$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa File: 1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa (raw, json) Hash identifier: KSGwOzAH5Pp+D6LKo/STBLm6FY+dtX0iSqo0Mkoo028= Subject key identifier: FC:87:43:C6:11:12:B9:6E:E8:64:4F:EE:8E:96:D5:86:D9:20:34:08 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848B4C0D8AFB5C4A62DAB4997F0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 54113 IP address blocks: 157.5.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d8:af:b5:c4:a6:2d:ab:49:97:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=e2842226-3cf1-4944-b2d7-7f32c1f57ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f6:5a:68:57:c2:77:9b:6e:fc:fe:74:f7:71: e6:33:b7:63:a7:12:d6:fe:3b:3a:08:88:76:ed:32: b9:70:e6:98:b5:97:81:ac:b3:00:31:f3:3b:4b:2c: 09:c6:89:6e:f3:6f:6c:de:6d:77:a2:fa:5e:87:19: a4:4c:33:c2:86:f7:cd:54:ce:c4:c0:ec:fb:11:39: 36:3a:d8:b8:59:8d:f4:5f:2c:08:9d:18:6f:f2:5f: 7c:ba:23:96:ae:5f:64:c3:71:a6:7d:35:cc:02:45: f5:cc:82:08:b9:4d:04:96:82:a5:05:eb:21:c9:09: 96:84:e7:a9:5b:0f:a1:09:7b:63:f1:42:18:e8:6b: 2c:3b:f7:91:28:bb:1b:b8:b5:43:19:77:ff:cd:55: c3:74:88:aa:71:a5:74:d3:f7:f2:f3:d9:e1:6b:c7: 35:3d:f2:96:7c:af:25:ba:85:4e:d1:c2:fd:3c:71: 3f:42:3c:7c:6e:2c:0f:10:9f:4e:42:35:6b:01:af: d8:4b:9b:b2:85:20:1e:fe:33:5c:d5:7a:3b:73:46: 98:7b:87:5e:eb:24:80:d6:d6:53:8a:61:d9:51:e3: 19:4a:e3:7a:fb:ce:64:07:36:14:6b:ed:1e:84:f9: c4:63:1d:79:25:32:ee:9e:e5:56:be:16:26:61:6a: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:87:43:C6:11:12:B9:6E:E8:64:4F:EE:8E:96:D5:86:D9:20:34:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:97:1a:03:38:7e:95:00:fc:c8:cd:92:b9:40:00:cd:5f: d4:81:92:f7:af:91:37:06:41:07:c9:c3:8a:35:d5:ce:22:aa: 08:e8:df:db:81:30:94:18:a0:d1:c6:33:16:75:73:85:aa:c0: 9a:9c:96:7c:b3:9d:8e:c2:24:8f:0e:3c:51:c1:3d:f8:68:0d: 58:84:00:6d:80:14:87:51:f1:c7:b9:53:13:dc:fa:e4:15:7b: 33:37:8c:a4:60:4b:74:e3:00:96:f8:3f:21:8b:24:06:3a:73: 2f:b9:bf:ce:f1:10:6f:9e:de:04:fc:49:e0:5b:51:7d:d3:ac: 9b:0c:08:66:97:4e:c3:1b:d1:01:78:e6:75:d7:83:a6:f3:83: 4a:1d:f1:2a:63:51:5a:6c:3b:22:7c:02:e2:dd:78:8c:b3:26: c2:7e:51:b2:0a:15:ec:58:82:ab:99:79:d1:35:d0:f1:3d:0c: 35:ae:55:22:fe:24:23:bf:01:e3:fd:f8:c0:dc:ae:c6:67:f9: 9b:c6:90:73:af:fa:28:6f:33:1b:51:e7:e3:8d:40:da:70:9b: aa:f5:5e:0c:b0:71:e5:6e:ec:92:34:c4:b2:eb:37:31:d0:7c: bc:1b:61:ec:10:ba:6f:14:3b:31:82:47:7f:99:cc:00:d0:fd: 3e:42:9f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNivtcSmLatJl/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZTI4NDIyMjYtM2NmMS00OTQ0LWIyZDctN2YzMmMxZjU3ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvZaaFfCd5tu/P5093HmM7djpxLW/js6CIh2 7TK5cOaYtZeBrLMAMfM7SywJxolu829s3m13ovpehxmkTDPChvfNVM7EwOz7ETk2 Oti4WY30XywInRhv8l98uiOWrl9kw3GmfTXMAkX1zIIIuU0EloKlBeshyQmWhOep Ww+hCXtj8UIY6GssO/eRKLsbuLVDGXf/zVXDdIiqcaV00/fy89nha8c1PfKWfK8l uoVO0cL9PHE/Qjx8biwPEJ9OQjVrAa/YS5uyhSAe/jNc1Xo7c0aYe4de6ySA1tZT imHZUeMZSuN6+85kBzYUa+0ehPnEYx15JTLunuVWvhYmYWp6BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyHQ8YRErlu6GRP7o6W1YbZIDQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWFiMTE3MmYtY2Q2YS0z MWY2LWE5ZDUtYzQ5NjhkZjliMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGJlxoDOH6VAPzIzZK5QADNX9SBkvevkTcGQQfJw4o11c4iqgjo39uB MJQYoNHGMxZ1c4WqwJqclnyznY7CJI8OPFHBPfhoDViEAG2AFIdR8ce5UxPc+uQV ezM3jKRgS3TjAJb4PyGLJAY6cy+5v87xEG+e3gT8SeBbUX3TrJsMCGaXTsMb0QF4 5nXXg6bzg0od8SpjUVpsOyJ8AuLdeIyzJsJ+UbIKFexYgquZedE10PE9DDWuVSL+ JCO/AeP9+MDcrsZn+ZvGkHOv+ihvMxtR5+ONQNpwm6r1XgywceVu7JI0xLLrNzHQ fLwbYewQum8UOzGCR3+ZzADQ/T5Cn7g= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:53 2025 by rpki-client