$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/f071bbd9-5508-3e33-8df7-1f8472013466.roa File: f071bbd9-5508-3e33-8df7-1f8472013466.roa (raw, json) Hash identifier: dKB49YRD53yzxHMd99QkR4kUn8TlvijatT8kXCXL0aw= Subject key identifier: 22:42:F6:A9:82:C9:0B:47:BA:70:F0:43:BC:E7:3A:B0:16:AC:16:66 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285849393E6CE63D50F7CEB5873808 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/f071bbd9-5508-3e33-8df7-1f8472013466.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 5662 IP address blocks: 157.166.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:6c:e6:3d:50:f7:ce:b5:87:38:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=1e71c5fc-01d8-4c47-beef-be5f75f9204f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:12:79:bd:66:be:f5:0c:15:63:e9:ec:fb: b2:a5:6b:aa:e1:5d:cf:17:48:27:ff:f1:18:09:e9: 87:91:c6:56:64:ee:32:10:a3:ce:ab:96:ef:d2:90: 11:f7:bf:9a:06:5f:a8:d7:95:a5:4f:0e:94:2c:4a: 07:19:0b:d6:ce:c9:35:97:e3:d7:0a:1e:e2:b6:ee: ae:e1:15:9f:de:ec:30:2c:55:d5:b1:a5:75:06:62: 76:5b:cb:2c:ff:a2:b2:0a:e1:44:3f:cc:50:61:59: e9:53:8f:98:12:16:04:1a:6f:f7:8b:e0:a1:19:66: c8:7d:7e:21:57:70:81:7f:f2:cf:e4:48:06:8c:8a: 1f:4d:ec:4e:fd:54:1c:fb:82:bb:34:95:83:ef:08: 57:8a:a7:35:ac:9c:62:bf:69:9e:80:43:b4:61:fd: 90:4d:4f:03:f6:2b:37:d5:56:c9:ac:f1:72:9e:76: 7e:8f:5c:f5:57:e9:8d:08:c6:92:ae:27:14:1c:d5: 34:dc:b5:5d:ee:d0:63:54:2e:40:73:a9:be:dc:b6: cd:ae:03:49:73:0c:ce:f5:d1:51:a8:33:3e:de:9d: b2:66:01:28:80:4d:41:85:4b:7e:88:37:bf:a1:b3: a6:c5:ff:30:37:bf:c6:71:42:9c:5f:94:14:57:9b: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:F6:A9:82:C9:0B:47:BA:70:F0:43:BC:E7:3A:B0:16:AC:16:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/f071bbd9-5508-3e33-8df7-1f8472013466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:36:20:eb:e3:45:0f:15:fd:23:29:48:22:a2:0c:f4:e4:37: b5:80:d6:77:a5:ee:eb:50:14:12:ed:cd:b7:ee:27:2e:b0:c2: ba:e2:be:a3:8d:fc:61:df:8f:ab:ac:57:26:68:68:28:1d:86: 0c:82:6c:2c:c9:c2:80:df:67:50:fe:93:b6:c8:87:6e:b1:42: 2f:de:3f:e6:3c:df:6a:e5:3f:fa:76:19:e8:64:50:0a:9e:51: 2e:c2:99:a2:13:ed:6a:24:71:00:d1:9a:a8:b7:3c:bc:d8:e5: 17:ee:06:43:57:4a:1b:1e:2d:04:0b:79:4e:bb:45:bd:1c:6a: 1e:37:75:1f:7d:52:7f:93:3a:fd:ec:c4:16:77:73:e6:4a:bb: d7:0e:33:5d:56:70:8d:4e:fe:c0:ca:8e:93:ce:9f:7d:40:13: 77:dc:a5:7e:ec:18:d2:46:2f:f7:ce:72:2c:74:25:f7:54:f4: 1f:6f:eb:62:df:f0:c0:46:e8:c8:4a:05:19:cb:ec:f3:f9:48: 9e:c9:a0:ed:9e:60:6c:07:12:3a:8a:0c:14:db:8d:32:d6:97: 92:2d:32:f6:84:fc:34:d1:b6:d6:80:bb:51:9a:9b:5c:97:cb: 1e:33:ed:a3:89:fc:8d:85:65:a0:b5:eb:b0:46:57:1a:ad:10: b7:85:a3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PmzmPVD3zrWHOAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MWU3MWM1ZmMtMDFkOC00YzQ3LWJlZWYtYmU1Zjc1ZjkyMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnksSeb1mvvUMFWPp7PuypWuq4V3PF0gn//EY CemHkcZWZO4yEKPOq5bv0pAR97+aBl+o15WlTw6ULEoHGQvWzsk1l+PXCh7itu6u 4RWf3uwwLFXVsaV1BmJ2W8ss/6KyCuFEP8xQYVnpU4+YEhYEGm/3i+ChGWbIfX4h V3CBf/LP5EgGjIofTexO/VQc+4K7NJWD7whXiqc1rJxiv2megEO0Yf2QTU8D9is3 1VbJrPFynnZ+j1z1V+mNCMaSricUHNU03LVd7tBjVC5Ac6m+3LbNrgNJcwzO9dFR qDM+3p2yZgEogE1BhUt+iDe/obOmxf8wN7/GcUKcX5QUV5txHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJC9qmCyQtHunDwQ7znOrAWrBZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZjA3MWJiZDktNTUwOC0z ZTMzLThkZjctMWY4NDcyMDEzNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU2IOvjRQ8V/SMpSCKiDPTkN7WA1nel7utQFBLtzbfuJy6wwrrivqON /GHfj6usVyZoaCgdhgyCbCzJwoDfZ1D+k7bIh26xQi/eP+Y832rlP/p2GehkUAqe US7CmaIT7WokcQDRmqi3PLzY5RfuBkNXShseLQQLeU67Rb0cah43dR99Un+TOv3s xBZ3c+ZKu9cOM11WcI1O/sDKjpPOn31AE3fcpX7sGNJGL/fOcix0JfdU9B9v62Lf 8MBG6MhKBRnL7PP5SJ7JoO2eYGwHEjqKDBTbjTLWl5ItMvaE/DTRttaAu1Gam1yX yx4z7aOJ/I2FZaC167BGVxqtELeFows= -----END CERTIFICATE-----Generated at Sat Apr 12 13:59:39 2025 by rpki-client