$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/5dd0eda1-2498-3ded-9990-ae68b74aebfe.roa File: 5dd0eda1-2498-3ded-9990-ae68b74aebfe.roa (raw, json) Hash identifier: OCAsnDPoDymrCApmehsu6DG8AcAicCAs5WeiBd4jaZ8= Subject key identifier: 9B:C0:75:D0:FC:79:28:94:62:93:AC:C3:A2:68:56:71:0C:5B:6A:20 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F432858481C9A82418DD85B55E9388B00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/5dd0eda1-2498-3ded-9990-ae68b74aebfe.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 16509 IP address blocks: 157.166.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:82:41:8d:d8:5b:55:e9:38:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=66ff904b-1849-4027-a21b-72b4b4f1e92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:2e:91:98:61:eb:b7:f7:e5:58:10:53:1a: 69:ec:3b:3a:28:42:bc:b3:82:da:70:f9:0e:63:96: e2:d2:06:c6:f6:e3:ae:96:dc:3c:2e:99:87:f3:ad: bf:d7:e3:ad:08:89:96:24:29:7a:e1:37:49:f4:31: 27:45:9d:58:df:ea:98:4a:86:53:a9:63:ba:eb:97: 8a:20:82:5f:27:81:44:f9:80:81:52:21:87:20:66: 3b:34:92:38:92:7b:66:bd:1a:d9:58:b0:96:4a:03: 1a:e1:80:fd:f8:3c:a3:65:9a:5b:9d:3d:b0:fb:2e: 58:1b:05:33:d3:e1:53:36:ae:44:70:9d:0c:9c:01: be:e5:88:71:3f:93:9d:eb:43:33:69:a0:ce:d6:71: f1:82:ac:35:79:5c:61:cd:ff:3f:26:72:f5:5c:77: 43:0c:e4:34:ea:2b:50:09:1e:ff:ad:c4:e6:44:63: a2:46:58:56:94:b4:af:de:4b:54:84:c5:a7:74:4d: 3d:f1:c2:45:a3:f1:56:04:2f:cb:12:e5:3c:93:7d: 8a:9d:7f:e0:33:65:6b:04:a4:a4:a5:f8:47:eb:82: b6:c4:72:ed:6e:c6:52:4a:c0:d7:8a:9b:0b:f9:d6: 7c:78:30:0f:7a:75:85:7b:73:42:08:85:94:10:00: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C0:75:D0:FC:79:28:94:62:93:AC:C3:A2:68:56:71:0C:5B:6A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/5dd0eda1-2498-3ded-9990-ae68b74aebfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ac:db:0e:86:9c:21:2f:19:87:bb:7f:19:c4:e9:0b:3a:8c: 3a:aa:08:6b:98:3d:62:4f:e1:c6:dc:d1:54:d6:e5:c7:bd:00: c1:47:52:8c:5f:29:44:f5:78:e8:36:a8:21:18:f0:50:c0:d0: d7:73:e3:d4:dc:00:e2:60:20:5f:dd:b2:b3:02:60:ca:42:85: c7:d1:10:21:ad:88:92:d8:d2:8c:a8:ea:77:a1:cd:f1:63:1c: 75:0f:21:fb:57:f4:9f:a9:41:65:f7:30:da:66:60:ff:6c:04: 47:91:a1:4d:99:7d:fb:f2:b7:4b:46:6b:b9:0d:64:7c:a2:9a: 5c:4d:bb:16:ba:d2:ca:9c:94:2a:f4:3f:89:36:8e:53:9c:76: 5c:1d:02:a0:b1:2c:de:4c:60:bf:ea:f0:5c:3d:a2:e2:ad:41: 9b:25:38:ab:c9:10:b8:55:6f:e0:42:be:f6:17:b8:27:26:95: 04:33:53:e6:47:07:73:21:8a:1e:8b:dd:86:db:35:20:23:0d: 20:59:d0:f5:1e:a8:49:0d:c5:48:da:07:17:cb:72:36:83:d2: 63:0c:ee:a9:58:a5:27:29:61:7c:f6:af:32:dc:5b:b9:61:87: 2f:8c:30:d2:19:8c:55:fa:01:ba:a0:c6:6b:d8:b8:7b:4f:34: e9:87:a2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmoJBjdhbVek4iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk NjZmZjkwNGItMTg0OS00MDI3LWEyMWItNzJiNGI0ZjFlOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZAukZhh67f35VgQUxpp7Ds6KEK8s4LacPkO Y5bi0gbG9uOultw8LpmH862/1+OtCImWJCl64TdJ9DEnRZ1Y3+qYSoZTqWO665eK IIJfJ4FE+YCBUiGHIGY7NJI4kntmvRrZWLCWSgMa4YD9+DyjZZpbnT2w+y5YGwUz 0+FTNq5EcJ0MnAG+5YhxP5Od60MzaaDO1nHxgqw1eVxhzf8/JnL1XHdDDOQ06itQ CR7/rcTmRGOiRlhWlLSv3ktUhMWndE098cJFo/FWBC/LEuU8k32KnX/gM2VrBKSk pfhH64K2xHLtbsZSSsDXipsL+dZ8eDAPenWFe3NCCIWUEADCLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvAddD8eSiUYpOsw6JoVnEMW2ogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNWRkMGVkYTEtMjQ5OC0z ZGVkLTk5OTAtYWU2OGI3NGFlYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnabUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6s2w6GnCEvGYe7fxnE6Qs6jDqqCGuYPWJP4cbc0VTW5ce9AMFHUoxf KUT1eOg2qCEY8FDA0Ndz49TcAOJgIF/dsrMCYMpChcfRECGtiJLY0oyo6nehzfFj HHUPIftX9J+pQWX3MNpmYP9sBEeRoU2Zffvyt0tGa7kNZHyimlxNuxa60sqclCr0 P4k2jlOcdlwdAqCxLN5MYL/q8Fw9ouKtQZslOKvJELhVb+BCvvYXuCcmlQQzU+ZH B3Mhih6L3YbbNSAjDSBZ0PUeqEkNxUjaBxfLcjaD0mMM7qlYpScpYXz2rzLcW7lh hy+MMNIZjFX6AbqgxmvYuHtPNOmHojE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:28 2025 by rpki-client