$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa File: 811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa (raw, json) Hash identifier: rvMlBz1j0emyzdTv4SFgfn6H8cdBUrDlLsaxfCvtoxg= Subject key identifier: 66:19:25:92:18:20:87:B7:05:8B:3B:9C:3C:E8:DD:DA:76:42:B6:6F Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F432858499F249BC03961E25C24223940 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 40703 IP address blocks: 157.166.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9b:c0:39:61:e2:5c:24:22:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=bad874db-6ffa-43a9-9843-fe2c59668626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:1b:29:ce:c6:22:a7:c4:ce:55:9c:96:32: 0d:3a:2c:f3:f7:18:0f:0b:b2:5e:fb:29:ba:c7:c6: f4:d7:38:cd:ef:34:46:55:88:0d:78:28:94:95:77: a0:ed:17:d2:72:74:e4:fd:a0:6e:1e:82:88:96:4e: e7:33:d1:d0:2e:03:61:46:a6:43:e5:86:fb:36:4f: d7:80:a7:39:bb:31:cb:9c:4b:79:25:74:e6:4e:e6: 66:4c:ee:7f:c8:48:a2:e9:60:47:b4:b3:79:0e:4b: 50:bd:bb:fe:a2:dd:4e:0f:b4:3d:1c:87:60:da:76: 1b:18:67:38:84:0b:4b:20:b2:be:ba:91:7d:51:8e: c7:df:57:74:ae:18:44:28:24:0d:78:b1:fb:87:b7: 50:41:27:12:a7:4f:15:71:d7:95:8d:d3:bf:ed:09: 88:db:5e:1c:ea:38:d2:6a:0d:75:2d:19:a5:63:34: 5d:72:35:29:bd:1c:15:5d:d9:0a:65:49:f6:a9:59: 1f:f5:7d:bc:61:a7:27:2c:48:28:3c:1e:a6:9b:5e: e5:06:8b:f0:82:61:bb:66:da:fc:79:17:54:c1:37: f9:81:fc:64:59:4f:f3:2c:d1:a8:a6:78:fa:ed:04: 2d:2a:f6:91:10:86:8a:cd:6a:67:d9:ed:e9:bb:cc: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:19:25:92:18:20:87:B7:05:8B:3B:9C:3C:E8:DD:DA:76:42:B6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:85:10:a8:60:b3:bd:a6:10:e7:88:85:ad:60:d9:b3:1b:af: 4f:21:56:8e:4d:f3:01:b6:31:f1:35:bb:57:82:48:44:5c:59: a6:d2:44:2f:02:d4:f0:b8:56:87:91:25:77:df:82:0b:5f:40: f1:4e:8b:1e:fa:94:16:b3:33:9c:b7:78:12:6c:18:ba:6c:90: c4:ae:36:3e:84:c2:cf:55:ab:5f:02:d8:b5:9b:03:ce:88:ed: 5e:df:1c:a4:fe:af:8e:0a:b8:04:f3:e7:96:d7:26:54:7b:b9: 17:7e:55:1b:9f:62:39:a2:dc:32:0b:5e:47:4e:95:19:83:8f: ba:1a:92:d6:c0:16:bf:8a:cb:fb:f8:e7:0c:aa:b6:74:e5:8d: c7:8f:c1:0c:65:96:b4:06:8f:8c:fb:4c:37:7f:be:1a:32:ed: 7a:a5:3c:f7:d5:54:97:cd:bc:ae:e7:9a:57:1a:1b:76:70:5c: d8:f8:54:1d:e9:59:ff:61:fd:f1:c4:0a:1d:07:aa:df:6a:02: 98:76:73:23:fa:30:80:c0:6f:24:78:66:cc:1d:03:f3:1c:7a: d0:25:fc:43:32:54:65:26:8d:4e:04:27:94:50:72:92:ab:32: 2f:f3:ca:20:97:d6:5d:0b:ab:26:50:aa:3a:c0:fb:0f:f0:97: ba:07:35:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJvAOWHiXCQiOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YmFkODc0ZGItNmZmYS00M2E5LTk4NDMtZmUyYzU5NjY4NjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0MbKc7GIqfEzlWcljINOizz9xgPC7Je+ym6 x8b01zjN7zRGVYgNeCiUlXeg7RfScnTk/aBuHoKIlk7nM9HQLgNhRqZD5Yb7Nk/X gKc5uzHLnEt5JXTmTuZmTO5/yEii6WBHtLN5DktQvbv+ot1OD7Q9HIdg2nYbGGc4 hAtLILK+upF9UY7H31d0rhhEKCQNeLH7h7dQQScSp08VcdeVjdO/7QmI214c6jjS ag11LRmlYzRdcjUpvRwVXdkKZUn2qVkf9X28YacnLEgoPB6mm17lBovwgmG7Ztr8 eRdUwTf5gfxkWU/zLNGopnj67QQtKvaREIaKzWpn2e3pu8zM3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYZJZIYIIe3BYs7nDzo3dp2QrZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODExZTZhNWItZmZkNy0z YTNkLWE1OGUtZmYyODBkMWVmY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnabYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+FEKhgs72mEOeIha1g2bMbr08hVo5N8wG2MfE1u1eCSERcWabSRC8C 1PC4VoeRJXffggtfQPFOix76lBazM5y3eBJsGLpskMSuNj6Ews9Vq18C2LWbA86I 7V7fHKT+r44KuATz55bXJlR7uRd+VRufYjmi3DILXkdOlRmDj7oaktbAFr+Ky/v4 5wyqtnTljcePwQxllrQGj4z7TDd/vhoy7XqlPPfVVJfNvK7nmlcaG3ZwXNj4VB3p Wf9h/fHECh0Hqt9qAph2cyP6MIDAbyR4ZswdA/McetAl/EMyVGUmjU4EJ5RQcpKr Mi/zyiCX1l0LqyZQqjrA+w/wl7oHNac= -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:25 2025 by rpki-client