$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa File: 0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa (raw, json) Hash identifier: KJuupe1ijB3A65MoU4rA/DqeONWEOa/Vn+J2vr6uuz8= Subject key identifier: F7:11:45:95:C0:62:11:21:29:CB:2E:DA:90:5B:89:F9:64:84:53:F4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848BFEBC6849D3A5CFD5C62D000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 54113 IP address blocks: 157.5.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c6:84:9d:3a:5c:fd:5c:62:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=f73f7cf1-a4be-4690-b548-51033c831b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:c4:42:97:93:08:1c:e9:e4:64:05:06:81: 3f:ad:6f:34:0e:fd:17:95:cf:79:32:4f:ce:ee:f1: cd:30:df:bc:4e:74:28:73:57:bf:7c:dd:c8:c1:86: ad:a8:da:12:37:e0:99:4d:4f:03:39:8f:da:91:12: 6b:80:29:e1:9d:37:7e:e8:9b:a5:03:1e:da:29:f8: 6b:bf:17:3e:12:6b:4a:9e:80:9d:01:77:ab:92:e4: 1d:01:d5:d7:da:d2:dc:b0:16:27:38:e4:57:b7:cd: f1:ec:7f:fb:b1:cc:7a:58:67:84:cb:5d:2c:88:cc: 6c:a1:4a:e0:e4:ef:d1:0b:18:95:d6:9b:6a:b2:44: 20:22:4b:b8:e6:82:8a:e6:95:0f:ff:93:34:ad:27: 56:77:90:cb:58:ea:4e:e5:8e:8a:fe:c4:ba:7c:a8: 76:17:31:d6:57:56:69:46:67:3e:de:85:db:6c:ee: cf:c5:c1:98:41:04:fe:9b:52:55:c6:c1:a6:9d:64: 76:37:0e:3f:c1:ee:0f:75:1e:5b:82:14:98:5e:3b: 4b:c1:b3:af:ac:90:80:f4:b3:b3:46:a5:b3:f5:30: 4a:cf:78:1f:37:f2:83:13:94:0f:a0:d9:d8:53:00: e9:57:4f:33:5c:8b:5b:f2:09:4b:e3:18:d0:8c:d0: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:11:45:95:C0:62:11:21:29:CB:2E:DA:90:5B:89:F9:64:84:53:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9d:09:b2:a0:49:e9:62:51:d9:33:c9:8d:3b:5d:f2:46:60: 8c:d2:d1:9c:e0:95:d5:e2:ae:b8:14:86:56:93:ef:4d:52:96: 9c:f2:f5:c7:36:63:af:88:ba:93:c1:55:cf:bb:c3:a1:1d:ed: fb:6e:43:39:cf:f2:11:18:a0:ff:7d:c4:3b:1f:b0:5f:d8:89: da:50:6b:39:b7:32:75:98:54:74:32:12:9d:18:4a:bd:31:b2: f0:ce:d8:74:5e:c3:2f:cc:0c:39:4d:7d:00:ac:f0:ce:0d:d6: 65:1a:21:f2:40:a7:0b:e3:c7:92:7a:e2:c0:27:61:9a:e0:ac: 82:b9:c4:72:45:3a:a3:86:95:a7:61:b3:48:62:0b:fb:65:eb: 39:25:97:08:1e:98:67:06:3a:09:c6:27:99:9e:58:d9:72:df: 34:42:21:a5:61:c3:17:2a:73:a0:91:4e:01:64:fa:4b:d4:7b: 00:40:db:6b:18:81:d7:ae:26:77:63:64:cf:48:47:19:5f:98: e0:26:c9:f5:22:cf:0a:3c:64:d3:a6:d7:ce:c3:f8:cc:c9:bd: 00:89:12:bd:cb:5f:c8:30:80:5d:b0:1d:0d:04:15:b3:26:3e: 74:78:51:ee:38:ba:7d:6d:be:6a:85:5d:cf:18:e3:0b:9d:71: e7:41:a8:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68aEnTpc/Vxi0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZjczZjdjZjEtYTRiZS00NjkwLWI1NDgtNTEwMzNjODMxYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKDEQpeTCBzp5GQFBoE/rW80Dv0Xlc95Mk/O 7vHNMN+8TnQoc1e/fN3IwYatqNoSN+CZTU8DOY/akRJrgCnhnTd+6JulAx7aKfhr vxc+EmtKnoCdAXerkuQdAdXX2tLcsBYnOORXt83x7H/7scx6WGeEy10siMxsoUrg 5O/RCxiV1ptqskQgIku45oKK5pUP/5M0rSdWd5DLWOpO5Y6K/sS6fKh2FzHWV1Zp Rmc+3oXbbO7PxcGYQQT+m1JVxsGmnWR2Nw4/we4PdR5bghSYXjtLwbOvrJCA9LOz RqWz9TBKz3gfN/KDE5QPoNnYUwDpV08zXItb8glL4xjQjNDymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcRRZXAYhEhKcsu2pBbiflkhFP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGVhMTcwZGEtMGE5Mi0z MDMyLTlmYjItODA1YWFlNWNhMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmdCbKgSeliUdkzyY07XfJGYIzS0ZzgldXirrgUhlaT701Slpzy9cc2 Y6+IupPBVc+7w6Ed7ftuQznP8hEYoP99xDsfsF/YidpQazm3MnWYVHQyEp0YSr0x svDO2HRewy/MDDlNfQCs8M4N1mUaIfJApwvjx5J64sAnYZrgrIK5xHJFOqOGladh s0hiC/tl6zkllwgemGcGOgnGJ5meWNly3zRCIaVhwxcqc6CRTgFk+kvUewBA22sY gdeuJndjZM9IRxlfmOAmyfUizwo8ZNOm187D+MzJvQCJEr3LX8gwgF2wHQ0EFbMm PnR4Ue44un1tvmqFXc8Y4wudcedBqC8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:53 2025 by rpki-client