$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa File: 86496a16-88a9-3767-866b-3cfa90b5926b.roa (raw, json) Hash identifier: p3Nvdpa18/HJheKLu/TjeSyAK9/QSR7taysm65cnObc= Subject key identifier: 9E:D0:04:29:03:63:4A:90:13:01:E2:B8:A5:53:FD:D7:E1:84:61:DE Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848DBD66D425639311CFA96AD40 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 5662 IP address blocks: 157.166.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:6d:42:56:39:31:1c:fa:96:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=8668fd9e-2fa6-402b-957a-2cc72d929239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:4d:8e:12:c3:4d:d0:31:6d:0b:cf:06:11: 73:f4:3b:91:d7:e9:cd:8d:e3:fa:c0:bf:18:af:e3: 7f:86:e7:f1:9c:c5:e2:3f:af:1f:ba:cf:25:f1:07: bb:bd:f8:83:17:1f:1f:a6:28:df:57:3f:a2:3d:98: 8c:0b:57:a6:70:f2:6a:53:f3:86:0b:2f:bb:4d:ca: e5:b5:80:ba:cd:7b:45:63:c9:90:e1:22:15:d5:bb: c5:59:1f:47:cb:99:17:95:b5:5a:47:35:66:12:55: 63:d8:3b:b0:51:e0:45:45:8f:50:34:c4:35:5a:3e: fe:21:02:7a:1b:c6:90:7a:d7:43:4b:7a:d0:4a:ca: 64:3a:7c:48:0c:07:78:02:0b:7a:c4:33:b4:f7:9d: e5:2d:80:9a:5a:1a:df:d5:90:5e:c1:de:bb:d3:e2: 05:65:2e:ee:03:6f:c2:38:c0:b9:78:76:c3:f9:9d: 34:fe:c8:13:78:7b:29:31:f3:b3:39:ba:b9:1e:78: b6:78:a3:55:2b:65:bd:20:72:c6:93:4c:84:06:53: 63:da:3d:42:cc:83:1f:81:4a:f7:26:02:82:6a:c2: b2:c1:17:b0:63:b0:53:b8:a4:66:63:86:c4:31:68: 0e:f7:83:d7:0d:93:2f:19:4d:80:66:cb:42:dc:b2: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D0:04:29:03:63:4A:90:13:01:E2:B8:A5:53:FD:D7:E1:84:61:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:28:f9:53:c5:87:28:71:6e:70:b9:20:96:35:32:e6:ad:6e: bd:b6:fb:87:a9:8b:19:7e:0f:57:8b:dc:ce:77:c1:2c:e9:a7: df:ff:07:c7:20:4b:29:8b:56:7a:f9:fc:bd:a4:2f:03:44:e1: e3:16:8b:ab:eb:6f:8d:33:1c:ff:05:d3:e0:2a:7b:c8:1c:5d: d6:79:9a:bf:12:78:7c:7b:48:0c:ba:dd:71:48:e0:1e:19:0e: 97:5d:d8:a8:19:dd:38:9b:e4:3b:e9:84:e6:99:00:7a:4a:78: 6d:f3:34:6f:02:92:ac:7e:9e:c6:5b:83:4b:82:91:ba:2c:10: ff:60:ac:af:b0:1f:de:fe:83:7d:0d:4e:fa:d7:fd:1b:2b:32: 4f:de:92:ed:76:ae:f7:09:bb:40:46:ac:92:0c:0e:36:fd:21: 7b:80:87:56:a2:cc:bb:6c:00:92:fe:ed:2b:90:7d:b7:ba:91: 76:ac:cc:8c:2e:6c:0d:42:e7:af:2c:38:54:7c:1f:aa:41:aa: 6c:d3:da:6b:1f:50:29:e8:95:30:3b:13:82:f3:87:84:d2:cb: 93:0e:47:c5:e5:0b:9b:da:9d:ed:ad:28:0c:4d:e9:f7:d9:e9: a3:ba:c6:f9:0c:b4:6f:fa:9c:d4:1c:3d:1f:ef:62:e7:8c:6d: 12:03:f9:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1m1CVjkxHPqWrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk ODY2OGZkOWUtMmZhNi00MDJiLTk1N2EtMmNjNzJkOTI5MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9NNjhLDTdAxbQvPBhFz9DuR1+nNjeP6wL8Y r+N/hufxnMXiP68fus8l8Qe7vfiDFx8fpijfVz+iPZiMC1emcPJqU/OGCy+7Tcrl tYC6zXtFY8mQ4SIV1bvFWR9Hy5kXlbVaRzVmElVj2DuwUeBFRY9QNMQ1Wj7+IQJ6 G8aQetdDS3rQSspkOnxIDAd4Agt6xDO0953lLYCaWhrf1ZBewd670+IFZS7uA2/C OMC5eHbD+Z00/sgTeHspMfOzObq5Hni2eKNVK2W9IHLGk0yEBlNj2j1CzIMfgUr3 JgKCasKywRewY7BTuKRmY4bEMWgO94PXDZMvGU2AZstC3LIOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7QBCkDY0qQEwHiuKVT/dfhhGHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODY0OTZhMTYtODhhOS0z NzY3LTg2NmItM2NmYTkwYjU5MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8o+VPFhyhxbnC5IJY1Muatbr22+4epixl+D1eL3M53wSzpp9//B8cg SymLVnr5/L2kLwNE4eMWi6vrb40zHP8F0+Aqe8gcXdZ5mr8SeHx7SAy63XFI4B4Z Dpdd2KgZ3Tib5DvphOaZAHpKeG3zNG8Ckqx+nsZbg0uCkbosEP9grK+wH97+g30N TvrX/RsrMk/eku12rvcJu0BGrJIMDjb9IXuAh1aizLtsAJL+7SuQfbe6kXaszIwu bA1C568sOFR8H6pBqmzT2msfUCnolTA7E4Lzh4TSy5MOR8XlC5vane2tKAxN6ffZ 6aO6xvkMtG/6nNQcPR/vYueMbRID+YQ= -----END CERTIFICATE-----Generated at Sat Apr 12 14:02:42 2025 by rpki-client