$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa File: 2bceb745-7b9c-357a-8f6d-71af9c14937b.roa (raw, json) Hash identifier: Vgm9rMnIzQB11kwXXrvVyhHilCUssmKAXmg+r3OSZrQ= Subject key identifier: FD:72:86:9C:AA:02:07:E6:CF:B4:01:85:D1:4A:80:66:C1:13:F4:5A Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848EF6134343BE382ED7934CD00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 40703 IP address blocks: 157.166.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:34:34:3b:e3:82:ed:79:34:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=be738895-449a-4a57-ae9f-0c0c44bb0e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:3b:27:bd:39:5b:3a:1a:f8:31:ce:44:77: 77:25:de:6d:6b:83:31:b1:94:b9:67:67:50:36:5e: 38:42:70:ef:da:bb:c2:a1:46:f8:1f:a9:22:59:29: 52:f5:9f:e8:61:d1:e6:1c:7d:a7:4b:19:12:19:98: 8a:c6:66:22:51:79:b3:70:29:c6:f8:49:d2:31:e9: ca:1e:8a:fe:a2:b3:fc:11:11:82:f2:30:1b:69:d7: 5c:fa:94:5d:29:db:e4:59:85:3d:36:53:55:c3:e4: a7:81:f6:b9:5b:40:95:5e:a5:94:b6:4c:5d:31:13: c8:7a:e8:0e:d7:2a:25:20:70:21:75:35:26:b7:11: 26:60:e8:61:27:35:1e:af:7c:37:bf:07:60:ad:ac: 03:9b:db:a2:9d:f1:6f:2d:05:7c:d5:50:56:41:e0: fb:0e:fe:3d:5c:b4:6f:ad:08:b9:48:0b:da:aa:db: ef:72:45:04:9a:9d:b1:54:58:8a:90:b4:16:c1:69: 4b:5b:ea:34:8c:18:02:76:d0:b5:69:f1:c0:02:e9: aa:4e:cd:e2:e5:4c:7f:2d:0d:b3:ff:44:16:5f:eb: d1:6e:5d:13:f3:76:ad:90:47:08:d6:84:ae:43:8d: c9:8a:62:fd:7c:34:d2:8e:e9:85:90:76:b6:c1:28: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:72:86:9C:AA:02:07:E6:CF:B4:01:85:D1:4A:80:66:C1:13:F4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:05:35:63:72:a5:fa:f3:0c:8d:70:d9:30:1a:b9:a0:39:d8: 0f:15:04:8e:5b:83:c5:c5:55:52:80:57:33:39:51:7c:7a:42: 35:b1:5e:5c:6b:f6:2c:a6:ea:5b:40:7a:16:70:38:62:92:61: 4e:c1:8e:50:9c:3d:cf:17:5f:68:4d:4c:a7:d3:32:08:03:25: 5e:16:3b:b1:60:65:bc:b4:f2:50:5b:d5:fb:76:28:27:ab:0a: ff:55:c6:fd:6c:67:d1:32:9b:8a:5e:56:78:ce:df:aa:6a:3e: 74:1b:7c:0e:48:e0:f5:a4:02:35:b9:a0:1b:1c:ed:af:35:b1: e4:e3:d9:52:05:bb:1a:18:af:f6:43:80:a5:b6:04:34:6f:e4: 96:f9:ec:d1:ea:cd:b5:7a:cf:a7:4e:4e:0b:c7:ed:3f:d0:ff: 80:dd:57:8d:cb:13:79:40:c1:e5:84:ff:23:cb:d5:aa:b8:21: a2:38:d8:85:a2:bc:4d:37:db:a1:91:e9:aa:77:78:fb:7b:7e: 43:a1:ea:12:b2:fc:f9:eb:38:1c:e0:96:51:05:02:36:4e:61: bb:6f:fc:d3:eb:aa:a3:09:37:02:4e:25:9e:03:05:25:4b:7a: b4:22:9c:65:2c:54:4a:15:8a:fa:7a:50:e8:29:1c:6a:d3:ff: 9a:32:10:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTQ0O+OC7Xk0zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YmU3Mzg4OTUtNDQ5YS00YTU3LWFlOWYtMGMwYzQ0YmIwZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSg7J705Wzoa+DHORHd3Jd5ta4MxsZS5Z2dQ Nl44QnDv2rvCoUb4H6kiWSlS9Z/oYdHmHH2nSxkSGZiKxmYiUXmzcCnG+EnSMenK Hor+orP8ERGC8jAbaddc+pRdKdvkWYU9NlNVw+Sngfa5W0CVXqWUtkxdMRPIeugO 1yolIHAhdTUmtxEmYOhhJzUer3w3vwdgrawDm9uinfFvLQV81VBWQeD7Dv49XLRv rQi5SAvaqtvvckUEmp2xVFiKkLQWwWlLW+o0jBgCdtC1afHAAumqTs3i5Ux/LQ2z /0QWX+vRbl0T83atkEcI1oSuQ43JimL9fDTSjumFkHa2wSgALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1yhpyqAgfmz7QBhdFKgGbBE/RaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMmJjZWI3NDUtN2I5Yy0z NTdhLThmNmQtNzFhZjljMTQ5MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnaagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgFNWNypfrzDI1w2TAauaA52A8VBI5bg8XFVVKAVzM5UXx6QjWxXlxr 9iym6ltAehZwOGKSYU7BjlCcPc8XX2hNTKfTMggDJV4WO7FgZby08lBb1ft2KCer Cv9Vxv1sZ9Eym4peVnjO36pqPnQbfA5I4PWkAjW5oBsc7a81seTj2VIFuxoYr/ZD gKW2BDRv5Jb57NHqzbV6z6dOTgvH7T/Q/4DdV43LE3lAweWE/yPL1aq4IaI42IWi vE0326GR6ap3ePt7fkOh6hKy/PnrOBzgllEFAjZOYbtv/NPrqqMJNwJOJZ4DBSVL erQinGUsVEoVivp6UOgpHGrT/5oyEO0= -----END CERTIFICATE-----Generated at Sat Apr 12 13:56:57 2025 by rpki-client