$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa File: 47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa (raw, json) Hash identifier: atBP+x/sspdrjk+g1PluT2xCYUl6VSjw4kZ1cCYxqFw= Subject key identifier: 99:FA:44:63:51:BE:61:7B:4B:6C:0E:2A:36:75:56:8F:09:A0:75:31 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584961B987240CB231E03907C900 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 40703 IP address blocks: 157.166.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:87:24:0c:b2:31:e0:39:07:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=3e22d6a6-279a-4fbe-beaa-a114cf1a2446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:ab:29:5a:9f:cc:25:11:7d:3e:a8:85:c4: 15:bb:62:5e:05:23:9e:74:2e:87:38:19:07:66:a4: 7c:16:30:d6:46:08:65:b4:7c:24:56:c8:9d:df:c7: ce:3a:d7:45:de:34:fd:56:46:0c:ed:3e:99:40:43: ef:2c:ab:e2:d3:b5:7e:d6:7c:72:f5:2e:7d:33:86: a5:95:de:91:d0:bf:04:da:4b:ce:15:10:29:08:a0: b2:aa:c2:8e:56:18:57:5e:4b:97:79:03:1d:39:4c: f2:96:72:26:b7:d1:8d:d2:3e:0b:d9:44:94:99:12: 6a:28:6b:e7:77:1d:9c:79:5d:09:11:3a:3e:4a:03: 7c:73:eb:b9:d6:b1:b7:d8:f8:07:7d:9c:a2:d0:07: e2:aa:f5:85:07:b9:28:1f:35:3f:19:b7:a3:5e:12: 16:e0:13:c7:8d:dd:10:c3:43:06:d9:0a:16:19:03: ee:40:45:01:53:a9:39:01:60:07:2a:5d:3f:78:85: ad:9a:a4:14:96:d8:b3:2e:d8:f6:6c:2c:b3:4e:06: 1f:ca:ba:58:3a:05:a9:7c:4b:4a:af:91:a9:ac:fe: 57:de:42:54:3a:99:72:32:e2:38:73:06:6f:d5:92: 73:35:b2:76:84:77:2a:76:c1:e7:09:10:33:ce:46: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FA:44:63:51:BE:61:7B:4B:6C:0E:2A:36:75:56:8F:09:A0:75:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/47c0a525-fa6e-345a-a44c-b2aa5fe5c8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ac:7b:44:69:e4:e5:8d:fd:ed:2e:7d:ea:da:e5:53:4d:54: 5c:24:a0:f5:21:79:40:94:8c:98:63:fe:8a:72:b4:db:eb:73: a6:4e:5a:b3:0f:22:6c:26:86:3d:fb:8f:29:ff:5c:45:4e:29: 36:76:76:51:13:91:19:06:12:fb:3b:2d:1b:46:e6:8e:17:95: 0a:bd:26:45:ab:01:05:10:45:0a:c0:be:21:0d:41:53:dd:4f: d5:76:59:1e:04:9c:9a:93:c7:3b:dd:32:db:51:86:72:8b:a4: c0:f5:f9:64:bb:ba:ca:ac:7a:47:4b:a2:26:5a:d9:d0:1c:85: 45:26:9a:8b:c8:1b:62:9a:db:34:df:5a:5b:2d:e4:5d:81:87: 3d:39:75:4f:66:fd:13:f2:7d:54:6a:4a:bb:a5:5c:a9:32:de: 6c:0a:6b:b2:45:78:79:1c:18:ba:0e:40:3a:5d:ce:46:31:4b: 66:90:d9:08:79:6d:1a:c3:fb:29:66:86:6f:f7:5b:26:d9:b9: 1c:e3:c0:a8:19:4b:b4:f2:71:bd:72:e3:83:8d:e2:db:08:a2: a3:1e:4f:b8:df:06:8e:fc:dd:b5:66:38:2d:de:20:00:a4:4c: 9d:7b:79:0f:1e:a6:2c:07:8b:77:13:de:29:48:67:03:37:47: d6:2c:c3:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYckDLIx4DkHyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk M2UyMmQ2YTYtMjc5YS00ZmJlLWJlYWEtYTExNGNmMWEyNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEerKVqfzCURfT6ohcQVu2JeBSOedC6HOBkH ZqR8FjDWRghltHwkVsid38fOOtdF3jT9VkYM7T6ZQEPvLKvi07V+1nxy9S59M4al ld6R0L8E2kvOFRApCKCyqsKOVhhXXkuXeQMdOUzylnImt9GN0j4L2USUmRJqKGvn dx2ceV0JETo+SgN8c+u51rG32PgHfZyi0AfiqvWFB7koHzU/GbejXhIW4BPHjd0Q w0MG2QoWGQPuQEUBU6k5AWAHKl0/eIWtmqQUltizLtj2bCyzTgYfyrpYOgWpfEtK r5GprP5X3kJUOplyMuI4cwZv1ZJzNbJ2hHcqdsHnCRAzzkZHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn6RGNRvmF7S2wOKjZ1Vo8JoHUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNDdjMGE1MjUtZmE2ZS0z NDVhLWE0NGMtYjJhYTVmZTVjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKise0Rp5OWN/e0ufera5VNNVFwkoPUheUCUjJhj/opytNvrc6ZOWrMP Imwmhj37jyn/XEVOKTZ2dlETkRkGEvs7LRtG5o4XlQq9JkWrAQUQRQrAviENQVPd T9V2WR4EnJqTxzvdMttRhnKLpMD1+WS7usqsekdLoiZa2dAchUUmmovIG2Ka2zTf Wlst5F2Bhz05dU9m/RPyfVRqSrulXKky3mwKa7JFeHkcGLoOQDpdzkYxS2aQ2Qh5 bRrD+ylmhm/3WybZuRzjwKgZS7Tycb1y44ON4tsIoqMeT7jfBo783bVmOC3eIACk TJ17eQ8epiwHi3cT3ilIZwM3R9Ysw6w= -----END CERTIFICATE-----Generated at Sat Apr 12 13:42:49 2025 by rpki-client