$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa File: 811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa (raw, json) Hash identifier: 4oM2P3r2KqaXUmbbX+Yntro0Xoz8DOYQ0dq4RNrpklc= Subject key identifier: 51:CD:0F:D3:D3:10:B5:69:42:13:33:91:A7:1D:C6:75:BA:A0:00:69 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848BFEBA50744285B55C136F880 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 40703 IP address blocks: 157.166.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a5:07:44:28:5b:55:c1:36:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=30ffc8d2-7b86-4c13-847b-1d1517b77453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:7d:dd:ca:92:fb:f2:ee:d3:21:c2:fd:7f: 9d:81:e9:0d:94:37:45:b7:fc:4b:f2:91:01:5a:de: 10:4c:ba:df:6c:4e:42:22:87:3a:59:58:26:a1:74: b5:eb:d0:22:a5:6c:93:ab:a4:87:2c:98:6a:0e:bf: 18:5e:c7:cb:f0:7d:69:ff:9c:f8:76:41:ff:cf:47: a8:ae:66:b8:b5:3c:a1:b2:0b:c4:57:d3:de:0a:a8: 56:05:fd:dc:70:6e:1a:69:23:88:5c:a8:1a:09:f9: 2e:b2:64:a9:5a:0d:eb:f3:ef:4c:f4:1d:89:f3:9a: 63:da:c8:f9:90:91:7c:5b:23:65:13:c2:14:57:7c: 08:cf:6e:cb:8a:9e:36:8c:ad:8a:2f:30:19:95:54: 55:68:5b:dc:23:c1:f6:d1:e9:f8:5f:22:c2:b5:af: a5:05:ab:8b:ed:dd:29:45:34:52:99:6f:d6:06:36: 6f:ef:98:68:74:ed:18:7a:d6:2f:39:f2:0f:3a:ed: 7e:a1:73:1d:e8:32:7e:b9:6c:72:9e:1c:c1:fc:99: 04:ba:be:13:fb:c6:a2:1d:e1:8b:f4:47:3c:94:77: 26:4a:37:5b:11:30:c0:a5:2f:a2:2c:74:05:66:a9: 76:d9:8c:d4:d2:9a:e1:06:dd:fa:b2:86:81:59:0e: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CD:0F:D3:D3:10:B5:69:42:13:33:91:A7:1D:C6:75:BA:A0:00:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:35:3c:e0:77:c9:78:80:0f:b9:10:f1:8d:c4:c0:89:8b:c1: 7a:06:e5:5d:27:8b:24:48:c7:7e:1a:fe:19:c3:c3:28:e7:f5: 81:50:13:d4:a1:62:a9:fd:69:9a:85:58:34:69:db:36:99:34: 64:aa:05:12:b4:8e:de:37:70:51:00:4c:64:7a:6f:4b:e5:d9: a4:31:f0:a5:f7:6a:f8:63:60:2a:b4:8a:c7:6c:b8:1d:b5:8c: df:d8:a0:e6:ab:dc:6b:58:1e:28:7d:88:47:f7:53:c4:98:65: 10:04:6c:05:c3:42:94:9b:e5:6a:be:aa:4a:9b:28:9d:d9:af: b6:87:92:62:85:40:3b:9e:df:6e:c5:34:4e:bd:12:a3:90:2e: 17:09:90:6c:43:a8:fc:f2:36:4c:7b:14:66:83:5d:fc:01:ce: d6:f9:cf:af:71:d8:fb:93:9c:ec:5c:d7:7f:b1:8b:9d:7b:15: 7a:33:53:11:4d:7a:e5:73:6a:a6:ce:22:f5:98:e4:be:62:85: e7:de:fe:20:c4:c8:04:7f:6e:bc:7a:52:64:56:5d:04:c8:2f: 08:db:de:9d:69:1d:ff:b0:90:4c:5f:10:41:45:3d:36:2f:d7: 6c:90:fa:2a:74:d7:a4:b6:53:db:0b:9e:08:eb:c2:94:35:d3: 4e:cc:ef:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66UHRChbVcE2+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MzBmZmM4ZDItN2I4Ni00YzEzLTg0N2ItMWQxNTE3Yjc3NDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrl93cqS+/Lu0yHC/X+dgekNlDdFt/xL8pEB Wt4QTLrfbE5CIoc6WVgmoXS169AipWyTq6SHLJhqDr8YXsfL8H1p/5z4dkH/z0eo rma4tTyhsgvEV9PeCqhWBf3ccG4aaSOIXKgaCfkusmSpWg3r8+9M9B2J85pj2sj5 kJF8WyNlE8IUV3wIz27Lip42jK2KLzAZlVRVaFvcI8H20en4XyLCta+lBauL7d0p RTRSmW/WBjZv75hodO0YetYvOfIPOu1+oXMd6DJ+uWxynhzB/JkEur4T+8aiHeGL 9Ec8lHcmSjdbETDApS+iLHQFZql22YzU0prhBt36soaBWQ7jCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHND9PTELVpQhMzkacdxnW6oABpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODExZTZhNWItZmZkNy0z YTNkLWE1OGUtZmYyODBkMWVmY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnabYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ01POB3yXiAD7kQ8Y3EwImLwXoG5V0niyRIx34a/hnDwyjn9YFQE9Sh Yqn9aZqFWDRp2zaZNGSqBRK0jt43cFEATGR6b0vl2aQx8KX3avhjYCq0isdsuB21 jN/YoOar3GtYHih9iEf3U8SYZRAEbAXDQpSb5Wq+qkqbKJ3Zr7aHkmKFQDue327F NE69EqOQLhcJkGxDqPzyNkx7FGaDXfwBztb5z69x2PuTnOxc13+xi517FXozUxFN euVzaqbOIvWY5L5ihefe/iDEyAR/brx6UmRWXQTILwjb3p1pHf+wkExfEEFFPTYv 12yQ+ip016S2U9sLngjrwpQ1007M77s= -----END CERTIFICATE-----Generated at Sat Apr 12 13:35:05 2025 by rpki-client