$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa File: ecd9439b-df70-304d-a65a-4712a2c669ef.roa (raw, json) Hash identifier: gMeSvh825ZGAtUdy1+BCi+iGU9tS+amt/jLhVyXuos4= Subject key identifier: D0:92:31:E4:F9:0A:9B:99:3E:2B:64:C3:E3:9A:8F:08:5E:74:50:5E Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584A5335ABA0893FB2A84D316400 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 157.166.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:ab:a0:89:3f:b2:a8:4d:31:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=9dfce512-4d28-46af-8e3d-2694a19a1ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:de:12:88:f6:31:54:18:04:af:75:01:ef: 7d:3f:0f:40:38:a1:c7:18:5d:19:9f:28:27:98:1f: 73:91:a7:26:e0:6d:05:34:19:2b:7e:77:c6:30:8a: d1:25:ec:88:1a:2c:52:7a:a6:18:2d:3b:6a:03:d5: f5:2e:d9:d6:08:04:38:13:77:13:73:77:d9:f7:1e: 46:3a:b6:8e:d9:3c:1c:98:4b:ff:0f:ea:31:85:cd: f2:bc:df:4b:3b:c3:4b:f7:a7:49:f8:14:c1:95:b0: d5:2f:12:c2:42:23:32:8c:8c:54:44:76:5c:1e:47: be:b5:64:9d:65:10:07:1b:67:e7:b8:20:4a:7c:60: fa:74:aa:6e:3c:df:54:f9:e2:51:e7:50:d9:3c:1c: de:f9:ab:e4:d9:da:1c:c1:a6:cc:ac:53:41:01:b1: fb:38:f4:f4:39:15:5c:79:97:58:db:74:2d:55:b3: c8:29:f6:d0:90:5a:83:d5:f6:a7:bd:93:78:1a:d2: 14:43:4f:74:43:9d:d2:6d:93:eb:d7:af:30:3b:5c: 33:82:9a:56:98:19:fb:be:cc:15:52:38:16:08:85: 56:66:73:56:5f:9a:f4:72:72:fa:6d:d5:7e:a3:8e: 94:13:5c:0e:cf:dd:ad:67:2e:c9:10:ad:2b:a6:d5: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:92:31:E4:F9:0A:9B:99:3E:2B:64:C3:E3:9A:8F:08:5E:74:50:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8f:93:2d:95:78:73:72:22:15:57:c6:7b:44:6f:84:41:80: 9a:cd:e5:93:b9:d5:f6:9a:93:22:85:19:0f:ff:ca:13:72:95: 50:0e:b3:3f:38:c3:ee:b2:d2:48:ed:c5:2a:f8:75:f2:0d:51: c4:ef:41:0b:4e:20:dd:fc:c2:f3:f0:0c:f8:39:e4:c5:e6:c0: 48:bb:61:7b:f5:76:0e:b2:14:48:6d:6f:0c:ff:a7:dc:d8:9a: f5:52:7d:c5:5a:7a:a0:74:90:da:c2:60:b3:33:3d:2c:37:27: 0f:a1:87:06:ce:5d:ce:c3:b5:91:bd:cc:93:f3:a3:0a:e7:fb: e1:ad:03:ef:b7:51:df:e6:32:14:ec:0f:81:3b:19:1d:bb:75: 38:a1:b0:23:4e:66:a7:04:94:1c:89:71:75:bb:85:eb:e0:51: eb:8d:f8:1f:18:b1:01:2a:d8:ba:a6:b4:aa:3d:54:be:42:3e: cf:ca:99:2e:a3:04:46:c8:80:91:03:9b:0f:a5:03:63:73:79: 6e:de:77:4b:94:2d:ab:2b:3b:40:48:5c:7d:f5:ab:94:b1:9c: ae:a9:9a:55:83:1d:6f:19:c5:19:84:91:e8:b1:57:5d:1c:6d: 99:a5:da:5a:23:83:cd:21:28:b2:09:19:16:b0:e2:e5:97:f1: 97:8b:8f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaugiT+yqE0xZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk OWRmY2U1MTItNGQyOC00NmFmLThlM2QtMjY5NGExOWExYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07jeEoj2MVQYBK91Ae99Pw9AOKHHGF0Znygn mB9zkacm4G0FNBkrfnfGMIrRJeyIGixSeqYYLTtqA9X1LtnWCAQ4E3cTc3fZ9x5G OraO2TwcmEv/D+oxhc3yvN9LO8NL96dJ+BTBlbDVLxLCQiMyjIxURHZcHke+tWSd ZRAHG2fnuCBKfGD6dKpuPN9U+eJR51DZPBze+avk2docwabMrFNBAbH7OPT0ORVc eZdY23QtVbPIKfbQkFqD1fanvZN4GtIUQ090Q53SbZPr168wO1wzgppWmBn7vswV UjgWCIVWZnNWX5r0cnL6bdV+o46UE1wOz92tZy7JEK0rptXzmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCSMeT5CpuZPitkw+OajwhedFBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZWNkOTQzOWItZGY3MC0z MDRkLWE2NWEtNDcxMmEyYzY2OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCPky2VeHNyIhVXxntEb4RBgJrN5ZO51faakyKFGQ//yhNylVAOsz84 w+6y0kjtxSr4dfINUcTvQQtOIN38wvPwDPg55MXmwEi7YXv1dg6yFEhtbwz/p9zY mvVSfcVaeqB0kNrCYLMzPSw3Jw+hhwbOXc7DtZG9zJPzowrn++GtA++3Ud/mMhTs D4E7GR27dTihsCNOZqcElByJcXW7hevgUeuN+B8YsQEq2LqmtKo9VL5CPs/KmS6j BEbIgJEDmw+lA2NzeW7ed0uULasrO0BIXH31q5SxnK6pmlWDHW8ZxRmEkeixV10c bZml2lojg80hKLIJGRaw4uWX8ZeLj2Y= -----END CERTIFICATE-----Generated at Sun Jun 29 07:06:47 2025 by rpki-client