$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa File: ecd9439b-df70-304d-a65a-4712a2c669ef.roa (raw, json) Hash identifier: gjbPHfwDvZr8nUyt27uyboLKdLxodzO9cdiqiGiD0Ss= Subject key identifier: A5:A0:AF:12:8D:91:71:3C:55:6F:C6:FB:E3:F2:0E:D8:93:FC:11:81 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584894A5EFACD91B18DCA25E8080 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 16509 IP address blocks: 157.166.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:ef:ac:d9:1b:18:dc:a2:5e:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=1b37818b-ff55-4c2a-b697-6ba204b1eab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:be:e0:04:22:9e:59:ef:4f:f8:35:7a:54: 6b:e2:22:6b:70:d2:f1:fb:8d:0e:cb:c9:45:1d:4e: 07:ee:45:44:3a:f6:a6:f3:dc:34:df:c0:74:db:25: c2:7e:f6:40:11:2e:a7:57:4f:3a:dc:38:d0:65:c0: 22:6c:6e:b5:aa:d3:78:d4:bc:6e:70:1a:88:c5:a0: 72:5a:a2:9a:d3:ff:db:9f:e7:3e:fd:d0:e2:7c:72: d2:cd:c9:f5:6d:96:6c:23:71:05:b3:4b:5e:3f:c2: 6e:bb:aa:c3:56:32:d7:cf:ba:88:d1:03:2d:e1:77: 0d:0d:87:5b:e2:26:55:28:79:91:ee:d8:54:6e:54: 57:0a:06:05:fb:57:67:5f:27:a6:fb:49:01:3d:b0: b5:21:f0:fe:8c:14:4d:cc:0b:76:12:e8:32:47:19: 5e:9c:0b:d3:79:dc:13:64:c8:06:83:4f:b9:f5:76: 24:4f:05:14:ff:97:da:ab:f7:de:b5:48:d3:a1:c6: bd:ab:c3:1f:a0:7b:67:57:10:01:a8:2f:71:13:1b: 04:ae:06:08:39:84:1f:08:bb:0c:c4:d3:78:53:6f: 4a:09:fe:cd:0d:de:4a:ff:1e:fd:30:51:78:c1:a9: a6:cb:99:a4:33:df:a2:5b:a5:69:d3:6d:4a:37:32: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A0:AF:12:8D:91:71:3C:55:6F:C6:FB:E3:F2:0E:D8:93:FC:11:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d5:db:bf:da:18:c7:7d:7e:43:99:ad:3a:9d:d9:20:26:59: a1:9f:d3:a8:9a:4f:7d:09:0b:ce:aa:69:29:20:8c:ee:6c:6d: c2:e7:41:8c:e0:16:7b:8c:a4:1c:36:dd:eb:30:d5:4b:b9:97: 17:67:70:52:7b:48:47:9b:8d:03:5d:41:03:82:86:06:06:27: d0:d0:79:7c:75:c1:10:3e:91:60:ad:bf:55:75:f4:ea:12:66: 61:3d:26:b6:b8:a7:9a:57:67:67:5a:99:13:52:c7:f2:9d:cd: 00:3c:95:59:41:88:99:c6:2b:ce:6e:8e:55:46:90:19:bc:60: f6:71:8e:4b:a8:3a:de:5f:34:a4:e1:af:45:9f:5c:b8:09:04: 18:78:8a:59:db:cb:90:d3:a5:dc:1d:a0:71:b1:57:6b:15:29: 19:0c:6c:22:c4:8d:78:da:60:0f:44:30:48:74:94:e0:7f:06: d8:dc:dd:9e:33:74:86:11:30:2b:5c:d0:9d:3c:80:aa:f8:fc: 9b:8d:6f:60:67:88:5f:43:4e:12:2f:08:4d:11:af:c2:c4:b3: 88:19:92:c6:cc:9e:d2:75:fa:05:87:2b:ea:c2:be:b5:58:f0: f7:4c:2b:62:fb:43:09:e1:d7:09:ca:d7:34:4f:d6:45:4c:00: b5:a5:a4:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpe+s2RsY3KJegIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk MWIzNzgxOGItZmY1NS00YzJhLWI2OTctNmJhMjA0YjFlYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8m+4AQinlnvT/g1elRr4iJrcNLx+40Oy8lF HU4H7kVEOvam89w038B02yXCfvZAES6nV0863DjQZcAibG61qtN41LxucBqIxaBy WqKa0//bn+c+/dDifHLSzcn1bZZsI3EFs0teP8Juu6rDVjLXz7qI0QMt4XcNDYdb 4iZVKHmR7thUblRXCgYF+1dnXyem+0kBPbC1IfD+jBRNzAt2EugyRxlenAvTedwT ZMgGg0+59XYkTwUU/5faq/fetUjToca9q8MfoHtnVxABqC9xExsErgYIOYQfCLsM xNN4U29KCf7NDd5K/x79MFF4wammy5mkM9+iW6Vp021KNzIgqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWgrxKNkXE8VW/G++PyDtiT/BGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZWNkOTQzOWItZGY3MC0z MDRkLWE2NWEtNDcxMmEyYzY2OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfV27/aGMd9fkOZrTqd2SAmWaGf06iaT30JC86qaSkgjO5sbcLnQYzg FnuMpBw23esw1Uu5lxdncFJ7SEebjQNdQQOChgYGJ9DQeXx1wRA+kWCtv1V19OoS ZmE9Jra4p5pXZ2damRNSx/KdzQA8lVlBiJnGK85ujlVGkBm8YPZxjkuoOt5fNKTh r0WfXLgJBBh4ilnby5DTpdwdoHGxV2sVKRkMbCLEjXjaYA9EMEh0lOB/Btjc3Z4z dIYRMCtc0J08gKr4/JuNb2BniF9DThIvCE0Rr8LEs4gZksbMntJ1+gWHK+rCvrVY 8PdMK2L7Qwnh1wnK1zRP1kVMALWlpKM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:10 2025 by rpki-client