$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2378e806-8300-32e8-a238-5007df3842ee.roa File: 2378e806-8300-32e8-a238-5007df3842ee.roa (raw, json) Hash identifier: GURpd+j6qaU3Ir38rP24/pTY6EPpYH7Zo7LgYFmOL1E= Subject key identifier: F6:7A:75:89:2E:FC:92:4D:EF:F8:15:A6:23:53:AB:CF:05:A8:C5:4E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848BFEBC5B72B799DDA02236780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2378e806-8300-32e8-a238-5007df3842ee.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 54113 IP address blocks: 157.5.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c5:b7:2b:79:9d:da:02:23:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=0a4e2821-fcd3-4524-a759-fb3c053f9500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:ea:e8:ce:4b:85:be:e8:0e:a1:7b:73:46: 50:40:c9:6d:50:50:8a:12:fd:38:d6:47:db:07:07: 1d:66:4d:f8:81:7f:41:f4:6a:de:44:52:14:de:a8: a2:e1:fb:ba:8c:8e:b6:15:17:95:99:3d:39:cc:3b: 2c:ae:80:e3:48:2f:8c:0a:64:84:c0:23:9d:ab:a1: aa:1e:c5:cc:81:a8:00:0d:ea:13:75:3c:ed:ab:27: 34:0f:b8:26:71:12:7e:0b:d8:3a:54:b4:36:d4:0a: 84:10:53:03:08:da:d7:99:a6:e8:9e:8c:31:2d:be: cc:50:f3:bf:1e:6f:33:02:04:04:d3:bb:4e:d4:6f: 4a:63:20:9b:8f:f5:56:cf:5e:7b:f7:2f:59:bc:47: 87:b0:cd:6a:c1:eb:e7:9e:2e:83:e2:cc:88:c8:10: 5a:3e:0a:97:d0:4a:c1:07:89:50:2d:8b:f9:42:41: 77:cf:c2:43:79:10:3e:7a:ec:79:9d:5e:9b:ef:c6: 92:41:82:69:c3:8d:de:e2:0b:bc:4b:f8:26:df:2f: 08:2a:91:42:b5:13:4b:b9:47:b8:db:f8:db:fc:c6: 07:64:41:b0:d6:ab:d1:b6:07:a3:9f:cf:08:74:a2: f2:b1:52:45:22:49:08:b6:1b:31:66:9c:e6:35:95: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7A:75:89:2E:FC:92:4D:EF:F8:15:A6:23:53:AB:CF:05:A8:C5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2378e806-8300-32e8-a238-5007df3842ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:bf:00:d8:fe:77:07:5a:59:6f:db:9c:f3:91:7c:3a:07:1e: ff:13:ae:b3:99:02:ea:81:28:ca:19:fd:31:85:b1:8e:cd:83: 15:96:6b:eb:17:9e:b0:35:f5:53:1d:3c:00:93:b5:8e:71:d1: 26:7f:05:b9:a3:91:92:70:8f:a3:d9:24:49:7f:0d:92:3d:ce: 97:2c:b4:35:4a:83:2c:4c:21:fd:b1:8c:cc:8d:f2:cf:d4:c0: ca:52:a7:3a:fa:eb:a7:cc:06:8b:2f:33:0a:03:f4:27:60:1c: 2c:04:ba:69:9a:66:a2:b6:b4:02:3b:e9:4d:56:66:4d:49:83: 1c:04:8d:40:ac:82:5d:73:55:c1:55:74:b6:04:8f:da:53:d4: 14:01:cf:fb:b7:5e:16:d7:cd:b1:34:ee:7e:8f:43:7d:3d:1a: 8a:05:08:a1:cd:56:a0:a9:78:90:5c:e3:3e:2c:f8:e9:09:98: 32:3b:ed:03:66:7c:42:ea:04:e2:f9:ef:4f:eb:e7:62:01:40: de:67:1d:2a:88:1a:6a:b1:d7:7b:29:98:9b:67:29:08:2d:0a: 81:87:fd:a0:b9:d4:8d:66:a0:7b:d4:eb:c0:68:db:bb:7c:bd: 49:5c:46:5e:3f:62:ab:e4:8a:1d:21:0d:8a:0d:6d:92:35:86: 9e:0d:5f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68W3K3md2gIjZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MGE0ZTI4MjEtZmNkMy00NTI0LWE3NTktZmIzYzA1M2Y5NTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCTq6M5Lhb7oDqF7c0ZQQMltUFCKEv041kfb BwcdZk34gX9B9GreRFIU3qii4fu6jI62FReVmT05zDssroDjSC+MCmSEwCOdq6Gq HsXMgagADeoTdTztqyc0D7gmcRJ+C9g6VLQ21AqEEFMDCNrXmabonowxLb7MUPO/ Hm8zAgQE07tO1G9KYyCbj/VWz1579y9ZvEeHsM1qwevnni6D4syIyBBaPgqX0ErB B4lQLYv5QkF3z8JDeRA+eux5nV6b78aSQYJpw43e4gu8S/gm3y8IKpFCtRNLuUe4 2/jb/MYHZEGw1qvRtgejn88IdKLysVJFIkkIthsxZpzmNZUkpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ6dYku/JJN7/gVpiNTq88FqMVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjM3OGU4MDYtODMwMC0z MmU4LWEyMzgtNTAwN2RmMzg0MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW/ANj+dwdaWW/bnPORfDoHHv8TrrOZAuqBKMoZ/TGFsY7NgxWWa+sX nrA19VMdPACTtY5x0SZ/BbmjkZJwj6PZJEl/DZI9zpcstDVKgyxMIf2xjMyN8s/U wMpSpzr666fMBosvMwoD9CdgHCwEummaZqK2tAI76U1WZk1JgxwEjUCsgl1zVcFV dLYEj9pT1BQBz/u3XhbXzbE07n6PQ309GooFCKHNVqCpeJBc4z4s+OkJmDI77QNm fELqBOL570/r52IBQN5nHSqIGmqx13spmJtnKQgtCoGH/aC51I1moHvU68Bo27t8 vUlcRl4/Yqvkih0hDYoNbZI1hp4NX/0= -----END CERTIFICATE-----Generated at Fri Mar 14 13:22:41 2025 by rpki-client