$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/4b0824b2-0cca-327c-b142-2760bb28ccd7.roa File: 4b0824b2-0cca-327c-b142-2760bb28ccd7.roa (raw, json) Hash identifier: QDnEN1T31/PwqUsIPU8LnYx6P0WvSqBPzIEOvLagzwM= Subject key identifier: 3C:5F:B9:6F:B6:EB:81:1D:8A:B5:D0:45:2E:39:D5:53:9D:26:8C:3A Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584A1F90132DA1C356DC5DC63E40 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/4b0824b2-0cca-327c-b142-2760bb28ccd7.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 5662 IP address blocks: 157.166.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:13:2d:a1:c3:56:dc:5d:c6:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=03ea9fa0-ca13-4573-8509-fcd4d9624d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:27:37:fb:e3:04:bc:d1:39:d2:43:70:92: 28:74:5f:20:5e:02:b1:33:3f:a4:02:57:ab:7c:ad: 8a:01:7f:02:da:c8:ad:21:95:0f:80:c6:0e:b2:ba: 97:5a:5a:1c:67:72:87:d7:33:ac:91:79:67:76:98: ac:bf:89:4f:71:4c:35:e1:82:36:c6:12:1d:66:a5: 23:c8:ae:69:63:2c:3b:3f:b4:a1:ac:9a:fc:b6:b6: ae:62:5c:79:63:54:63:ec:48:13:af:d6:0b:53:4c: 8c:3e:25:61:8b:c7:c6:fa:c1:23:c7:df:23:92:37: f8:90:5f:8c:79:d0:62:36:dc:ca:46:bf:f6:a5:6a: c4:ec:97:36:71:9c:cc:a4:9e:dd:e1:f1:45:c3:48: a9:ec:31:0e:c0:ce:de:63:e3:30:f4:ea:c0:a2:52: 3a:6f:d1:a9:a6:0d:e4:8e:d0:b2:dd:82:c9:fd:96: 2f:b2:1d:de:09:64:93:3b:23:1d:60:7d:b7:db:c4: fa:62:12:a7:08:f0:b4:9b:6d:97:61:b0:70:d0:8b: 26:52:05:7f:f3:b7:1b:c1:79:ed:e6:97:b0:bf:6b: f5:a7:c7:cd:c0:d0:26:4e:ae:f5:57:97:08:68:ec: 22:28:24:c9:63:b3:ab:6b:0d:30:8c:33:a1:7a:de: 4a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5F:B9:6F:B6:EB:81:1D:8A:B5:D0:45:2E:39:D5:53:9D:26:8C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/4b0824b2-0cca-327c-b142-2760bb28ccd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:61:2c:2d:2b:e1:a6:9a:94:1c:03:89:75:fd:2c:4c:3d:89: 88:24:8f:0b:d3:2c:cb:9b:2b:9f:9a:f3:87:1b:10:b9:22:91: 90:a1:42:a7:fc:65:94:22:75:c7:c9:b4:35:de:09:2f:38:fe: 69:d2:07:59:aa:73:67:19:5b:50:9b:70:cb:41:90:85:ba:6d: 00:08:b6:f7:6f:a2:9b:28:e4:14:2c:a5:ef:72:b6:4c:f5:51: f2:06:a8:2e:2b:da:74:35:a2:31:90:8f:2b:84:03:a0:98:42: bb:8f:36:f5:9a:b9:d1:08:43:3a:c7:3b:24:a7:db:73:6b:db: 35:d0:68:7a:41:8f:de:18:c4:4f:92:68:c9:b7:4e:59:bf:b7: 81:5b:50:ee:5e:60:f1:0a:0c:d3:3a:c3:61:42:9c:7f:91:c6: 5f:69:67:62:6d:29:95:51:bc:ea:04:1d:4b:81:bb:47:bb:21: c5:ec:0c:19:26:51:f9:be:c7:82:94:37:86:8f:17:3c:91:2a: 2b:1c:25:05:4c:59:24:37:e0:52:d4:89:88:71:f5:a3:5c:80: 7e:46:c1:0c:99:c0:a6:b6:09:b0:56:ad:0c:ef:51:3b:e7:c6: 6a:29:08:07:ab:ad:73:28:38:59:81:aa:a6:5f:1d:b7:63:c9: e5:0e:03:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkBMtocNW3F3GPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk MDNlYTlmYTAtY2ExMy00NTczLTg1MDktZmNkNGQ5NjI0ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCAnN/vjBLzROdJDcJIodF8gXgKxMz+kAler fK2KAX8C2sitIZUPgMYOsrqXWlocZ3KH1zOskXlndpisv4lPcUw14YI2xhIdZqUj yK5pYyw7P7ShrJr8trauYlx5Y1Rj7EgTr9YLU0yMPiVhi8fG+sEjx98jkjf4kF+M edBiNtzKRr/2pWrE7Jc2cZzMpJ7d4fFFw0ip7DEOwM7eY+Mw9OrAolI6b9Gppg3k jtCy3YLJ/ZYvsh3eCWSTOyMdYH2328T6YhKnCPC0m22XYbBw0IsmUgV/87cbwXnt 5pewv2v1p8fNwNAmTq71V5cIaOwiKCTJY7Oraw0wjDOhet5KBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxfuW+264EdirXQRS451VOdJow6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNGIwODI0YjItMGNjYS0z MjdjLWIxNDItMjc2MGJiMjhjY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5hLC0r4aaalBwDiXX9LEw9iYgkjwvTLMubK5+a84cbELkikZChQqf8 ZZQidcfJtDXeCS84/mnSB1mqc2cZW1CbcMtBkIW6bQAItvdvopso5BQspe9ytkz1 UfIGqC4r2nQ1ojGQjyuEA6CYQruPNvWaudEIQzrHOySn23Nr2zXQaHpBj94YxE+S aMm3Tlm/t4FbUO5eYPEKDNM6w2FCnH+Rxl9pZ2JtKZVRvOoEHUuBu0e7IcXsDBkm Ufm+x4KUN4aPFzyRKiscJQVMWSQ34FLUiYhx9aNcgH5GwQyZwKa2CbBWrQzvUTvn xmopCAerrXMoOFmBqqZfHbdjyeUOA+o= -----END CERTIFICATE-----Generated at Sun Jun 8 18:32:27 2025 by rpki-client