$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa File: 21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa (raw, json) Hash identifier: CIM+p5ODZM5IpRYvD/QJiRSs54Mp+3vQZsLGIJg8qh8= Subject key identifier: C5:95:93:9D:55:25:AC:12:3A:C5:C3:EA:AB:E2:6E:31:26:AB:89:0B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285847E094E46D0A2B34D62C9843C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 54113 IP address blocks: 157.5.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:e4:6d:0a:2b:34:d6:2c:98:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=b3e21d36-90aa-4046-a47e-dad0be4d60f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:9f:f7:88:b3:a3:52:6d:a4:46:fc:07:e5: 56:95:18:6c:f7:99:b8:8f:7a:8a:19:98:c0:a2:36: c2:1f:ef:64:18:a5:0d:87:50:bc:92:a2:52:7a:7f: ba:1f:a2:df:eb:6d:43:5b:53:c9:84:52:e2:10:20: dd:f7:06:12:e9:e5:cd:71:80:d8:a9:cb:16:7b:b4: 51:45:c4:48:b9:86:80:f8:c3:b7:4d:e3:12:77:d0: 9f:35:50:e2:3f:fd:ee:40:c9:b8:00:ca:32:12:90: 8c:ca:1e:b3:ac:89:86:9c:ba:88:a8:62:eb:55:e5: e8:98:bb:1d:9f:d3:b4:18:70:92:7e:0c:8f:32:7e: ba:f7:ed:4e:69:94:ad:78:14:98:0f:70:8c:1c:fa: c8:41:3c:82:6c:71:a9:e8:00:9c:26:59:ea:02:fd: 7f:a0:3c:e6:3c:d8:f0:70:8f:bd:9c:13:03:b3:3f: a2:0d:ff:70:ef:f8:e7:96:08:ef:ad:8d:9e:90:d7: 6f:49:64:23:76:ef:51:9e:9f:51:2d:6e:58:16:27: 2a:50:1d:81:bb:a1:54:58:71:ac:4a:6c:f9:34:4b: cb:b7:8d:e8:92:53:e9:8c:b1:5e:c4:7f:6b:c5:de: dd:9c:73:b7:05:d6:dd:27:dc:b0:1c:cc:2e:b9:e5: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:95:93:9D:55:25:AC:12:3A:C5:C3:EA:AB:E2:6E:31:26:AB:89:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:17:9c:a4:97:e3:5f:2d:cd:69:e1:cf:23:ec:9a:97:e8:16: 27:02:5e:82:a1:34:c5:2e:59:cc:bd:3f:a2:ed:2b:3b:ad:ef: 1d:88:87:be:63:f5:91:bd:82:15:24:97:e5:10:f1:a7:34:a0: 86:e8:d4:19:64:cf:aa:ae:f2:b2:48:f5:a1:9d:81:70:28:8c: a1:97:0b:33:5c:23:5c:85:7f:ba:7e:c1:81:9a:0e:f4:ec:2a: a8:3c:f5:98:31:3b:e5:71:26:44:b2:13:4e:25:f5:e3:eb:b7: 44:a6:d9:56:c8:df:f4:4a:43:90:1b:94:8f:d7:04:0a:d2:70: 5c:55:86:65:cb:06:03:81:c3:ff:0c:06:66:d3:83:27:dd:e6: 8d:7b:fa:6c:cb:29:96:b9:75:eb:87:d9:41:ce:ed:6f:c3:fb: 39:45:15:73:7f:52:aa:01:4f:65:f2:0d:ff:4c:09:5e:53:3a: da:e6:96:03:77:7a:b7:35:a0:6a:53:55:fd:5f:4a:8d:f1:cf: 22:d0:86:0e:c2:3a:0e:d4:b6:89:58:5a:2d:e8:0e:90:8f:a8: b8:aa:9d:b8:de:23:78:1a:24:97:4b:2c:cf:b9:1d:a2:91:c4: 97:a7:28:17:0e:b4:94:68:a2:cf:c7:8d:c1:d5:e1:b9:c1:44: 56:7c:2e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglORtCis01iyYQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk YjNlMjFkMzYtOTBhYS00MDQ2LWE0N2UtZGFkMGJlNGQ2MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6qf94izo1JtpEb8B+VWlRhs95m4j3qKGZjA ojbCH+9kGKUNh1C8kqJSen+6H6Lf621DW1PJhFLiECDd9wYS6eXNcYDYqcsWe7RR RcRIuYaA+MO3TeMSd9CfNVDiP/3uQMm4AMoyEpCMyh6zrImGnLqIqGLrVeXomLsd n9O0GHCSfgyPMn669+1OaZSteBSYD3CMHPrIQTyCbHGp6ACcJlnqAv1/oDzmPNjw cI+9nBMDsz+iDf9w7/jnlgjvrY2ekNdvSWQjdu9Rnp9RLW5YFicqUB2Bu6FUWHGs Smz5NEvLt43oklPpjLFexH9rxd7dnHO3BdbdJ9ywHMwuueVfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWVk51VJawSOsXD6qvibjEmq4kLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjFjM2MwZTgtZmQ3Mi0z ZTRkLWExMGEtZTFmZTA0MjFlYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMXnKSX418tzWnhzyPsmpfoFicCXoKhNMUuWcy9P6LtKzut7x2Ih75j 9ZG9ghUkl+UQ8ac0oIbo1Blkz6qu8rJI9aGdgXAojKGXCzNcI1yFf7p+wYGaDvTs Kqg89ZgxO+VxJkSyE04l9ePrt0Sm2VbI3/RKQ5AblI/XBArScFxVhmXLBgOBw/8M BmbTgyfd5o17+mzLKZa5deuH2UHO7W/D+zlFFXN/UqoBT2XyDf9MCV5TOtrmlgN3 erc1oGpTVf1fSo3xzyLQhg7COg7UtolYWi3oDpCPqLiqnbjeI3gaJJdLLM+5HaKR xJenKBcOtJRoos/HjcHV4bnBRFZ8LkI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:46 2024 by rpki-client on console-fra.rpki-client.org