$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55c9f618-b95a-3387-81fc-889e9ac7501a.roa File: 55c9f618-b95a-3387-81fc-889e9ac7501a.roa (raw, json) Hash identifier: xefYJ+yNWWbag8iYRxyEdTtwJBsmK27PQtlg2Ft34Tk= Subject key identifier: F9:1D:17:EF:AF:E1:E6:CA:48:D5:66:FF:97:78:15:B2:11:9A:E9:20 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848BFEBC452FAFF5CA9A836CCC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55c9f618-b95a-3387-81fc-889e9ac7501a.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 54113 IP address blocks: 157.5.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c4:52:fa:ff:5c:a9:a8:36:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=c5d2949f-478c-40c6-be78-b1c0e9cfedd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f1:e7:7e:50:a8:e6:0d:be:23:a0:23:0f:02: 19:61:44:6a:55:67:f9:80:35:30:b9:ba:4d:7c:dd: e1:bd:9b:0a:ed:86:c4:0e:82:8a:3e:7e:88:dd:3e: f3:09:32:e4:69:e8:d3:5c:5e:c0:14:ed:f8:83:f0: 05:25:e7:74:1c:09:4a:1e:e5:95:28:45:34:fd:46: f6:34:2a:d8:3a:2e:43:01:dc:b2:49:9e:22:b6:7f: a2:2a:5b:a9:92:20:52:19:ea:8c:44:3b:43:5e:73: 9b:b9:e6:0c:b2:46:90:62:b9:e5:03:f8:d0:96:c2: f7:45:98:a9:f5:e3:40:a5:c8:b9:a6:2b:c3:f0:97: 2c:d5:15:ee:c2:c8:08:1c:73:f2:2d:51:a4:87:ce: 09:f0:49:56:66:1e:66:a5:14:08:51:de:3a:4c:12: 24:ce:88:46:d5:32:9f:1b:63:2c:d5:27:b6:cf:d1: 03:5a:d9:9d:9a:b9:5c:f4:cb:47:64:b9:1d:1e:11: 2e:25:e4:a1:ca:2a:4d:fc:c6:a2:c4:ee:d6:3d:2d: 54:27:2f:18:7e:72:a6:69:c7:ea:45:79:dc:79:12: 90:17:59:c7:d4:b8:85:08:c4:a1:81:80:7b:72:5f: 6c:6d:1e:b2:28:f6:1e:82:69:3a:e6:ff:8e:cb:0d: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1D:17:EF:AF:E1:E6:CA:48:D5:66:FF:97:78:15:B2:11:9A:E9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55c9f618-b95a-3387-81fc-889e9ac7501a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9e:ca:ea:10:61:b7:76:a4:de:3d:a4:a8:0d:0c:38:47:6d: 02:f1:2d:b6:e1:83:6d:f6:c6:19:65:e2:58:c4:96:49:d1:f6: 1c:66:31:c4:8d:f4:32:ef:69:d1:71:41:c9:1e:45:e7:8b:91: ec:91:0f:ac:db:86:0f:d4:13:5e:30:db:40:f2:5a:e4:b3:52: 81:93:eb:29:4a:01:bb:01:bf:2d:78:ba:3d:ae:6e:8c:ee:77: 6a:ad:e5:b1:c2:43:9d:3e:0a:fb:22:2c:09:3c:fe:ad:67:24: c1:23:1d:ff:67:ab:4d:4f:b7:5c:df:70:ff:8d:5f:dd:18:23: 4e:b6:ee:87:5a:e5:6e:a6:4c:c1:c9:3f:8a:1f:9f:bd:3a:e0: 0f:90:8e:03:48:94:5e:2d:ab:0b:e8:eb:29:a8:24:b7:33:28: 9c:f9:0e:04:54:96:74:23:37:cc:5d:e1:9c:ab:48:4c:d4:46: 18:e6:f1:35:34:42:66:6c:32:9d:b7:82:ad:2f:d7:77:c4:f8: 8e:c9:ec:5e:bf:fb:f9:3e:97:bc:fb:cc:c4:c1:63:44:27:69: d1:97:5f:1c:c5:df:dc:48:65:ab:9f:5b:0a:54:ca:98:3d:15: dc:9e:d0:22:06:f8:60:44:7f:d2:76:73:f4:a9:8f:f1:aa:61: b0:a5:ec:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68RS+v9cqag2zMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YzVkMjk0OWYtNDc4Yy00MGM2LWJlNzgtYjFjMGU5Y2ZlZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvHnflCo5g2+I6AjDwIZYURqVWf5gDUwubpN fN3hvZsK7YbEDoKKPn6I3T7zCTLkaejTXF7AFO34g/AFJed0HAlKHuWVKEU0/Ub2 NCrYOi5DAdyySZ4itn+iKlupkiBSGeqMRDtDXnObueYMskaQYrnlA/jQlsL3RZip 9eNApci5pivD8Jcs1RXuwsgIHHPyLVGkh84J8ElWZh5mpRQIUd46TBIkzohG1TKf G2Ms1Se2z9EDWtmdmrlc9MtHZLkdHhEuJeShyipN/MaixO7WPS1UJy8YfnKmacfq RXnceRKQF1nH1LiFCMShgYB7cl9sbR6yKPYegmk65v+Oyw2FqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkdF++v4ebKSNVm/5d4FbIRmukgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTVjOWY2MTgtYjk1YS0z Mzg3LTgxZmMtODg5ZTlhYzc1MDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6eyuoQYbd2pN49pKgNDDhHbQLxLbbhg232xhll4ljElknR9hxmMcSN 9DLvadFxQckeReeLkeyRD6zbhg/UE14w20DyWuSzUoGT6ylKAbsBvy14uj2ubozu d2qt5bHCQ50+CvsiLAk8/q1nJMEjHf9nq01Pt1zfcP+NX90YI0627oda5W6mTMHJ P4ofn7064A+QjgNIlF4tqwvo6ymoJLczKJz5DgRUlnQjN8xd4ZyrSEzURhjm8TU0 QmZsMp23gq0v13fE+I7J7F6/+/k+l7z7zMTBY0QnadGXXxzF39xIZaufWwpUypg9 Fdye0CIG+GBEf9J2c/Spj/GqYbCl7O8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:56 2025 by rpki-client