$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa File: dbfc0664-0294-36d7-b0bb-77ae346459b8.roa (raw, json) Hash identifier: KKVDALWZIdHhwOfokImlPueCCAU6DHIgQauyKmmyzc8= Subject key identifier: C9:3E:75:84:7B:EE:80:CB:CD:F8:E8:93:9B:7C:76:10:4B:7E:00:70 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285848EF61344B8A15E37AB20DA180 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 40703 IP address blocks: 157.166.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:34:4b:8a:15:e3:7a:b2:0d:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=51248474-7f90-40af-a718-63399ee9ec61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:20:c0:dd:a1:b6:52:a0:04:4c:49:0f:75: dc:93:17:9c:63:08:80:34:a0:a7:92:ea:4c:b7:40: 93:32:d6:a2:73:00:8f:1a:fa:80:d5:81:fe:b9:4a: 40:fd:98:d3:41:ab:13:57:fa:fe:fe:eb:5c:53:64: c2:a2:f9:e5:3b:f0:3c:6f:42:ca:54:0d:e7:62:70: 69:7b:0d:db:0f:25:9c:f4:ba:b0:4c:33:3e:95:f4: 7d:ff:1d:b6:36:bb:2e:dc:1e:24:49:62:3a:80:36: 4f:14:96:f9:91:b2:1d:79:3f:28:2e:a6:93:a7:9c: 65:dc:3f:50:ea:42:a5:ba:3a:47:0b:c8:54:09:cf: 3e:d0:16:8c:cd:e5:61:3f:c9:55:09:5e:52:3c:7f: 0f:e0:a4:30:67:a2:28:f1:2a:29:e4:4a:07:56:03: 5b:55:8b:de:ce:59:d1:d6:cf:17:0e:cd:7b:28:98: 61:de:db:2b:63:e1:e0:c6:33:2e:3c:71:05:e2:3b: 41:e8:51:89:bc:cc:d7:b2:4a:e1:ed:75:35:17:96: 59:d5:42:fd:80:d3:f3:ac:a7:f8:e0:c3:53:f1:34: 58:c7:f3:5d:05:65:f5:c8:28:09:15:c9:c1:b3:ee: 29:d3:b9:a0:2c:fe:1c:61:63:dd:6f:0b:20:4a:f2: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3E:75:84:7B:EE:80:CB:CD:F8:E8:93:9B:7C:76:10:4B:7E:00:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a2:01:2b:03:54:85:a2:b1:a1:2d:d0:b7:ff:86:d2:9b:9b: f0:b9:13:5c:ae:52:c0:cf:1b:8b:3d:c4:f7:73:26:0c:98:22: 72:4b:bc:d8:87:e7:76:43:8c:a2:0c:52:ce:d9:28:00:96:9d: 56:f5:f6:4c:ea:7d:a3:a7:47:66:36:cf:4f:9e:0d:2d:6f:d2: e1:9c:9d:a8:25:0b:7d:e0:7d:01:60:de:75:71:40:6f:b4:28: c6:e8:55:12:0a:da:b0:95:bb:f7:62:b3:fb:f3:74:23:30:b7: f3:e2:88:a5:e1:38:25:90:e6:4c:94:b1:0f:0a:95:b2:69:a9: 11:94:4b:f4:96:fb:5b:3a:f5:da:2a:64:9b:1e:d0:29:bb:dc: bd:f9:c2:a2:bf:cd:1b:f8:bd:43:af:96:ab:2f:6b:b2:57:d9: d0:3b:c4:a9:95:32:b0:92:5c:94:fe:3d:0c:41:31:a2:76:b8: 40:c3:6e:f3:6b:05:ed:c5:35:bc:a3:8c:ab:f9:92:a0:7f:d6: 68:02:5a:89:4f:59:dd:4f:a1:95:1f:aa:04:22:16:00:73:7a: e3:6b:64:2b:59:92:d0:3d:42:91:24:cf:fb:bd:0e:a2:7a:b9: f9:9b:35:82:4f:48:71:79:60:24:7c:4c:e8:74:e7:76:b9:97: 40:6d:a8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTRLihXjerINoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NTEyNDg0NzQtN2Y5MC00MGFmLWE3MTgtNjMzOTllZTllYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJkgwN2htlKgBExJD3XckxecYwiANKCnkupM t0CTMtaicwCPGvqA1YH+uUpA/ZjTQasTV/r+/utcU2TCovnlO/A8b0LKVA3nYnBp ew3bDyWc9LqwTDM+lfR9/x22Nrsu3B4kSWI6gDZPFJb5kbIdeT8oLqaTp5xl3D9Q 6kKlujpHC8hUCc8+0BaMzeVhP8lVCV5SPH8P4KQwZ6Io8Sop5EoHVgNbVYvezlnR 1s8XDs17KJhh3tsrY+HgxjMuPHEF4jtB6FGJvMzXskrh7XU1F5ZZ1UL9gNPzrKf4 4MNT8TRYx/NdBWX1yCgJFcnBs+4p07mgLP4cYWPdbwsgSvKuawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk+dYR77oDLzfjok5t8dhBLfgBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZGJmYzA2NjQtMDI5NC0z NmQ3LWIwYmItNzdhZTM0NjQ1OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnaaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWiASsDVIWisaEt0Lf/htKbm/C5E1yuUsDPG4s9xPdzJgyYInJLvNiH 53ZDjKIMUs7ZKACWnVb19kzqfaOnR2Y2z0+eDS1v0uGcnaglC33gfQFg3nVxQG+0 KMboVRIK2rCVu/dis/vzdCMwt/PiiKXhOCWQ5kyUsQ8KlbJpqRGUS/SW+1s69doq ZJse0Cm73L35wqK/zRv4vUOvlqsva7JX2dA7xKmVMrCSXJT+PQxBMaJ2uEDDbvNr Be3FNbyjjKv5kqB/1mgCWolPWd1PoZUfqgQiFgBzeuNrZCtZktA9QpEkz/u9DqJ6 ufmbNYJPSHF5YCR8TOh053a5l0BtqME= -----END CERTIFICATE-----Generated at Sat Apr 12 14:15:47 2025 by rpki-client