$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/86e4a78a-683c-3747-9794-17fa61e16fa8.roa File: 86e4a78a-683c-3747-9794-17fa61e16fa8.roa (raw, json) Hash identifier: kXF1K+jBG5fpusIZpg7cbvOXEqViBC7CRaC8drmqZc0= Subject key identifier: A7:A1:72:BD:61:E0:35:D2:4B:CB:56:E4:E1:AD:26:CC:2D:4E:E2:22 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848B4C0F48A815F3738358447F4 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/86e4a78a-683c-3747-9794-17fa61e16fa8.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 54113 IP address blocks: 157.5.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f4:8a:81:5f:37:38:35:84:47:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=2ebf8b22-3ba0-42e0-96c5-101b6eddd35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:86:e9:8a:82:ce:a4:84:b6:7d:bc:80:51: 43:7d:fe:8a:3b:45:c5:b8:6c:95:27:31:4d:1c:1b: 88:00:eb:39:d0:b7:71:29:81:a0:89:97:63:2f:03: 84:8d:2b:59:40:bc:05:7f:fe:35:55:0d:bc:fc:99: ad:f6:0d:1e:20:c6:8a:dc:78:bb:f6:01:f4:0b:02: 7a:ce:d1:72:96:45:4f:33:34:a5:12:d1:dc:8c:39: 00:4b:05:93:63:8d:bb:02:4e:1d:3c:47:26:ce:1d: 3b:b1:24:81:3b:b6:16:d4:39:e7:d2:99:be:ad:c6: a0:e8:1b:d1:70:92:18:7f:d8:ab:f4:db:89:be:55: 06:d5:c9:b3:a1:c1:55:0f:41:81:a1:3f:88:e2:d3: 8c:92:6e:08:5d:ca:32:ed:cf:9d:bf:4b:90:23:42: a3:5c:6c:84:1e:0b:01:b0:b8:30:d7:f1:9f:20:07: 52:6c:cb:46:59:eb:61:3d:38:44:a6:67:45:91:e4: e9:fc:9a:62:d2:41:ca:7c:b8:3a:65:7a:89:4e:9c: 29:30:a6:29:bc:86:10:1b:41:a1:04:8a:9b:52:21: ce:30:16:f3:7d:32:4e:c3:39:02:6f:c4:19:a5:88: 6e:e9:a1:5a:07:1b:66:1d:0c:fc:ec:8a:1a:20:f8: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:72:BD:61:E0:35:D2:4B:CB:56:E4:E1:AD:26:CC:2D:4E:E2:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/86e4a78a-683c-3747-9794-17fa61e16fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e2:9a:3b:c1:ef:4f:7c:69:a8:ae:94:7c:78:27:e7:b2:67: e2:81:14:6f:e3:a2:5e:6f:be:d9:8a:24:ef:45:d0:f3:10:e3: 1f:47:13:8f:da:c4:1d:7f:91:51:f4:e4:9a:77:13:9b:99:b5: 45:85:df:88:c3:59:96:49:ef:a8:75:ba:97:33:b0:84:79:26: 35:cc:d7:c9:de:5d:e7:87:87:43:23:da:21:dd:35:76:59:77: bc:97:19:53:ea:e3:32:90:88:98:76:5e:28:e8:b4:23:66:42: 34:69:c4:2c:07:04:7b:1c:80:e5:7f:a6:c4:46:02:b6:a1:17: 89:00:64:2c:ca:a5:54:b7:b3:20:7c:88:88:61:ef:f6:7d:66: 93:3b:9c:76:fb:5c:a5:1d:ae:af:55:5c:d2:55:7a:18:76:37: a3:4f:60:f2:98:11:13:ff:d4:b8:72:1c:53:1f:69:28:05:f0: 21:60:5f:c3:27:d3:5e:48:58:05:2d:1e:ab:49:cf:af:d4:1d: b9:87:b1:bf:41:a1:56:93:96:22:aa:ad:7f:f5:ae:49:7c:9c: c1:95:c6:be:ea:82:01:cb:07:15:8c:a2:e1:e0:e6:1c:bf:ae: 57:61:57:33:ea:b0:6f:8d:8b:67:4c:d1:56:71:46:c1:30:fd: dd:58:02:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPSKgV83ODWER/QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MmViZjhiMjItM2JhMC00MmUwLTk2YzUtMTAxYjZlZGRkMzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFSG6YqCzqSEtn28gFFDff6KO0XFuGyVJzFN HBuIAOs50LdxKYGgiZdjLwOEjStZQLwFf/41VQ28/Jmt9g0eIMaK3Hi79gH0CwJ6 ztFylkVPMzSlEtHcjDkASwWTY427Ak4dPEcmzh07sSSBO7YW1Dnn0pm+rcag6BvR cJIYf9ir9NuJvlUG1cmzocFVD0GBoT+I4tOMkm4IXcoy7c+dv0uQI0KjXGyEHgsB sLgw1/GfIAdSbMtGWethPThEpmdFkeTp/Jpi0kHKfLg6ZXqJTpwpMKYpvIYQG0Gh BIqbUiHOMBbzfTJOwzkCb8QZpYhu6aFaBxtmHQz87IoaIPjZsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKehcr1h4DXSS8tW5OGtJswtTuIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODZlNGE3OGEtNjgzYy0z NzQ3LTk3OTQtMTdmYTYxZTE2ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvimjvB7098aaiulHx4J+eyZ+KBFG/jol5vvtmKJO9F0PMQ4x9HE4/a xB1/kVH05Jp3E5uZtUWF34jDWZZJ76h1upczsIR5JjXM18neXeeHh0Mj2iHdNXZZ d7yXGVPq4zKQiJh2XijotCNmQjRpxCwHBHscgOV/psRGArahF4kAZCzKpVS3syB8 iIhh7/Z9ZpM7nHb7XKUdrq9VXNJVehh2N6NPYPKYERP/1LhyHFMfaSgF8CFgX8Mn 015IWAUtHqtJz6/UHbmHsb9BoVaTliKqrX/1rkl8nMGVxr7qggHLBxWMouHg5hy/ rldhVzPqsG+Ni2dM0VZxRsEw/d1YArA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:18 2025 by rpki-client