$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa File: b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa (raw, json) Hash identifier: itJlWapwKJVBQVuPzkU9IVyRhxw8rLyz0Dzodg6F4a8= Subject key identifier: 62:85:3F:5D:4B:45:61:4E:A8:6C:49:72:BA:7E:82:4D:E3:41:E3:20 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F432858483A3C1E839DB29AF18869DD80 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa Signing time: Mon 16 Dec 2024 16:44:54 +0000 ROA not before: Mon 16 Dec 2024 16:44:54 +0000 ROA not after: Sun 16 Mar 2025 15:44:54 +0000 asID: 2631 IP address blocks: 157.166.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3a:3c:1e:83:9d:b2:9a:f1:88:69:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Dec 16 16:44:54 2024 GMT Not After : Mar 16 15:44:54 2025 GMT Subject: CN=9655bfc6-d323-4e4d-aa49-2bb55e2183c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:0b:54:16:04:da:af:46:de:35:ca:2e:78: 41:6a:f9:42:6b:6b:35:9f:17:71:ae:ed:a5:19:4e: 20:d2:7c:fa:ea:ed:f4:10:e9:28:52:54:e1:7f:77: d7:31:3b:75:bc:92:c4:72:e9:29:24:d8:3a:29:93: 8e:18:6b:75:ef:f2:c3:34:81:6d:ad:52:0e:83:fe: d5:9d:b8:51:23:09:16:82:61:4b:f0:be:31:86:f1: 8a:27:74:bb:c6:43:25:64:8c:5d:84:16:64:5b:c8: e2:8f:59:7a:d8:5a:ef:0c:43:6c:b5:01:4d:d1:62: 61:03:a0:36:9d:ed:74:9d:ea:d9:cb:e4:83:2e:e6: d8:67:44:db:3a:e8:c9:aa:2f:1f:6c:ab:35:61:5e: 4c:8a:48:e1:d4:55:91:c4:46:46:90:0c:1d:ea:dd: 1f:09:f5:5e:d7:fa:a3:42:08:fe:ef:e1:a7:23:64: 5c:4d:fc:74:e0:ee:74:8e:da:70:86:21:9b:02:0c: 8f:db:fe:64:54:2f:e0:09:04:6e:7b:77:d3:e2:dd: 77:22:bc:26:e3:c3:9c:5d:22:0b:51:8c:5f:c7:aa: 0c:2d:54:bc:44:55:f2:a1:0b:58:00:cf:3f:92:f6: 88:7f:0e:f3:16:52:14:46:14:38:7f:57:b8:ac:e4: af:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:85:3F:5D:4B:45:61:4E:A8:6C:49:72:BA:7E:82:4D:E3:41:E3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b0b7a27d-5933-3e3f-992c-3de05a0bce28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:8a:a4:9d:dd:0d:f7:1b:88:26:c4:06:8d:b7:64:0f:b7: 94:d8:75:32:21:af:53:ac:a1:8b:5c:db:45:78:60:a3:5a:66: 69:3f:bd:7d:f7:1b:bd:f2:bc:96:35:d2:b4:0f:90:7f:dc:8f: 35:a0:2d:06:76:fc:ec:dc:bb:37:fe:36:6f:04:6a:45:fa:cf: 6e:ab:b3:95:63:5e:a8:72:cf:61:dd:3a:59:4b:0b:af:08:15: 08:07:21:ac:c3:cb:32:e5:b5:cf:db:94:bf:66:a7:a5:f9:f4: 63:f4:c2:ce:1c:fc:e9:7d:20:32:b6:80:f2:b2:2c:5e:52:7c: 39:b0:d8:c9:96:ae:c0:b5:6b:11:2f:43:79:ff:33:7d:09:a5: a0:db:a1:bf:77:9f:ec:b4:8d:cf:63:a1:53:d1:15:d3:3f:6e: d5:3e:5d:dc:b9:23:b7:ce:c7:9d:83:ee:3b:f8:07:68:a2:a7: 23:3c:8c:5f:2c:6c:10:d4:e3:f0:8a:5d:0e:c4:c0:ff:96:a0: 9e:26:46:fb:2a:32:97:9b:4d:09:d6:d2:fc:97:c3:63:0e:c9: 6d:7e:00:6c:26:58:61:d9:90:e5:37:d5:6a:ce:24:08:1a:de: 1f:68:b6:b6:30:f8:fa:b4:d3:b8:f4:f9:a2:5b:38:36:3a:d6: 0c:f5:e2:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg6PB6DnbKa8Yhp3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI0MTIxNjE2NDQ1NFoXDTI1MDMxNjE1NDQ1NFowLzEtMCsGA1UEAxMk OTY1NWJmYzYtZDMyMy00ZTRkLWFhNDktMmJiNTVlMjE4M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq8LVBYE2q9G3jXKLnhBavlCa2s1nxdxru2l GU4g0nz66u30EOkoUlThf3fXMTt1vJLEcukpJNg6KZOOGGt17/LDNIFtrVIOg/7V nbhRIwkWgmFL8L4xhvGKJ3S7xkMlZIxdhBZkW8jij1l62FrvDENstQFN0WJhA6A2 ne10nerZy+SDLubYZ0TbOujJqi8fbKs1YV5Mikjh1FWRxEZGkAwd6t0fCfVe1/qj Qgj+7+GnI2RcTfx04O50jtpwhiGbAgyP2/5kVC/gCQRue3fT4t13Irwm48OcXSIL UYxfx6oMLVS8RFXyoQtYAM8/kvaIfw7zFlIURhQ4f1e4rOSv2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKFP11LRWFOqGxJcrp+gk3jQeMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvYjBiN2EyN2QtNTkzMy0z ZTNmLTk5MmMtM2RlMDVhMGJjZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRCiqSd3Q33G4gmxAaNt2QPt5TYdTIhr1OsoYtc20V4YKNaZmk/vX33 G73yvJY10rQPkH/cjzWgLQZ2/Ozcuzf+Nm8EakX6z26rs5VjXqhyz2HdOllLC68I FQgHIazDyzLltc/blL9mp6X59GP0ws4c/Ol9IDK2gPKyLF5SfDmw2MmWrsC1axEv Q3n/M30JpaDbob93n+y0jc9joVPRFdM/btU+Xdy5I7fOx52D7jv4B2iipyM8jF8s bBDU4/CKXQ7EwP+WoJ4mRvsqMpebTQnW0vyXw2MOyW1+AGwmWGHZkOU31WrOJAga 3h9otrYw+Pq007j0+aJbODY61gz14g4= -----END CERTIFICATE-----Generated at Wed Feb 19 20:36:38 2025 by rpki-client