$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/676199ea-5c1e-36ec-bfa1-876c99622ce3.roa File: 676199ea-5c1e-36ec-bfa1-876c99622ce3.roa (raw, json) Hash identifier: J2wz2Yc2d2mxXZb5Tp1Mba+diQ5UOjAx9vPtDzlfdxM= Subject key identifier: 97:FE:C9:D2:7E:09:B0:8F:57:CB:DC:A3:89:2B:27:4C:23:AE:30:0A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848BFEBC657093035D7A632DA53 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/676199ea-5c1e-36ec-bfa1-876c99622ce3.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 54113 IP address blocks: 157.5.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c6:57:09:30:35:d7:a6:32:da:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=33c33b73-1540-4896-9e68-26e526305fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:8c:1e:cb:d9:12:c9:64:d7:d1:07:6a:0d: ab:cd:e8:6c:72:11:5e:b0:98:63:36:51:5a:23:50: 29:91:4e:32:ff:84:b9:7a:55:64:c4:2e:f7:b9:1e: 6f:2e:c1:64:05:05:6f:13:ed:27:6a:d5:6c:71:f2: 33:10:f8:f1:c7:60:b4:6e:36:45:3b:8c:99:ad:d1: 3f:0a:37:a9:c5:33:c1:00:6a:88:06:56:71:c7:c6: c2:ed:ed:c0:9a:b0:47:02:b0:f8:bf:bb:26:90:ff: 43:53:44:07:37:00:d4:d3:59:30:61:87:e0:a8:2b: 35:de:6b:b9:19:97:95:da:4d:26:90:05:09:f7:bd: cb:bd:ce:76:35:1f:8f:97:d1:c4:80:3f:47:60:a9: 7b:a4:56:e4:18:d1:8f:25:a8:70:c5:fd:80:62:61: 5d:60:bb:85:3e:81:73:f9:e3:e8:61:d2:fa:fd:e1: 22:5d:61:d7:f3:ae:9e:61:33:12:61:42:0c:91:4b: c2:c5:6d:5e:eb:d9:92:c6:cd:0b:f0:c3:39:9f:1d: 17:bd:51:20:44:0e:43:b5:6f:bb:ea:61:44:e7:aa: 89:07:56:18:f6:f8:2f:c8:fc:22:06:cd:41:a6:32: 34:b2:b3:bd:94:7d:0e:7e:f8:e3:e2:b4:e6:87:4b: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FE:C9:D2:7E:09:B0:8F:57:CB:DC:A3:89:2B:27:4C:23:AE:30:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/676199ea-5c1e-36ec-bfa1-876c99622ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c7:0d:4a:3f:4f:2c:b3:12:c8:95:ec:79:14:5d:ed:f1:d0: 91:54:66:0c:eb:5d:3b:a2:16:3f:84:05:4d:53:c4:ad:74:cf: 41:4f:cf:c6:f0:06:f0:d6:ff:fd:74:b0:ae:e2:0e:58:f7:ed: 18:50:19:ba:aa:45:70:f0:c1:08:57:d3:dd:7b:cb:73:89:f1: 2f:ee:02:6c:ec:d4:75:1f:d5:a5:f6:45:b5:dd:88:68:ff:03: 7a:7f:9e:5a:52:64:89:04:5f:26:d7:c8:1d:ec:45:1f:a2:b6: fd:75:30:f4:23:4b:82:e6:11:86:6c:14:85:14:b4:83:5c:45: 10:02:18:e7:2c:d2:88:62:6b:2a:1d:61:67:ee:65:1f:41:b1: c6:a2:26:24:53:d8:62:9f:38:db:8b:48:b8:ed:1e:44:df:03: 9c:de:7b:84:a6:db:c0:51:b2:4d:d7:c3:11:7c:5a:01:cb:f3: b5:8b:ea:57:19:78:fb:84:c0:91:0f:4a:d5:ed:3a:05:37:dc: 80:fe:da:a5:a0:4e:c8:1c:1c:fb:01:99:4f:05:18:87:0c:fc: be:9a:d5:c9:5e:1e:71:c6:c4:dd:b0:be:ac:e2:04:a0:f1:f3: 2f:01:96:f0:40:64:06:68:4b:11:76:85:cc:8c:22:a2:21:13: fa:c1:e5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68ZXCTA116Yy2lMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MzNjMzNiNzMtMTU0MC00ODk2LTllNjgtMjZlNTI2MzA1ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMmMHsvZEslk19EHag2rzehschFesJhjNlFa I1ApkU4y/4S5elVkxC73uR5vLsFkBQVvE+0natVscfIzEPjxx2C0bjZFO4yZrdE/ CjepxTPBAGqIBlZxx8bC7e3AmrBHArD4v7smkP9DU0QHNwDU01kwYYfgqCs13mu5 GZeV2k0mkAUJ973Lvc52NR+Pl9HEgD9HYKl7pFbkGNGPJahwxf2AYmFdYLuFPoFz +ePoYdL6/eEiXWHX866eYTMSYUIMkUvCxW1e69mSxs0L8MM5nx0XvVEgRA5DtW+7 6mFE56qJB1YY9vgvyPwiBs1BpjI0srO9lH0Ofvjj4rTmh0u2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf+ydJ+CbCPV8vco4krJ0wjrjAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjc2MTk5ZWEtNWMxZS0z NmVjLWJmYTEtODc2Yzk5NjIyY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/HDUo/TyyzEsiV7HkUXe3x0JFUZgzrXTuiFj+EBU1TxK10z0FPz8bw BvDW//10sK7iDlj37RhQGbqqRXDwwQhX0917y3OJ8S/uAmzs1HUf1aX2RbXdiGj/ A3p/nlpSZIkEXybXyB3sRR+itv11MPQjS4LmEYZsFIUUtINcRRACGOcs0ohiayod YWfuZR9BscaiJiRT2GKfONuLSLjtHkTfA5zee4Sm28BRsk3XwxF8WgHL87WL6lcZ ePuEwJEPStXtOgU33ID+2qWgTsgcHPsBmU8FGIcM/L6a1cleHnHGxN2wvqziBKDx 8y8BlvBAZAZoSxF2hcyMIqIhE/rB5XE= -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:53 2025 by rpki-client