$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa File: 33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa (raw, json) Hash identifier: cbA9HL182nUD0/OmIZ2+ifUJOVThzwLw7ybwoFeP7Fs= Subject key identifier: 3B:91:21:91:C4:24:6D:D6:17:39:1C:6F:FB:42:0B:5B:DA:0A:04:67 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F432858480EA50AD088413E353A69F980 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 5662 IP address blocks: 157.166.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:0a:d0:88:41:3e:35:3a:69:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=fe65016d-431b-4f2d-91dc-bd77eb32b591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:97:6e:f8:db:db:15:c8:18:98:6a:5a:fe: 02:6b:e9:e7:a7:64:c2:c5:4a:8e:6c:61:d5:4f:26: 59:55:3e:04:54:d9:04:62:3f:11:3d:80:7f:6f:e1: 1b:73:d6:38:bd:49:96:57:df:49:38:60:d6:2f:89: 46:39:45:e6:e9:0d:60:f9:89:fd:33:4d:43:56:9f: 55:7a:95:5b:d5:f8:90:4c:c8:df:f0:bc:98:43:2f: e8:05:1d:88:56:3c:68:26:0c:bb:d0:11:8a:ee:fb: 51:9a:b4:fe:53:af:c2:42:d8:f7:ee:da:57:00:70: e8:68:49:de:de:5b:71:81:60:33:f7:6e:81:61:a5: 87:8f:53:45:7a:a4:a7:86:7b:7d:6a:80:3a:ca:0d: 1a:33:cd:49:03:5f:ba:64:50:dc:0b:f2:4d:f3:bd: ad:94:76:55:1e:f1:8e:f0:a6:ec:d7:5f:62:8c:21: 27:9d:cd:2b:2a:e7:c3:78:b7:06:b4:6f:d9:a9:47: e4:f6:0a:56:ab:87:91:e8:b6:d5:37:5f:dc:2f:18: 08:a5:17:c1:c8:97:8a:bf:19:23:79:5e:e7:86:7c: 28:7a:87:b6:38:17:8f:d5:5c:51:f9:9e:09:c3:a6: 98:f3:b8:de:06:11:87:b5:f7:e5:a9:13:a2:58:51: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:21:91:C4:24:6D:D6:17:39:1C:6F:FB:42:0B:5B:DA:0A:04:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/33bd73c7-0a37-3f1d-a81d-fba41a54e5c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0b:18:b5:d2:13:b2:b6:c5:a3:e9:dd:fe:21:e0:a8:22:60: 59:f4:20:b2:6b:c7:52:04:cf:d1:56:bd:4c:8a:fb:24:42:6e: 13:49:e4:f9:12:26:6c:66:2c:7f:80:c3:ef:e4:10:7f:a9:e3: d3:7a:5c:4c:33:9b:ec:5e:79:7e:95:8c:33:8a:8a:a5:89:0a: 26:aa:71:34:eb:ae:bd:b4:d0:d7:44:12:7d:ad:3d:f6:6c:ce: 40:86:cc:14:51:60:13:41:2a:b7:f8:3c:81:86:73:a9:94:27: 7f:f1:5b:cc:eb:a1:ce:83:60:ef:e0:a4:62:98:30:e8:71:6a: bd:ca:c4:49:f0:25:1d:36:b2:17:3e:bf:cf:4e:00:6b:24:86: d7:c9:3f:0a:10:9f:39:87:3a:48:55:2d:9b:f8:f8:eb:a5:e1: 15:26:38:63:33:31:cd:9b:b5:dd:7c:e4:91:ba:ab:55:30:c6: 5f:20:67:0a:15:d6:6a:bd:35:69:2e:58:75:84:94:44:0d:8f: 85:2c:1d:13:f1:9d:c2:15:e0:7f:d8:5b:04:04:b6:46:63:1d: 12:3b:3f:63:36:4b:b2:6f:8f:ac:85:bd:fd:f8:7d:c5:99:e6: c8:c9:99:05:89:09:41:6e:e5:f3:aa:50:e7:f7:2f:df:00:0d: e9:c1:24:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQrQiEE+NTpp+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk ZmU2NTAxNmQtNDMxYi00ZjJkLTkxZGMtYmQ3N2ViMzJiNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig2Xbvjb2xXIGJhqWv4Ca+nnp2TCxUqObGHV TyZZVT4EVNkEYj8RPYB/b+Ebc9Y4vUmWV99JOGDWL4lGOUXm6Q1g+Yn9M01DVp9V epVb1fiQTMjf8LyYQy/oBR2IVjxoJgy70BGK7vtRmrT+U6/CQtj37tpXAHDoaEne 3ltxgWAz926BYaWHj1NFeqSnhnt9aoA6yg0aM81JA1+6ZFDcC/JN872tlHZVHvGO 8Kbs119ijCEnnc0rKufDeLcGtG/ZqUfk9gpWq4eR6LbVN1/cLxgIpRfByJeKvxkj eV7nhnwoeoe2OBeP1VxR+Z4Jw6aY87jeBhGHtfflqROiWFFNbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuRIZHEJG3WFzkcb/tCC1vaCgRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMzNiZDczYzctMGEzNy0z ZjFkLWE4MWQtZmJhNDFhNTRlNWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnabgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKALGLXSE7K2xaPp3f4h4KgiYFn0ILJrx1IEz9FWvUyK+yRCbhNJ5PkS JmxmLH+Aw+/kEH+p49N6XEwzm+xeeX6VjDOKiqWJCiaqcTTrrr200NdEEn2tPfZs zkCGzBRRYBNBKrf4PIGGc6mUJ3/xW8zroc6DYO/gpGKYMOhxar3KxEnwJR02shc+ v89OAGskhtfJPwoQnzmHOkhVLZv4+Oul4RUmOGMzMc2btd185JG6q1Uwxl8gZwoV 1mq9NWkuWHWElEQNj4UsHRPxncIV4H/YWwQEtkZjHRI7P2M2S7Jvj6yFvf34fcWZ 5sjJmQWJCUFu5fOqUOf3L98ADenBJHE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:42 2025 by rpki-client