$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa File: 1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa (raw, json) Hash identifier: ashDLFK3bYa+FtnbXZxk9qiJbOYG7gb06B1o88QG2Rw= Subject key identifier: 38:F8:20:F5:B3:42:B2:05:55:63:A8:F1:4D:CF:AB:94:F2:DE:93:E0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848BFEBC5FA5C870AACC9A68D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 54113 IP address blocks: 157.5.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c5:fa:5c:87:0a:ac:c9:a6:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=b0a64e0f-489a-47bf-9168-ea5f258313f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:76:29:4b:06:6b:7b:36:25:c7:cc:eb:de: f0:38:88:3b:cb:9a:a7:6d:b0:e6:5c:ec:ba:9d:c4: 61:46:fd:a8:21:4d:c1:ed:e4:d5:d7:84:0f:24:39: ad:18:cd:66:1b:08:b3:02:8a:28:17:ee:c9:6d:3c: 84:92:dc:25:43:78:ea:ae:b5:12:a4:82:72:f1:a5: 90:b6:dd:dc:b2:ce:af:8e:03:f1:0a:9a:b5:4c:82: 3a:e1:af:96:b0:9b:d2:4e:77:c2:ec:93:9e:4e:7f: 8b:8e:ca:8a:61:65:2d:a5:31:f0:cf:ab:8b:83:ff: 4c:88:e7:2c:c8:93:90:eb:8f:ce:bf:6b:77:90:24: 1d:62:97:72:1e:d8:83:b9:3c:ae:4e:7b:e2:ed:39: 3a:ca:4c:ee:d2:0c:4b:2c:42:74:1d:9c:49:83:10: 61:a7:87:58:18:cb:19:bc:91:1f:24:de:9c:19:ad: 34:07:5b:d7:5b:2c:63:1b:fc:db:a0:6b:85:72:64: 23:fb:03:f4:d4:8a:46:95:8d:ac:a3:ef:71:62:3e: cb:6e:6f:ff:12:98:c7:81:e4:80:40:a9:5f:e9:09: 5a:4a:ac:e3:34:44:5a:73:f0:9a:1b:5e:25:22:ed: 98:79:19:39:40:5a:46:a9:45:2a:bf:bf:a6:9e:4d: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F8:20:F5:B3:42:B2:05:55:63:A8:F1:4D:CF:AB:94:F2:DE:93:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:af:dd:0d:75:2d:b5:b0:b3:f6:7d:ec:86:64:85:e9:66:8e: 7a:21:1c:84:d7:17:c8:d6:97:ef:47:0e:31:97:e1:49:a1:aa: 34:0f:28:50:a7:37:b0:f1:35:79:8c:6f:dd:c6:a1:68:55:00: c0:d8:db:36:1a:76:88:87:e9:38:90:39:10:c6:98:34:19:e4: 29:ac:e4:9b:6e:dc:08:ac:32:c9:d6:a8:a5:28:da:cf:38:73: e2:57:17:d4:2a:af:03:62:77:c3:31:3f:b5:98:c8:bb:1f:87: 3b:a8:31:06:cb:20:d1:5a:4c:56:34:17:40:02:fb:e5:d4:34: 06:d1:5d:93:3c:f5:23:bd:92:b3:a3:85:ab:ba:26:da:bd:33: 04:2a:f8:3f:51:a7:ae:de:e2:e3:f2:12:eb:1b:ec:a2:61:f3: 3e:17:a3:73:5f:b7:86:d5:25:97:3f:7f:57:59:5c:54:c8:55: 0d:4a:0c:26:b6:3e:13:66:d1:e0:3b:6e:eb:55:ac:9c:78:dd: 66:3b:db:0d:34:b7:15:46:19:1f:b9:65:0d:ba:7f:2e:c4:00: 9c:7f:20:6f:f8:3d:1f:de:37:94:e1:d4:64:5b:e8:1d:c2:3a: bf:b3:0e:ae:29:91:17:f5:44:88:e2:5c:c2:b5:14:48:b2:cb: 4f:9a:92:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68X6XIcKrMmmjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YjBhNjRlMGYtNDg5YS00N2JmLTkxNjgtZWE1ZjI1ODMxM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXx2KUsGa3s2JcfM697wOIg7y5qnbbDmXOy6 ncRhRv2oIU3B7eTV14QPJDmtGM1mGwizAoooF+7JbTyEktwlQ3jqrrUSpIJy8aWQ tt3css6vjgPxCpq1TII64a+WsJvSTnfC7JOeTn+LjsqKYWUtpTHwz6uLg/9MiOcs yJOQ64/Ov2t3kCQdYpdyHtiDuTyuTnvi7Tk6ykzu0gxLLEJ0HZxJgxBhp4dYGMsZ vJEfJN6cGa00B1vXWyxjG/zboGuFcmQj+wP01IpGlY2so+9xYj7Lbm//EpjHgeSA QKlf6QlaSqzjNERac/CaG14lIu2YeRk5QFpGqUUqv7+mnk3huwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj4IPWzQrIFVWOo8U3Pq5Ty3pPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWZlNjQyYzgtNTUxMy0z M2FjLThmMTAtNWExYzIzZTYzYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGev3Q11LbWws/Z97IZkhelmjnohHITXF8jWl+9HDjGX4UmhqjQPKFCn N7DxNXmMb93GoWhVAMDY2zYadoiH6TiQORDGmDQZ5Cms5Jtu3AisMsnWqKUo2s84 c+JXF9QqrwNid8MxP7WYyLsfhzuoMQbLINFaTFY0F0AC++XUNAbRXZM89SO9krOj hau6Jtq9MwQq+D9Rp67e4uPyEusb7KJh8z4Xo3Nft4bVJZc/f1dZXFTIVQ1KDCa2 PhNm0eA7butVrJx43WY72w00txVGGR+5ZQ26fy7EAJx/IG/4PR/eN5Th1GRb6B3C Or+zDq4pkRf1RIjiXMK1FEiyy0+akvY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:20 2025 by rpki-client