4= Subject key identifier: EE:1E:69:25:B6:8E:3E:F0:8D:5F:D1:9E:22:9E:99:ED:F1:2B:23:B9 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584953C4179B3A8A41BE4CA46440 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 5662 IP address blocks: 157.166.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:17:9b:3a:8a:41:be:4c:a4:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=da4ad5bd-2137-41cb-b5e6-a5f744bb6166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:fa:d3:71:75:e4:4e:5e:0c:bc:f6:12:3b: 02:af:10:0b:96:54:af:b6:50:a4:77:55:c5:48:ad: 6a:9c:d2:96:e0:04:1a:2f:04:b8:03:0a:2e:58:b8: a4:7c:da:ec:a7:d1:34:a7:0e:57:81:e6:32:ae:e9: 4b:41:c6:a4:46:fb:8d:89:95:fb:f7:c9:79:3b:05: 43:38:c1:8d:64:4b:f0:2f:35:00:38:bd:ba:4f:06: c7:e1:ce:79:8c:7b:da:2c:72:3c:60:51:a2:86:80: 58:ef:35:11:e5:8b:f9:2b:6a:55:ff:33:61:24:00: 88:7a:3e:ed:40:12:ec:1e:68:25:6f:91:d3:f5:85: 4e:2a:2d:2b:57:c8:b9:3a:d3:10:40:48:dc:cc:6f: e5:bd:82:2b:58:97:e6:eb:2e:c5:c1:62:9b:08:f4: 01:7b:30:73:36:8b:6b:d4:91:24:47:6e:dd:3c:d2: e6:68:04:08:35:ee:c1:9e:a0:72:91:04:51:ac:c5: a0:d5:a9:ab:e8:48:cd:e0:df:3e:ae:c6:24:d5:cf: 36:c1:90:a4:55:12:ca:e6:d2:c5:5e:ea:3f:d0:ec: ed:e6:32:24:e5:bb:fe:a9:12:5d:d9:27:e6:90:cf: 84:23:5a:87:94:cb:b8:b5:b9:e6:53:58:0d:dc:a3: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1E:69:25:B6:8E:3E:F0:8D:5F:D1:9E:22:9E:99:ED:F1:2B:23:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:90:ca:be:3c:11:88:8c:c8:12:47:75:0d:62:52:ce:f3:99: 5d:96:a1:e7:20:c6:52:d8:20:82:16:dd:b6:d8:35:1e:b3:b3: 7a:80:05:c5:a9:24:51:2b:4c:1c:5b:d7:45:05:91:d9:00:c7: b7:77:27:a1:0a:d1:fd:0f:1e:81:09:f6:4f:b3:32:1e:b2:b3: 26:ce:63:21:f6:16:a4:6f:80:5d:b2:d1:eb:97:8d:77:fa:b2: a7:cc:24:e1:85:1a:59:f1:8a:fa:44:23:7b:08:44:01:0c:b3: a3:1f:a7:96:19:e6:29:df:74:8b:13:98:b2:7d:db:48:f1:ca: 41:35:01:7f:b2:15:ca:bc:d4:d1:3e:d1:c4:2f:48:2d:6e:5f: 26:83:5d:86:4d:18:d9:4f:2a:91:76:cb:da:b1:5c:53:69:c7: 1c:85:18:b5:5c:6d:74:b2:cd:19:30:4f:51:a2:a0:55:69:13: 46:06:cf:9c:31:ff:d6:e2:d5:04:f6:62:d2:14:d5:e5:79:d2: ee:de:29:8d:d6:cc:f8:d1:6d:4d:41:e8:44:1e:e8:6b:c7:c8: 47:9b:3e:66:8c:5b:59:38:54:da:a3:c5:40:a3:62:90:75:55: ee:ed:53:48:68:c2:0f:44:f1:ce:70:cf:69:85:41:9a:7e:a9: 10:d3:f6:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBebOopBvkykZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGE0YWQ1YmQtMjEzNy00MWNiLWI1ZTYtYTVmNzQ0YmI2MTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvin603F15E5eDLz2EjsCrxALllSvtlCkd1XF SK1qnNKW4AQaLwS4AwouWLikfNrsp9E0pw5XgeYyrulLQcakRvuNiZX798l5OwVD OMGNZEvwLzUAOL26TwbH4c55jHvaLHI8YFGihoBY7zUR5Yv5K2pV/zNhJACIej7t QBLsHmglb5HT9YVOKi0rV8i5OtMQQEjczG/lvYIrWJfm6y7FwWKbCPQBezBzNotr 1JEkR27dPNLmaAQINe7BnqBykQRRrMWg1amr6EjN4N8+rsYk1c82wZCkVRLK5tLF Xuo/0Ozt5jIk5bv+qRJd2SfmkM+EI1qHlMu4tbnmU1gN3KMtWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4eaSW2jj7wjV/RniKeme3xKyO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMjhkNWVkNWEtNzE3Yi0z NWRjLWI2MjctMjAzZDc0MWJjOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2Qyr48EYiMyBJHdQ1iUs7zmV2WoecgxlLYIIIW3bbYNR6zs3qABcWp JFErTBxb10UFkdkAx7d3J6EK0f0PHoEJ9k+zMh6ysybOYyH2FqRvgF2y0euXjXf6 sqfMJOGFGlnxivpEI3sIRAEMs6Mfp5YZ5infdIsTmLJ920jxykE1AX+yFcq81NE+ 0cQvSC1uXyaDXYZNGNlPKpF2y9qxXFNpxxyFGLVcbXSyzRkwT1GioFVpE0YGz5wx /9bi1QT2YtIU1eV50u7eKY3WzPjRbU1B6EQe6GvHyEebPmaMW1k4VNqjxUCjYpB1 Ve7tU0howg9E8c5wz2mFQZp+qRDT9sI= -----END CERTIFICATE-----Generated at Sat Apr 12 14:13:21 2025 by rpki-client