$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa File: 60570c79-bb16-3b4c-a1e3-6b396870d864.roa (raw, json) Hash identifier: 3EtMsBZ/tMeTVYSt2srEgTT3GtmWAC3LPRtdKknz2G4= Subject key identifier: D8:4B:38:11:B6:09:28:84:0C:4D:D1:CA:E5:8D:21:2D:33:65:0B:2F Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F43285849D16504D886E88E7C1C1AA880 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 157.166.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:04:d8:86:e8:8e:7c:1c:1a:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=16a23f87-37ca-48df-8775-f319794bdf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:41:fd:a0:a0:17:63:29:2b:2c:07:63:ee: d9:98:4e:fc:a8:9c:3c:f6:f4:58:a9:e2:70:9e:58: b3:38:d0:3f:af:72:99:f6:0d:7b:0e:ba:76:e0:15: b7:4e:3d:e6:d8:bf:ba:fe:e4:a9:95:ad:9e:d8:58: c5:90:ca:34:c5:58:57:4a:63:c0:d9:cd:22:af:82: 4a:a3:1c:9e:d0:d7:89:7e:44:3e:53:ac:cd:18:92: 46:04:10:e5:62:b7:c9:34:56:80:87:3a:d5:a2:aa: 3c:b2:c2:67:32:41:7f:e0:33:77:c3:e7:06:dd:5c: 04:1f:56:b8:11:5f:67:df:92:94:00:0e:22:17:21: cd:03:a4:e2:fe:78:31:51:10:e9:02:37:ba:c2:a9: b8:be:a3:1f:7b:47:e7:82:c3:35:3a:ea:79:65:82: ed:84:2b:ca:f4:04:8d:98:97:a4:06:00:6d:9f:98: 46:2e:42:31:fa:13:90:5b:9a:90:c8:dd:74:db:0f: dd:8e:a2:0d:40:36:f7:9a:95:a0:ad:f7:83:e3:9d: 18:d7:19:ed:97:cb:29:7f:48:36:90:de:cd:90:dc: 22:7c:8b:27:da:5a:10:d6:8b:4b:88:b4:4d:b6:d0: f9:90:78:f4:d0:c0:a9:19:cf:ae:b2:01:04:3d:22: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:38:11:B6:09:28:84:0C:4D:D1:CA:E5:8D:21:2D:33:65:0B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1d:13:a9:8f:31:5c:b4:07:cb:44:d5:e8:58:a8:e6:50:72: c1:56:6c:07:66:86:53:de:58:b0:61:e3:54:97:5c:1f:ee:ab: 60:00:b0:28:f7:a7:76:bc:aa:31:ff:8e:0f:3c:33:b2:b7:ce: ed:26:62:c8:21:2c:94:65:54:1b:cc:a2:da:6c:ea:28:ce:b1: e3:da:54:d3:6d:11:6d:e1:b1:e2:96:81:49:39:fc:d9:22:99: 51:86:5e:0c:33:c9:3a:b4:82:d6:3f:e8:ba:22:05:9d:7e:28: d5:3a:9a:60:03:b0:a3:15:3a:0c:b5:e9:f9:b8:60:7b:41:95: 15:ae:ea:c5:ec:93:5f:4e:11:f4:87:25:4d:2a:30:4f:b5:68: 1e:7c:45:41:fc:58:67:0f:6c:27:95:a9:21:8a:ae:06:02:ab: 00:ae:ac:65:24:a1:e9:ef:c4:d6:4e:a9:ea:81:2b:b4:84:16: 9c:89:53:72:f3:37:e6:7d:ab:94:f6:4b:da:0d:b0:de:07:26: 07:a3:20:1a:3e:89:da:34:a8:2b:6d:71:23:45:ff:87:1e:81: 9a:58:8a:ca:ac:7e:e1:e1:d5:eb:69:b9:48:f9:04:b2:06:a1: 5a:91:11:e8:53:ef:02:b0:57:86:44:ea:51:7e:70:d1:ec:d9: 58:c1:77:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQTYhuiOfBwaqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MTZhMjNmODctMzdjYS00OGRmLTg3NzUtZjMxOTc5NGJkZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpJB/aCgF2MpKywHY+7ZmE78qJw89vRYqeJw nlizONA/r3KZ9g17Drp24BW3Tj3m2L+6/uSpla2e2FjFkMo0xVhXSmPA2c0ir4JK oxye0NeJfkQ+U6zNGJJGBBDlYrfJNFaAhzrVoqo8ssJnMkF/4DN3w+cG3VwEH1a4 EV9n35KUAA4iFyHNA6Ti/ngxURDpAje6wqm4vqMfe0fngsM1Oup5ZYLthCvK9ASN mJekBgBtn5hGLkIx+hOQW5qQyN102w/djqINQDb3mpWgrfeD450Y1xntl8spf0g2 kN7NkNwifIsn2loQ1otLiLRNttD5kHj00MCpGc+usgEEPSIu5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhLOBG2CSiEDE3RyuWNIS0zZQsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNjA1NzBjNzktYmIxNi0z YjRjLWExZTMtNmIzOTY4NzBkODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUdE6mPMVy0B8tE1ehYqOZQcsFWbAdmhlPeWLBh41SXXB/uq2AAsCj3 p3a8qjH/jg88M7K3zu0mYsghLJRlVBvMotps6ijOsePaVNNtEW3hseKWgUk5/Nki mVGGXgwzyTq0gtY/6LoiBZ1+KNU6mmADsKMVOgy16fm4YHtBlRWu6sXsk19OEfSH JU0qME+1aB58RUH8WGcPbCeVqSGKrgYCqwCurGUkoenvxNZOqeqBK7SEFpyJU3Lz N+Z9q5T2S9oNsN4HJgejIBo+ido0qCttcSNF/4cegZpYisqsfuHh1etpuUj5BLIG oVqREehT7wKwV4ZE6lF+cNHs2VjBd6o= -----END CERTIFICATE-----Generated at Sat Jun 14 06:26:13 2025 by rpki-client