$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa File: b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa (raw, json) Hash identifier: 7RcbRIpColncP6yHzAXSaLDdXQXan3l/31f3lW7zHmI= Subject key identifier: CB:A3:C0:B5:A5:9D:8F:2E:0A:BF:14:EF:75:D0:65:5A:5E:D8:2B:AB Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285849CE9A47FFAE136A1AFB86A480 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 5662 IP address blocks: 157.166.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:47:ff:ae:13:6a:1a:fb:86:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=2501160a-76e5-48be-80ce-aa9fbb90802e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:0b:0d:74:8c:6d:f2:14:66:8c:44:3c:4c: ee:a7:8c:39:e5:aa:86:57:11:55:b9:b6:be:92:ea: f8:da:a4:a2:7e:96:5f:28:cc:a8:ff:63:84:28:6b: cb:e5:aa:bc:b9:e3:70:38:09:44:49:a8:02:8e:4c: 9a:64:22:68:28:67:5a:40:f5:f8:01:d0:35:40:ca: 05:17:5d:a2:dd:04:6d:17:7a:b8:65:8f:04:32:86: ba:92:31:d4:49:82:c8:84:87:e4:32:77:d5:ff:fb: 96:54:cd:cc:3c:1b:09:52:38:16:ac:3f:b0:8d:cf: 52:42:c9:bb:d7:12:ba:32:cd:9d:af:2c:87:0d:ba: 4e:14:44:45:db:b3:34:2a:f0:0c:3e:d9:89:27:0e: c1:44:d0:c9:e0:4d:18:a2:52:00:72:6f:e2:15:52: 63:e1:7f:a9:da:ff:1a:ab:27:a4:7d:d0:a4:ca:e7: a5:82:f6:d5:f3:a7:f0:5c:2a:0e:c3:b1:76:45:a9: 70:c5:f0:66:a0:f6:cd:7b:f3:b5:3b:d1:64:d3:f1: 28:94:6c:63:99:79:9a:e8:94:38:93:2e:3e:78:ec: 1a:21:92:c0:9c:46:ba:c2:6e:2f:28:fb:06:47:78: ef:e5:ce:7a:07:bb:ff:3e:8f:a7:b8:2f:78:0e:9a: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:C0:B5:A5:9D:8F:2E:0A:BF:14:EF:75:D0:65:5A:5E:D8:2B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c9:d2:65:1c:52:cc:2c:64:fb:46:4c:76:4b:3f:32:f6:05: 14:eb:5e:b9:ac:d5:f4:3c:5b:6c:22:a9:36:43:de:72:b2:2b: b1:44:f5:03:e9:03:b6:34:a6:eb:88:be:d5:bf:59:e2:e0:a8: dc:5c:65:65:51:0b:ef:6d:e6:0f:c4:bd:fb:32:c2:8b:55:95: 04:31:17:f6:46:66:56:42:44:d9:d5:18:0b:1d:8f:aa:c9:96: 83:08:55:7b:07:9b:de:1d:c3:f2:5c:ac:92:e1:88:ef:f3:57: 7d:78:57:b1:03:47:37:8e:54:e7:d9:73:52:71:63:11:e6:7f: a6:a9:70:cc:9c:a9:e3:24:09:d6:e3:e2:c7:dd:4d:ec:9f:61: 21:c8:6c:78:96:f6:c2:27:5e:c8:1b:86:0b:27:9b:cc:36:67: 24:52:bc:77:1a:74:7f:af:d3:d0:ab:7f:c8:48:3c:53:da:e9: e4:c1:57:9d:68:4f:b6:e8:78:6c:c0:53:b4:9f:36:13:0c:ac: 4a:2d:08:9c:0c:c4:e4:d7:4f:1c:7d:b1:86:6f:ab:af:67:11: b3:54:9e:35:24:ee:70:38:f1:d3:0f:5a:2f:48:7d:04:65:5a: e3:ee:f2:18:38:9d:12:04:fd:66:41:33:1c:3d:62:8a:78:eb: aa:75:e9:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkf/rhNqGvuGpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MjUwMTE2MGEtNzZlNS00OGJlLTgwY2UtYWE5ZmJiOTA4MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps8LDXSMbfIUZoxEPEzup4w55aqGVxFVuba+ kur42qSifpZfKMyo/2OEKGvL5aq8ueNwOAlESagCjkyaZCJoKGdaQPX4AdA1QMoF F12i3QRtF3q4ZY8EMoa6kjHUSYLIhIfkMnfV//uWVM3MPBsJUjgWrD+wjc9SQsm7 1xK6Ms2dryyHDbpOFERF27M0KvAMPtmJJw7BRNDJ4E0YolIAcm/iFVJj4X+p2v8a qyekfdCkyuelgvbV86fwXCoOw7F2RalwxfBmoPbNe/O1O9Fk0/EolGxjmXma6JQ4 ky4+eOwaIZLAnEa6wm4vKPsGR3jv5c56B7v/Po+nuC94Dpq8jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMujwLWlnY8uCr8U73XQZVpe2CurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvYjA5Y2Y4NmEtNDllOS0z YWZjLThlY2QtMmUyZDVkMGQzNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTJ0mUcUswsZPtGTHZLPzL2BRTrXrms1fQ8W2wiqTZD3nKyK7FE9QPp A7Y0puuIvtW/WeLgqNxcZWVRC+9t5g/EvfsywotVlQQxF/ZGZlZCRNnVGAsdj6rJ loMIVXsHm94dw/JcrJLhiO/zV314V7EDRzeOVOfZc1JxYxHmf6apcMycqeMkCdbj 4sfdTeyfYSHIbHiW9sInXsgbhgsnm8w2ZyRSvHcadH+v09Crf8hIPFPa6eTBV51o T7boeGzAU7SfNhMMrEotCJwMxOTXTxx9sYZvq69nEbNUnjUk7nA48dMPWi9IfQRl WuPu8hg4nRIE/WZBMxw9Yop466p16XU= -----END CERTIFICATE-----Generated at Sun Jun 8 18:17:40 2025 by rpki-client