$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa File: dbfc0664-0294-36d7-b0bb-77ae346459b8.roa (raw, json) Hash identifier: G1Akd9r+UrT+lP2TwzepzYHM09DKlj+aiSCuThDZAE8= Subject key identifier: 40:7C:6A:0F:79:C8:5C:A3:17:51:F0:A3:EF:26:78:38:70:C3:BC:2E Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285849CE9A47EC2F1FFA9620A34900 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 40703 IP address blocks: 157.166.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:47:ec:2f:1f:fa:96:20:a3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=c52be6cd-c76d-4c6f-8c41-b9487a461e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:18:91:5a:8a:19:81:70:50:1a:15:09:7b: b6:ab:d1:9a:7b:1a:d4:a0:c5:d2:7f:c2:ac:1c:e4: 35:2d:b8:b3:b1:ce:f6:44:77:d2:0a:2c:6d:ff:ce: 4e:c2:ea:7d:69:88:09:78:f7:ac:e8:1c:ea:8a:e9: 0b:2c:54:68:48:df:c4:5c:0b:ad:e0:45:c8:17:79: b3:49:f4:ad:cb:e9:df:f3:97:c6:b4:62:2f:6b:bf: 48:bc:c1:73:31:fd:4e:56:bb:3c:cc:36:e6:26:80: fa:01:83:9f:7b:b6:b5:8f:fc:fc:ad:c7:be:4c:53: cc:11:1e:6f:ab:62:e2:77:7b:aa:e8:d6:50:d1:bf: 05:07:4b:bd:2a:c1:e8:1e:8c:62:5c:2f:bc:51:d7: d1:49:a6:91:4c:b6:de:48:96:a6:e5:e1:46:66:13: 81:1d:b7:c5:fd:da:af:fe:88:16:e1:d4:dc:48:5e: 72:89:da:c6:e4:8a:fa:c7:a0:7b:9a:db:6f:50:f6: cc:1c:69:35:af:a1:bc:e9:1e:b3:5e:3f:a0:e1:ce: 2e:a6:23:09:f5:63:42:93:c4:40:fc:96:90:88:40: c6:f9:a4:f0:7c:c6:9e:a4:5e:fb:8a:ee:02:48:65: 70:41:a6:a5:e2:1e:47:20:2e:13:41:8e:65:3f:53: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7C:6A:0F:79:C8:5C:A3:17:51:F0:A3:EF:26:78:38:70:C3:BC:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d5:5f:c8:d2:18:e4:59:ba:0e:dd:55:88:1b:f5:f6:45:0b: 87:23:fe:d8:aa:d8:76:00:db:2b:9a:76:89:d0:d7:22:c7:7e: 85:a7:c6:2a:96:1b:18:87:f5:2f:dc:9a:26:d1:87:36:16:d6: b3:82:b2:9a:9f:18:94:f1:e5:d3:00:e6:d8:32:cf:30:42:96: 28:64:7a:6a:eb:06:95:35:fa:3d:de:b8:0c:c6:99:72:55:f3: e9:50:85:11:02:fc:ef:99:be:f5:82:9c:5c:5b:d3:6a:be:a0: fe:40:2c:69:1c:2d:dd:7d:2d:cf:f7:ca:d4:3a:55:ff:b4:4c: b7:77:f0:9f:7e:5c:b4:75:1d:69:6f:1b:88:60:d6:57:1d:f1: 2f:85:71:4d:d9:b2:8c:b9:70:9a:52:ed:f8:25:3b:a3:65:c8: 95:5e:dd:10:4f:e7:d1:b4:3e:eb:a8:3e:05:9f:53:9f:0d:5a: b8:f2:0e:32:f8:46:e4:8e:f3:7e:05:7d:d7:cb:bc:3c:dc:ae: 93:6a:8c:06:9a:18:91:3b:c2:5d:94:d8:f3:46:5c:d1:04:e0: 79:2e:46:41:f1:50:62:97:85:df:a1:94:8c:91:b9:1e:64:de: f4:cd:93:03:fd:98:87:7c:dd:49:fb:62:b8:c9:48:30:9e:56: 03:9e:b2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkfsLx/6liCjSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YzUyYmU2Y2QtYzc2ZC00YzZmLThjNDEtYjk0ODdhNDYxZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpMYkVqKGYFwUBoVCXu2q9GaexrUoMXSf8Ks HOQ1Lbizsc72RHfSCixt/85Owup9aYgJePes6BzqiukLLFRoSN/EXAut4EXIF3mz SfSty+nf85fGtGIva79IvMFzMf1OVrs8zDbmJoD6AYOfe7a1j/z8rce+TFPMER5v q2Lid3uq6NZQ0b8FB0u9KsHoHoxiXC+8UdfRSaaRTLbeSJam5eFGZhOBHbfF/dqv /ogW4dTcSF5yidrG5Ir6x6B7mttvUPbMHGk1r6G86R6zXj+g4c4upiMJ9WNCk8RA /JaQiEDG+aTwfMaepF77iu4CSGVwQaal4h5HIC4TQY5lP1O89QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB8ag95yFyjF1Hwo+8meDhww7wuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZGJmYzA2NjQtMDI5NC0z NmQ3LWIwYmItNzdhZTM0NjQ1OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnaaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/VX8jSGORZug7dVYgb9fZFC4cj/tiq2HYA2yuadonQ1yLHfoWnxiqW GxiH9S/cmibRhzYW1rOCspqfGJTx5dMA5tgyzzBClihkemrrBpU1+j3euAzGmXJV 8+lQhREC/O+ZvvWCnFxb02q+oP5ALGkcLd19Lc/3ytQ6Vf+0TLd38J9+XLR1HWlv G4hg1lcd8S+FcU3Zsoy5cJpS7fglO6NlyJVe3RBP59G0PuuoPgWfU58NWrjyDjL4 RuSO834FfdfLvDzcrpNqjAaaGJE7wl2U2PNGXNEE4HkuRkHxUGKXhd+hlIyRuR5k 3vTNkwP9mId83Un7YrjJSDCeVgOesms= -----END CERTIFICATE-----Generated at Sat May 10 22:57:45 2025 by rpki-client