$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa File: 8479e980-5926-3bca-b615-a9e231509306.roa (raw, json) Hash identifier: H1OkJnPjGGYicvQpT+fSFPOYiPXzn8db3EGHy1o3+oc= Subject key identifier: 1E:EF:88:58:70:CF:A0:C8:0B:EF:0E:C4:04:AE:D8:5E:4E:D6:B4:A2 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848F92695359B4E21EAE7ACDBC0 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 40703 IP address blocks: 157.166.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:95:35:9b:4e:21:ea:e7:ac:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b8e3ca59-0796-4fb1-b7eb-4986410a94da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:a8:e2:a6:e1:ac:32:47:ef:6a:26:e0:94: 6e:42:12:58:e5:f3:5a:70:20:0c:ea:d3:15:c3:fd: 4b:67:11:26:34:79:19:4b:72:24:e8:02:db:ca:bc: 1a:73:a7:90:44:dc:fe:39:5f:3f:ee:61:e0:b5:c5: 51:0e:b3:4c:dc:e1:f7:7b:d3:46:e9:67:9c:42:91: 55:37:f7:66:1f:aa:48:cb:96:98:63:97:f5:f0:b8: 8f:6d:17:63:c1:18:db:29:40:ca:2e:f2:71:a2:b6: ad:e7:a6:fa:28:6b:15:3b:87:fd:a1:28:09:a6:66: 36:07:15:70:3b:08:56:f4:ac:16:3a:14:03:59:27: e1:6b:74:d9:c5:97:0b:5b:33:00:70:59:43:23:38: 30:b3:07:11:6d:f8:59:7c:9e:bf:26:a3:74:22:4b: 30:52:c4:9d:22:fb:1e:8a:4d:b2:0c:f6:2b:a3:76: a1:f4:9d:a3:9a:e6:c3:7c:3d:7e:99:7c:24:4e:b5: a4:fb:e9:af:59:a9:2f:a9:bd:2f:83:b4:4e:ab:ae: 51:45:83:5b:03:1b:49:b7:00:4d:91:f5:f1:7c:e1: 60:16:68:bf:be:50:24:f8:4b:f9:95:4d:41:22:5e: c1:9c:ff:2a:9a:ce:1e:0d:a1:3c:96:b8:f5:6a:28: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EF:88:58:70:CF:A0:C8:0B:EF:0E:C4:04:AE:D8:5E:4E:D6:B4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:31:26:de:81:13:3d:00:4a:ab:15:cb:9d:b8:4a:21:3a:b5: a5:96:9a:d5:ec:96:7b:49:0e:0c:e4:41:92:ad:8a:7b:63:d8: b5:5f:aa:05:ad:1f:c2:c3:ce:2d:3a:0e:b6:0c:ba:6b:19:2e: cf:77:bd:5a:d5:b3:e1:1e:0c:cc:20:d4:67:4b:25:f8:1e:cf: bd:25:7c:5e:00:12:45:fc:e0:e3:80:b3:28:f0:96:bf:fc:0e: 74:59:dc:d7:57:de:c5:c9:1b:f8:d3:2f:26:37:96:89:d4:3b: 13:a1:8a:e5:42:b3:91:2f:34:eb:bd:af:71:10:c9:15:4e:29: 89:c0:ba:e0:79:be:74:97:1a:0b:81:9c:a0:0a:93:3c:b5:07: b3:23:f6:71:01:e1:a1:86:d3:95:fd:8b:f8:5d:d4:71:39:ec: 8a:27:73:05:0b:cf:64:85:9b:07:2f:55:94:1c:13:18:c2:a3: b5:c1:3a:a2:68:be:f8:fd:61:3a:c0:2b:86:12:6d:ca:a5:01: b2:1a:c4:9b:b9:81:18:0f:1c:46:a6:2d:5f:0c:77:2e:d0:4e: 75:00:0c:97:41:c6:92:20:22:9a:35:6c:23:99:37:b1:39:9c: 96:0f:dd:28:09:0e:4d:86:34:e0:9a:6c:e1:62:56:51:1a:83: 1d:51:41:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpU1m04h6ues28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YjhlM2NhNTktMDc5Ni00ZmIxLWI3ZWItNDk4NjQxMGE5NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiCo4qbhrDJH72om4JRuQhJY5fNacCAM6tMV w/1LZxEmNHkZS3Ik6ALbyrwac6eQRNz+OV8/7mHgtcVRDrNM3OH3e9NG6WecQpFV N/dmH6pIy5aYY5f18LiPbRdjwRjbKUDKLvJxorat56b6KGsVO4f9oSgJpmY2BxVw OwhW9KwWOhQDWSfha3TZxZcLWzMAcFlDIzgwswcRbfhZfJ6/JqN0IkswUsSdIvse ik2yDPYro3ah9J2jmubDfD1+mXwkTrWk++mvWakvqb0vg7ROq65RRYNbAxtJtwBN kfXxfOFgFmi/vlAk+Ev5lU1BIl7BnP8qms4eDaE8lrj1aija5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7viFhwz6DIC+8OxASu2F5O1rSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODQ3OWU5ODAtNTkyNi0z YmNhLWI2MTUtYTllMjMxNTA5MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcxJt6BEz0ASqsVy524SiE6taWWmtXslntJDgzkQZKtintj2LVfqgWt H8LDzi06DrYMumsZLs93vVrVs+EeDMwg1GdLJfgez70lfF4AEkX84OOAsyjwlr/8 DnRZ3NdX3sXJG/jTLyY3lonUOxOhiuVCs5EvNOu9r3EQyRVOKYnAuuB5vnSXGguB nKAKkzy1B7Mj9nEB4aGG05X9i/hd1HE57IoncwULz2SFmwcvVZQcExjCo7XBOqJo vvj9YTrAK4YSbcqlAbIaxJu5gRgPHEamLV8Mdy7QTnUADJdBxpIgIpo1bCOZN7E5 nJYP3SgJDk2GNOCabOFiVlEagx1RQW4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:50:26 2025 by rpki-client