$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2540c3d9-443e-336a-8fd3-fe341f8f707f.roa File: 2540c3d9-443e-336a-8fd3-fe341f8f707f.roa (raw, json) Hash identifier: CSpLcxemHTPM190dB/eJ5/YJ+U6ji6CSM+9hv7BSY5o= Subject key identifier: DA:10:32:C9:24:C6:9C:38:AC:42:DF:B0:87:DF:DA:66:58:D6:D9:C8 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584961B98E0F1C1C6C98C4A20600 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2540c3d9-443e-336a-8fd3-fe341f8f707f.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 14618 IP address blocks: 157.166.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8e:0f:1c:1c:6c:98:c4:a2:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=9dad0223-6511-4e4d-9b3c-9507dfb61b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:36:46:84:1d:90:c5:2d:62:22:e0:0f:86: 55:6c:19:42:a0:f4:51:37:ca:0d:97:33:9e:09:6c: 35:eb:80:3e:50:4d:79:c9:02:4e:9c:b6:64:ef:bb: f4:67:25:c5:e8:11:5f:4c:b5:1b:d0:ea:59:92:3f: 43:9e:31:a3:44:10:31:a2:ac:49:88:a7:c4:7d:2c: 83:59:bd:c4:34:ae:29:03:d7:8c:91:05:f6:0a:ce: 22:42:4f:71:2a:41:2c:93:53:e5:d9:01:23:ca:6d: 54:e8:15:15:cd:ab:2d:f7:79:19:8f:67:e8:af:38: 43:26:9e:70:e6:01:88:af:36:bc:f0:24:af:e6:d7: 98:4a:b8:29:1b:2b:5a:41:57:8c:9b:66:cf:cc:27: d5:e0:14:15:b2:2b:98:5f:87:5a:cd:c7:f8:1b:3e: e3:23:a7:6a:d7:ba:54:60:f6:a2:a2:3b:11:d9:39: dd:2a:77:89:0e:17:d9:71:ea:a2:b1:89:a7:a5:52: 24:fd:ee:d8:e7:70:2b:de:3c:8a:0d:21:de:33:8f: bf:ec:6f:ef:2a:c9:32:49:f4:ff:49:78:a9:ec:ff: 35:0d:87:fe:0b:74:52:0b:10:10:27:5a:c1:91:91: a5:5e:43:14:17:af:e3:a7:19:a0:2a:e8:c3:f4:b4: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:10:32:C9:24:C6:9C:38:AC:42:DF:B0:87:DF:DA:66:58:D6:D9:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2540c3d9-443e-336a-8fd3-fe341f8f707f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:81:dc:d4:b2:0c:45:e2:ac:13:40:23:47:b5:40:57:42:e4: d7:09:e2:68:74:a8:21:73:c7:5f:dd:89:b7:0b:52:62:3f:47: 99:4a:60:b0:9e:42:41:cf:90:1b:92:cd:e7:4d:78:a8:0d:ff: 58:07:2e:2d:2a:21:89:59:3c:9d:87:03:51:89:67:db:77:a7: 08:8e:5c:7b:bd:10:2d:73:25:8f:7f:69:42:a3:1b:29:57:4c: 11:32:47:be:e3:9e:6d:c1:18:4f:88:cb:41:fe:46:88:26:e4: c1:4c:f4:3c:02:21:28:f5:5d:0d:9d:ce:11:d8:fa:2c:88:20: 95:67:f6:93:38:66:17:1c:e9:db:55:ad:f8:be:2e:31:12:8f: 3b:6c:7b:a8:53:c2:14:f7:ac:33:e6:5b:03:5f:f5:a1:5f:a9: 62:73:6c:79:32:9c:f2:5e:d1:dc:84:15:4b:26:6c:11:c3:c8: c9:ce:30:ed:4b:47:cc:5a:c2:3a:14:c5:b9:c1:f4:c0:e4:26: 14:1e:4a:f7:c4:b5:61:65:69:2e:5a:e4:3a:a8:92:e5:52:f5: d8:ce:1e:11:31:54:7b:41:ef:91:5e:dd:23:c1:10:ce:71:90: a6:6d:f8:47:80:78:82:23:b1:0e:04:08:e4:32:90:06:64:6e: 1b:d5:30:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuY4PHBxsmMSiBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OWRhZDAyMjMtNjUxMS00ZTRkLTliM2MtOTUwN2RmYjYxYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdk2RoQdkMUtYiLgD4ZVbBlCoPRRN8oNlzOe CWw164A+UE15yQJOnLZk77v0ZyXF6BFfTLUb0OpZkj9DnjGjRBAxoqxJiKfEfSyD Wb3ENK4pA9eMkQX2Cs4iQk9xKkEsk1Pl2QEjym1U6BUVzast93kZj2forzhDJp5w 5gGIrza88CSv5teYSrgpGytaQVeMm2bPzCfV4BQVsiuYX4dazcf4Gz7jI6dq17pU YPaiojsR2TndKneJDhfZceqisYmnpVIk/e7Y53Ar3jyKDSHeM4+/7G/vKskySfT/ SXip7P81DYf+C3RSCxAQJ1rBkZGlXkMUF6/jpxmgKujD9LSQjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoQMskkxpw4rELfsIff2mZY1tnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMjU0MGMzZDktNDQzZS0z MzZhLThmZDMtZmUzNDFmOGY3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnaaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuB3NSyDEXirBNAI0e1QFdC5NcJ4mh0qCFzx1/dibcLUmI/R5lKYLCe QkHPkBuSzedNeKgN/1gHLi0qIYlZPJ2HA1GJZ9t3pwiOXHu9EC1zJY9/aUKjGylX TBEyR77jnm3BGE+Iy0H+Rogm5MFM9DwCISj1XQ2dzhHY+iyIIJVn9pM4Zhcc6dtV rfi+LjESjztse6hTwhT3rDPmWwNf9aFfqWJzbHkynPJe0dyEFUsmbBHDyMnOMO1L R8xawjoUxbnB9MDkJhQeSvfEtWFlaS5a5DqokuVS9djOHhExVHtB75Fe3SPBEM5x kKZt+EeAeIIjsQ4ECOQykAZkbhvVMIo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:26 2025 by rpki-client