$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74a0285e-6c29-3522-be51-618f8de67f29.roa File: 74a0285e-6c29-3522-be51-618f8de67f29.roa (raw, json) Hash identifier: awDAuHG13RrhqqbOOTlAbPlHuB3fCBe9j5vzpIK0uao= Subject key identifier: 7E:5C:04:11:04:C9:E4:35:70:C4:2C:9C:7B:8F:4F:16:4E:E3:45:69 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848BFEBC52FA22F116B63C1ED80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74a0285e-6c29-3522-be51-618f8de67f29.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 54113 IP address blocks: 157.5.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c5:2f:a2:2f:11:6b:63:c1:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=40b8572f-eb7e-4ef4-b8b0-3b1bc12dd7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:3b:c2:fe:9c:bb:58:c1:67:59:19:99:10: ad:e9:48:3b:2a:1e:8e:ff:34:a4:c7:72:6e:87:90: a2:d0:1a:90:0b:19:57:4c:e9:6f:86:a6:b6:e9:2f: 2b:f0:e8:8e:2d:d9:05:b0:a6:c0:61:fd:b3:aa:fd: a7:14:80:4c:c9:d7:a4:f8:0e:bb:57:3d:f5:6a:b8: eb:43:d9:c2:80:2b:5d:f2:93:6c:7d:d4:4a:6e:8b: 39:38:72:df:bc:f9:91:41:0d:2c:a4:2b:05:01:08: 0d:cc:50:1a:19:18:91:55:20:4e:08:4d:61:7d:ef: e5:62:81:9b:f8:b8:e1:da:0b:c1:e7:4e:9a:4a:7b: 76:1b:7e:ce:d5:d9:5b:94:44:c8:75:95:48:13:3e: 36:2d:da:0d:9f:8c:bd:42:60:33:9f:7f:06:84:f4: df:02:82:96:f7:83:d3:c9:7d:2e:8f:b9:83:39:45: f8:61:63:a5:2e:cf:5b:4a:f3:99:80:85:0c:f7:61: 5e:bb:6a:cd:80:74:9f:1a:f3:84:d8:57:a4:be:3a: ff:97:ae:db:bb:70:08:96:dc:49:bc:e0:65:f6:b7: 58:3b:30:8a:d2:46:91:d5:74:0f:8a:e8:24:55:70: 84:3f:6a:e8:6c:9c:ce:fe:05:ae:7e:97:32:60:03: f4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5C:04:11:04:C9:E4:35:70:C4:2C:9C:7B:8F:4F:16:4E:E3:45:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74a0285e-6c29-3522-be51-618f8de67f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ec:97:af:4f:d9:a4:42:71:1c:5e:64:8c:c7:59:78:4b:73: 59:4f:91:07:a2:80:0f:91:34:5d:c3:a5:b4:d9:39:4e:f1:95: 01:bc:ab:22:5b:b1:e4:eb:32:c4:b3:b1:eb:09:f6:ed:9f:3b: 12:13:f8:11:65:b3:f0:97:a9:d1:5c:50:4a:83:fd:9b:ae:b5: c1:a4:5d:3d:74:27:2d:0f:04:43:56:95:28:64:8f:8f:c3:e2: 9a:d4:74:35:1b:d3:7e:fb:a7:fb:5a:c9:e8:55:50:71:42:c7: ba:f6:61:ef:56:8e:26:13:28:52:d6:1e:cf:18:6c:7f:9f:e3: 03:aa:ef:14:28:6d:ce:1c:89:32:74:82:d9:74:75:fd:71:5b: 62:3f:7b:de:bd:b5:d0:cc:9d:be:8c:b4:2f:c9:aa:e4:61:57: ec:ad:95:62:e5:94:ba:e4:c8:de:13:89:1a:71:d0:48:56:b4: 46:ce:26:db:8d:c7:7d:c1:f0:8c:2b:24:0e:70:be:d9:35:e6: e6:ed:db:0c:ca:45:4b:2b:53:1f:02:ae:df:fb:73:55:98:e0: be:cc:e5:cd:30:72:07:8f:21:97:2a:49:d9:66:62:11:6b:39: fb:07:ac:3d:d2:57:95:37:bd:37:6e:1e:cd:d9:d9:e2:e3:0a: 91:3d:04:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68Uvoi8Ra2PB7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDBiODU3MmYtZWI3ZS00ZWY0LWI4YjAtM2IxYmMxMmRkN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszk7wv6cu1jBZ1kZmRCt6Ug7Kh6O/zSkx3Ju h5Ci0BqQCxlXTOlvhqa26S8r8OiOLdkFsKbAYf2zqv2nFIBMydek+A67Vz31arjr Q9nCgCtd8pNsfdRKbos5OHLfvPmRQQ0spCsFAQgNzFAaGRiRVSBOCE1hfe/lYoGb +Ljh2gvB506aSnt2G37O1dlblETIdZVIEz42LdoNn4y9QmAzn38GhPTfAoKW94PT yX0uj7mDOUX4YWOlLs9bSvOZgIUM92Feu2rNgHSfGvOE2Fekvjr/l67bu3AIltxJ vOBl9rdYOzCK0kaR1XQPiugkVXCEP2robJzO/gWufpcyYAP0pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5cBBEEyeQ1cMQsnHuPTxZO40VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzRhMDI4NWUtNmMyOS0z NTIyLWJlNTEtNjE4ZjhkZTY3ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbsl69P2aRCcRxeZIzHWXhLc1lPkQeigA+RNF3DpbTZOU7xlQG8qyJb seTrMsSzsesJ9u2fOxIT+BFls/CXqdFcUEqD/ZuutcGkXT10Jy0PBENWlShkj4/D 4prUdDUb0377p/tayehVUHFCx7r2Ye9WjiYTKFLWHs8YbH+f4wOq7xQobc4ciTJ0 gtl0df1xW2I/e969tdDMnb6MtC/JquRhV+ytlWLllLrkyN4TiRpx0EhWtEbOJtuN x33B8IwrJA5wvtk15ubt2wzKRUsrUx8Crt/7c1WY4L7M5c0wcgePIZcqSdlmYhFr OfsHrD3SV5U3vTduHs3Z2eLjCpE9BNE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:42 2025 by rpki-client