$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/d9a4c7c7-c8cb-3fc5-b355-11739aff3d25.roa File: d9a4c7c7-c8cb-3fc5-b355-11739aff3d25.roa (raw, json) Hash identifier: gfQPsF/k96DJKGyZ/ZJDAuQG1kgfXA/3+NLOIgfATuM= Subject key identifier: B6:C0:E4:8E:D7:A2:BB:62:71:15:C6:80:4D:65:43:BF:94:D3:03:EB Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584A4F05BCB253C39BC2F07DDE00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/d9a4c7c7-c8cb-3fc5-b355-11739aff3d25.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 5662 IP address blocks: 157.166.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:bc:b2:53:c3:9b:c2:f0:7d:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=52f745a9-f17b-47a6-b454-d07f18f4fa58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:16:73:f9:45:b7:ed:34:d5:c5:bf:9b:36: ea:51:8e:af:4d:4c:90:cd:2b:97:33:51:a4:8d:b3: c7:9c:97:b1:ab:52:ce:02:8f:28:a7:89:99:2f:43: b6:3b:b3:1f:15:20:0c:df:f2:18:e2:30:99:8b:d2: 2f:6b:7c:8e:d4:f3:f3:88:0c:d2:58:3d:b9:90:3c: 6d:cd:f6:c6:66:97:10:bc:95:a8:0a:76:44:d2:75: 82:e5:cf:ae:a7:35:57:7d:78:56:9f:49:19:f0:63: c5:ca:95:5f:25:d2:38:0b:fd:49:68:64:d6:e4:14: 25:7c:8f:48:7e:47:cb:a4:2b:ba:11:67:b4:9f:5e: 7f:05:1a:76:a3:76:03:7a:ce:4d:bb:00:f7:80:f7: dd:8b:29:1e:c5:e3:f5:1a:89:42:4d:93:34:0a:65: 0f:52:03:09:dd:c0:26:81:50:8b:56:1a:e8:58:ae: 79:64:a1:fd:7a:b2:5a:4d:9c:d9:f4:53:8f:70:4f: c1:8b:ea:cd:80:a2:65:48:6d:3c:c6:73:cf:d4:92: c5:d1:5f:57:77:86:3d:26:47:aa:42:7d:db:0e:18: b4:90:cf:f2:58:68:08:1c:9c:08:d1:e4:1d:23:3f: f0:0b:8e:a8:80:95:07:24:7f:a9:c8:cd:5c:78:56: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C0:E4:8E:D7:A2:BB:62:71:15:C6:80:4D:65:43:BF:94:D3:03:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/d9a4c7c7-c8cb-3fc5-b355-11739aff3d25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:67:e1:03:34:8a:78:ad:c2:6b:cf:99:fe:a7:40:ff:5b:29: 37:58:64:87:b9:e4:73:c8:91:03:61:76:90:0c:cb:6b:24:06: 14:91:bf:33:61:24:89:e6:13:4a:0d:0d:41:58:e2:a1:eb:c1: 3e:f1:a1:cb:46:61:c2:89:0c:fd:e8:a7:96:d0:70:26:a6:04: 4d:96:74:27:17:be:47:bf:4c:a6:35:40:0e:2f:01:02:83:72: e6:20:8f:24:f3:ef:83:d2:04:b9:c4:fc:37:74:59:22:d2:17: 8d:b8:3f:15:26:2b:b6:74:cd:47:ba:76:4b:dc:53:1c:06:99: a4:a5:2f:73:2e:86:6a:0d:c2:4e:b3:ce:50:0a:f6:2b:11:bd: 98:28:7d:0b:99:5f:ff:a6:43:82:fe:9a:78:cd:a9:4c:82:5e: c2:08:7d:78:bd:3a:47:2e:8f:71:d7:ca:84:f8:09:b6:f8:bf: 3d:c7:fc:b2:f4:c3:01:dd:56:f4:c2:18:72:5c:0c:1b:a0:1f: 73:c0:fc:00:38:ac:c9:ab:7b:63:a6:c5:de:79:dc:94:81:4e: e0:43:b9:33:84:b1:52:14:82:c5:8c:98:53:5a:4d:6a:96:b6: 94:e8:16:21:20:64:82:9d:52:4b:7b:3b:66:45:06:ed:1b:66: 31:b5:4e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBbyyU8ObwvB93gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk NTJmNzQ1YTktZjE3Yi00N2E2LWI0NTQtZDA3ZjE4ZjRmYTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuUWc/lFt+001cW/mzbqUY6vTUyQzSuXM1Gk jbPHnJexq1LOAo8op4mZL0O2O7MfFSAM3/IY4jCZi9Iva3yO1PPziAzSWD25kDxt zfbGZpcQvJWoCnZE0nWC5c+upzVXfXhWn0kZ8GPFypVfJdI4C/1JaGTW5BQlfI9I fkfLpCu6EWe0n15/BRp2o3YDes5NuwD3gPfdiykexeP1GolCTZM0CmUPUgMJ3cAm gVCLVhroWK55ZKH9erJaTZzZ9FOPcE/Bi+rNgKJlSG08xnPP1JLF0V9Xd4Y9Jkeq Qn3bDhi0kM/yWGgIHJwI0eQdIz/wC46ogJUHJH+pyM1ceFZZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbA5I7XorticRXGgE1lQ7+U0wPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZDlhNGM3YzctYzhjYi0z ZmM1LWIzNTUtMTE3MzlhZmYzZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtn4QM0initwmvPmf6nQP9bKTdYZIe55HPIkQNhdpAMy2skBhSRvzNh JInmE0oNDUFY4qHrwT7xoctGYcKJDP3op5bQcCamBE2WdCcXvke/TKY1QA4vAQKD cuYgjyTz74PSBLnE/Dd0WSLSF424PxUmK7Z0zUe6dkvcUxwGmaSlL3MuhmoNwk6z zlAK9isRvZgofQuZX/+mQ4L+mnjNqUyCXsIIfXi9Okcuj3HXyoT4Cbb4vz3H/LL0 wwHdVvTCGHJcDBugH3PA/AA4rMmre2Omxd553JSBTuBDuTOEsVIUgsWMmFNaTWqW tpToFiEgZIKdUkt7O2ZFBu0bZjG1Tsg= -----END CERTIFICATE-----Generated at Tue Jul 1 08:32:30 2025 by rpki-client