$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa File: 2bceb745-7b9c-357a-8f6d-71af9c14937b.roa (raw, json) Hash identifier: pqsvr4o7alQox9zrZ4dA1EtzjnvZ8RepXOlhieqGNuU= Subject key identifier: AA:24:07:69:7B:5C:E8:AD:34:2B:B7:C1:82:1D:E1:5C:34:9D:3B:80 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285849CE9A47DD86090EAB743FD900 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 40703 IP address blocks: 157.166.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:47:dd:86:09:0e:ab:74:3f:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=c881c81e-95a2-4da5-bde6-63393322b0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:1f:f6:12:d7:73:81:ed:46:5f:e0:fc:0f: be:ea:1c:57:e0:df:44:a7:80:1e:74:5b:b0:22:8d: 26:f1:a5:5f:05:be:67:b5:e6:fc:cf:c6:f1:5e:31: eb:bf:db:7d:13:4f:d8:b2:d9:1b:aa:04:ae:a2:22: 43:f1:f4:84:c8:d7:98:fe:5a:f9:29:83:41:b4:87: 45:b6:ee:02:bc:87:94:d3:82:05:ca:06:dc:24:05: 87:0a:03:c0:81:d8:64:9c:eb:e9:72:b4:72:5c:4c: 1f:5a:0b:e3:d2:cb:f8:d8:60:3b:38:ba:c6:55:75: c9:90:c8:ff:4c:16:98:5f:84:ec:93:fe:64:6f:7b: e5:86:89:80:56:1d:de:11:ad:03:6f:26:b6:47:83: 71:7e:1d:0b:e6:d1:c8:b4:c1:3f:fe:13:37:ac:da: 70:8a:44:f3:c1:2d:10:01:38:9b:61:a4:4d:68:34: 8f:9b:a3:06:f4:38:87:63:68:12:24:7a:11:54:e2: a9:66:13:cb:a1:6b:61:0d:90:b6:bf:86:f7:16:f4: 97:ec:62:48:e8:02:b6:9e:e1:ef:8d:4c:26:a3:04: 64:db:bb:3f:e2:c4:53:57:4c:0c:62:58:2d:46:00: a6:e3:db:6f:4b:2f:5f:5a:f5:49:34:24:35:8b:a5: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:24:07:69:7B:5C:E8:AD:34:2B:B7:C1:82:1D:E1:5C:34:9D:3B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:04:38:48:8b:fa:38:bd:db:ff:22:b2:d4:47:97:c8:e2:dc: 56:91:1b:a1:8e:eb:2d:79:2a:0f:83:5e:9f:5e:89:f9:24:2b: ac:c3:0f:b0:4a:7e:84:5e:ed:62:0b:5b:e7:c8:22:aa:1b:18: bd:b0:37:c0:ad:9e:40:ef:14:75:49:eb:75:37:88:3b:95:61: c5:ff:ce:be:64:65:bd:0c:26:d4:e9:3d:5f:23:70:8d:38:7f: a6:59:44:35:83:8f:de:a3:86:98:b7:4b:2a:d1:72:20:a2:f0: a5:6b:ed:d4:2f:5b:2b:8a:63:56:64:b3:ed:42:ed:b2:e8:cc: e3:cb:8f:b6:07:ed:c3:18:d6:c3:4a:c8:67:e7:2e:d2:74:00: 85:a9:0a:fa:83:97:7f:61:80:bc:58:ba:21:a8:86:1e:b2:ce: 45:68:77:f7:c4:2f:34:6e:ee:3d:51:8e:51:2c:65:79:b4:6a: 4b:96:71:bd:33:8a:bc:16:8d:51:46:ad:80:0c:22:e3:b4:c7: 6c:d8:85:23:84:e2:06:20:f8:58:b3:2e:fc:68:17:70:9b:2e: f6:46:7e:4e:f1:ed:ab:ac:c1:0a:ba:02:9c:b0:94:0e:cb:12: 74:f3:c3:c1:68:07:20:1a:db:f5:5a:dd:14:e1:cc:6e:cc:c6: e6:b7:64:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkfdhgkOq3Q/2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Yzg4MWM4MWUtOTVhMi00ZGE1LWJkZTYtNjMzOTMzMjJiMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlssf9hLXc4HtRl/g/A++6hxX4N9Ep4AedFuw Io0m8aVfBb5nteb8z8bxXjHrv9t9E0/YstkbqgSuoiJD8fSEyNeY/lr5KYNBtIdF tu4CvIeU04IFygbcJAWHCgPAgdhknOvpcrRyXEwfWgvj0sv42GA7OLrGVXXJkMj/ TBaYX4Tsk/5kb3vlhomAVh3eEa0Dbya2R4Nxfh0L5tHItME//hM3rNpwikTzwS0Q ATibYaRNaDSPm6MG9DiHY2gSJHoRVOKpZhPLoWthDZC2v4b3FvSX7GJI6AK2nuHv jUwmowRk27s/4sRTV0wMYlgtRgCm49tvSy9fWvVJNCQ1i6UdGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKokB2l7XOitNCu3wYId4Vw0nTuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMmJjZWI3NDUtN2I5Yy0z NTdhLThmNmQtNzFhZjljMTQ5MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnaagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoEOEiL+ji92/8istRHl8ji3FaRG6GO6y15Kg+DXp9eifkkK6zDD7BK foRe7WILW+fIIqobGL2wN8CtnkDvFHVJ63U3iDuVYcX/zr5kZb0MJtTpPV8jcI04 f6ZZRDWDj96jhpi3SyrRciCi8KVr7dQvWyuKY1Zks+1C7bLozOPLj7YH7cMY1sNK yGfnLtJ0AIWpCvqDl39hgLxYuiGohh6yzkVod/fELzRu7j1RjlEsZXm0akuWcb0z irwWjVFGrYAMIuO0x2zYhSOE4gYg+FizLvxoF3CbLvZGfk7x7auswQq6ApywlA7L EnTzw8FoByAa2/Va3RThzG7Mxua3ZJs= -----END CERTIFICATE-----Generated at Sun Jun 8 18:31:13 2025 by rpki-client