$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ff94b699-e0d8-3b04-8355-574d8492316f.roa File: ff94b699-e0d8-3b04-8355-574d8492316f.roa (raw, json) Hash identifier: HKPWQ9+akmRSrBH/oHg5h2PxY/K5FuKwHclZSrsyvhk= Subject key identifier: CF:30:A0:18:B1:7B:84:28:84:95:12:16:2C:01:DB:E7:0C:A9:5C:CE Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584882808A1DCF7BF951FA9F2080 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ff94b699-e0d8-3b04-8355-574d8492316f.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 157.166.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:8a:1d:cf:7b:f9:51:fa:9f:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=90193a36-6814-43df-b977-b06c43e7f28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:a4:cf:a4:b9:35:8d:a4:61:c9:2a:47:57: e4:30:49:f6:2d:d8:ef:b0:37:00:ce:ad:8b:b9:c7: 43:47:3c:ba:9c:ef:5c:89:4f:e0:1d:a0:2a:12:29: 33:8c:14:4d:62:df:e1:1a:43:31:ce:e9:6b:dd:83: d4:fc:5f:82:bc:af:cc:0c:fa:66:f1:52:35:e4:5c: f6:25:e5:b9:fd:8e:de:8a:e7:7b:19:91:f0:64:7e: 96:7d:c6:ce:5b:c2:b5:72:7a:10:25:e2:df:cd:3f: 46:10:6d:b4:9a:94:64:ca:e6:ed:3d:54:9b:bb:e9: 80:cb:6a:a6:4f:67:01:cb:9f:36:a8:87:bb:8f:c6: 6a:3b:42:4c:53:51:07:e2:04:71:77:d7:9e:b4:ea: 63:05:7b:5c:6e:b3:78:3b:e3:98:ec:09:90:1b:95: 6f:93:ad:be:bf:6d:ac:7e:fa:5b:d8:95:31:f3:2f: 5b:b1:62:a1:4c:7f:1e:05:da:45:fa:b8:b9:93:41: 93:84:ce:77:41:17:25:b8:5d:67:26:36:d8:9c:94: bf:de:72:cd:f5:e3:91:f5:95:f1:ab:fb:9b:36:b0: 14:f7:9f:22:46:10:66:46:40:89:1e:67:b4:c9:59: c8:ff:5a:dc:a3:bd:2a:30:bc:b9:5d:19:3d:41:a8: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:30:A0:18:B1:7B:84:28:84:95:12:16:2C:01:DB:E7:0C:A9:5C:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ff94b699-e0d8-3b04-8355-574d8492316f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:69:b0:92:64:b4:b0:95:69:f6:43:1b:92:5a:be:3f:d3:95: f2:f0:57:3d:4d:35:2f:8c:6d:56:d0:d7:63:69:fd:d1:86:ae: 58:20:90:b7:d8:85:69:48:52:0f:2e:4b:cd:ae:f1:48:d6:61: f0:4c:83:83:bd:e8:1e:9f:de:00:b0:94:4d:b9:56:ad:e6:10: b8:ad:4f:08:c0:3f:f1:71:9a:8d:0a:ef:3f:3d:96:bd:a6:ad: d7:f1:e5:f3:de:4d:c4:d4:7f:dc:6d:fb:3e:ac:39:21:88:86: 09:d7:e9:d8:ea:0c:2d:73:f9:a9:92:65:95:f5:55:70:5f:5d: 82:bb:cb:33:27:1a:75:cc:f5:2f:e3:48:f6:e0:ab:2c:db:4b: ca:fd:b1:6a:2c:35:95:dc:bc:44:9b:73:f6:c1:45:e7:a3:73: 85:af:01:ac:66:0b:e6:a4:30:04:10:21:a1:b5:31:e4:75:b2: 68:90:24:3a:be:61:6f:b3:04:1e:c0:5e:50:18:a0:1b:a5:a8: 32:89:fe:36:3c:25:e9:83:b5:88:10:1c:2d:53:55:8c:af:e3: 97:8e:e2:dc:a7:8a:da:cc:a6:53:c4:27:89:8e:62:c7:fe:d0: 81:49:43:01:e5:c6:fc:b2:18:01:11:51:f9:78:42:78:1d:4b: 22:03:01:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIodz3v5UfqfIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTAxOTNhMzYtNjgxNC00M2RmLWI5NzctYjA2YzQzZTdmMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkSkz6S5NY2kYckqR1fkMEn2LdjvsDcAzq2L ucdDRzy6nO9ciU/gHaAqEikzjBRNYt/hGkMxzulr3YPU/F+CvK/MDPpm8VI15Fz2 JeW5/Y7eiud7GZHwZH6WfcbOW8K1cnoQJeLfzT9GEG20mpRkyubtPVSbu+mAy2qm T2cBy582qIe7j8ZqO0JMU1EH4gRxd9eetOpjBXtcbrN4O+OY7AmQG5Vvk62+v22s fvpb2JUx8y9bsWKhTH8eBdpF+ri5k0GThM53QRcluF1nJjbYnJS/3nLN9eOR9ZXx q/ubNrAU958iRhBmRkCJHme0yVnI/1rco70qMLy5XRk9QaiuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8woBixe4QohJUSFiwB2+cMqVzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZmY5NGI2OTktZTBkOC0z YjA0LTgzNTUtNTc0ZDg0OTIzMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnaaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJpsJJktLCVafZDG5Javj/TlfLwVz1NNS+MbVbQ12Np/dGGrlggkLfY hWlIUg8uS82u8UjWYfBMg4O96B6f3gCwlE25Vq3mELitTwjAP/Fxmo0K7z89lr2m rdfx5fPeTcTUf9xt+z6sOSGIhgnX6djqDC1z+amSZZX1VXBfXYK7yzMnGnXM9S/j SPbgqyzbS8r9sWosNZXcvESbc/bBReejc4WvAaxmC+akMAQQIaG1MeR1smiQJDq+ YW+zBB7AXlAYoBulqDKJ/jY8JemDtYgQHC1TVYyv45eO4tynitrMplPEJ4mOYsf+ 0IFJQwHlxvyyGAERUfl4QngdSyIDAdc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:03 2025 by rpki-client