$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/516c9a4e-b36d-3189-9b16-b23f1c6228e6.roa File: 516c9a4e-b36d-3189-9b16-b23f1c6228e6.roa (raw, json) Hash identifier: 4L38J9im/2zgFGO8lXbgdVeHp4rD+DCzl8H71s704Bo= Subject key identifier: AC:85:04:E0:7E:E6:3E:15:34:9C:C6:41:26:F4:50:1B:96:F9:08:15 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848CC7B84D70ACA455777418D00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/516c9a4e-b36d-3189-9b16-b23f1c6228e6.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 2631 IP address blocks: 157.166.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:84:d7:0a:ca:45:57:77:41:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=cf7e5069-3a7d-4bca-a2d3-0ebf75f7640d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:c1:c1:76:41:80:3c:3c:28:ca:d5:d1:b4: 42:b0:bf:a5:db:9a:cd:3c:e8:b7:ee:0b:05:cb:79: 7c:0f:3f:89:45:3d:d8:8b:83:4b:00:79:30:06:84: 00:e1:32:b4:d1:f1:a6:3f:15:a8:a5:e5:6a:79:f5: 9a:11:55:9e:df:f5:17:35:0c:02:b4:e6:ca:64:47: 72:cf:bb:52:18:30:45:2b:2f:d9:da:9f:94:97:c7: 47:4f:68:0d:a4:03:d3:21:4f:c2:8d:06:dc:37:ef: 3f:33:47:e5:3d:34:5f:da:47:22:87:40:21:be:07: 7b:c5:37:d4:3b:0a:84:c1:3b:9d:cc:59:bc:f5:8c: e5:8d:e1:6a:6d:0e:ec:f8:4b:5f:fb:82:4c:60:a0: 8b:02:43:36:3c:34:fe:ac:77:bc:2b:03:8f:8c:07: 8e:d6:ae:d4:e2:71:29:fd:98:22:13:ae:28:fb:be: a1:df:f8:6c:f0:f6:9e:55:d5:7f:6a:e3:80:ce:73: 90:cb:83:b7:7a:df:cb:b4:1b:6f:a8:1a:85:b9:d7: ad:30:9c:00:05:44:e2:15:26:f7:0d:7f:01:00:12: 4e:52:bc:ed:94:d3:86:51:86:7c:aa:b9:5e:77:37: 08:a9:7a:51:96:c6:bb:b3:34:b6:9e:16:5b:56:30: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:04:E0:7E:E6:3E:15:34:9C:C6:41:26:F4:50:1B:96:F9:08:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/516c9a4e-b36d-3189-9b16-b23f1c6228e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3b:61:c9:9b:62:ea:ee:57:56:89:0c:24:0e:e3:bb:54:d4: eb:15:90:50:93:d6:5e:eb:90:b1:e0:a6:aa:ce:54:af:9f:7a: b9:3d:a0:ba:d7:bf:ea:e2:1c:06:98:84:1c:eb:8e:43:c3:0a: ef:4e:97:da:c8:74:97:bd:07:cf:df:fd:ba:74:3f:89:50:4d: 55:c1:94:a8:4d:49:47:55:4c:9e:e8:fe:0a:2d:72:81:eb:56: 26:c7:87:af:af:d0:b4:2a:44:4d:93:2c:94:bc:c5:3e:12:72: 05:18:68:a7:9e:5c:3c:60:3a:89:d0:ea:a0:6c:ef:35:f8:8c: 23:5a:f0:a0:56:20:52:5a:5a:56:6f:e2:92:93:38:89:62:b6: 30:32:64:24:85:f1:8a:ac:50:3d:7d:0a:ee:f7:d3:8a:6a:a4: 1e:e4:a4:f2:09:fa:49:2c:61:53:21:3b:38:48:c6:cf:1e:5b: af:9a:20:fd:b3:08:a0:12:ff:ec:a6:0a:a5:13:2d:a4:03:25: 09:24:a6:1a:1f:79:7d:a8:07:dc:f2:fc:8a:9e:41:d6:99:7b: e0:f0:69:b6:4b:b1:e4:ae:30:04:2e:ab:54:20:4a:63:87:62: 5a:3c:7a:aa:cb:39:2c:b5:b2:3d:7f:3e:d7:38:7d:da:9d:b8: 06:47:d8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe4TXCspFV3dBjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk Y2Y3ZTUwNjktM2E3ZC00YmNhLWEyZDMtMGViZjc1Zjc2NDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHTBwXZBgDw8KMrV0bRCsL+l25rNPOi37gsF y3l8Dz+JRT3Yi4NLAHkwBoQA4TK00fGmPxWopeVqefWaEVWe3/UXNQwCtObKZEdy z7tSGDBFKy/Z2p+Ul8dHT2gNpAPTIU/CjQbcN+8/M0flPTRf2kcih0Ahvgd7xTfU OwqEwTudzFm89YzljeFqbQ7s+Etf+4JMYKCLAkM2PDT+rHe8KwOPjAeO1q7U4nEp /ZgiE64o+76h3/hs8PaeVdV/auOAznOQy4O3et/LtBtvqBqFudetMJwABUTiFSb3 DX8BABJOUrztlNOGUYZ8qrledzcIqXpRlsa7szS2nhZbVjBlSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyFBOB+5j4VNJzGQSb0UBuW+QgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNTE2YzlhNGUtYjM2ZC0z MTg5LTliMTYtYjIzZjFjNjIyOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ87YcmbYuruV1aJDCQO47tU1OsVkFCT1l7rkLHgpqrOVK+ferk9oLrX v+riHAaYhBzrjkPDCu9Ol9rIdJe9B8/f/bp0P4lQTVXBlKhNSUdVTJ7o/gotcoHr VibHh6+v0LQqRE2TLJS8xT4ScgUYaKeeXDxgOonQ6qBs7zX4jCNa8KBWIFJaWlZv 4pKTOIlitjAyZCSF8YqsUD19Cu7304pqpB7kpPIJ+kksYVMhOzhIxs8eW6+aIP2z CKAS/+ymCqUTLaQDJQkkphofeX2oB9zy/IqeQdaZe+DwabZLseSuMAQuq1QgSmOH Ylo8eqrLOSy1sj1/Ptc4fdqduAZH2Nk= -----END CERTIFICATE-----Generated at Sat Apr 12 13:59:36 2025 by rpki-client