$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa File: 93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa (raw, json) Hash identifier: E9hDDyVtDICZTghHoPTn7oDy1hA0T1JhF7X+ctigyCA= Subject key identifier: DA:92:23:DA:F7:F2:CE:E5:A1:A3:5B:4C:9F:A3:F2:89:72:AE:44:1A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848B4C0F44DCC6E7CF259412980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 54113 IP address blocks: 157.5.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f4:4d:cc:6e:7c:f2:59:41:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=d3b0864e-302e-40dd-abdc-4537ce669ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:e2:c0:84:ea:ed:9f:7d:49:23:67:d1:67: 83:c4:22:39:1b:4b:64:ec:70:d9:2c:99:e1:98:30: ab:5f:6e:38:e7:19:eb:ac:31:55:95:2d:90:e6:e6: db:b4:45:7d:03:d5:f5:d6:1a:f4:88:47:02:8a:b0: 68:ea:b3:83:59:e5:e6:4a:0c:88:60:95:ed:46:33: 5d:4b:e1:a1:be:ea:fe:bf:5b:7f:6f:7b:a1:19:c4: d2:a0:80:1a:cc:de:f3:9e:d2:a2:58:2f:a6:77:9d: 0f:2a:f9:3e:7c:bf:9e:83:a5:c4:f0:f1:61:ec:c0: f7:f5:22:f8:a8:78:2c:fe:b2:84:d9:83:94:65:f4: 40:36:ad:c4:5f:86:e4:bb:1e:1c:e2:d4:40:49:e1: 41:4e:a9:54:00:15:2c:c9:4c:5b:0c:45:e7:86:07: 12:55:7d:ab:12:9d:18:75:65:12:9d:4c:e1:b9:06: b5:c9:f2:ab:00:9d:4b:7e:87:12:dc:e8:0b:79:00: 3d:f7:34:87:42:93:00:da:16:c6:a9:be:62:45:27: 60:60:8d:20:32:73:c5:31:71:72:f2:4d:c3:1c:e5: 43:af:6b:1c:39:49:80:e2:e0:54:32:7c:17:0a:ee: e1:bc:89:61:12:f3:03:0d:46:c4:2d:ab:1a:0a:ef: 61:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:92:23:DA:F7:F2:CE:E5:A1:A3:5B:4C:9F:A3:F2:89:72:AE:44:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9d:0f:32:57:b5:de:cc:c0:d0:dc:1f:46:38:1c:4e:1a:ed: d8:ec:00:97:fd:70:d6:c4:41:43:db:94:a1:30:c3:4e:72:c5: 4b:f7:74:d5:0d:c6:f2:db:a8:18:9f:3a:d1:c0:96:8c:b9:a6: 0e:67:48:70:5d:44:c8:2b:c0:72:42:26:73:0d:35:c6:26:8c: 0a:29:4d:86:8e:be:3a:55:cb:a4:28:d8:4a:9b:d5:f3:7c:3e: 7b:69:e6:26:cc:fd:9a:ff:c2:29:df:22:a6:5a:56:05:2c:6f: 45:f4:a5:d4:35:b9:4c:6e:16:cf:ca:e5:f7:46:06:de:3c:dd: 16:98:3e:ef:d1:5c:92:eb:03:d6:02:98:22:1c:a7:9b:98:1a: 94:19:7d:18:ce:8f:cf:3e:4c:f6:83:a5:b9:c4:24:36:e8:08: f9:03:fd:9c:74:0a:c4:39:a0:a3:2d:d2:d1:ae:2f:03:9d:24: ff:c8:f9:95:f1:c6:6a:70:a2:63:c0:72:57:d6:ea:cc:b7:33: d4:70:81:d5:2c:c0:1b:69:0f:a9:d2:b7:b9:39:e8:b0:c4:76: eb:a9:2c:e4:9b:83:c5:bc:ce:00:f4:09:c4:c6:dc:ee:90:9a: ce:a4:04:4a:a5:0c:5a:7a:69:e9:97:fd:6f:60:34:a3:59:7d: d5:23:b0:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPRNzG588llBKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZDNiMDg2NGUtMzAyZS00MGRkLWFiZGMtNDUzN2NlNjY5YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5TiwITq7Z99SSNn0WeDxCI5G0tk7HDZLJnh mDCrX2445xnrrDFVlS2Q5ubbtEV9A9X11hr0iEcCirBo6rODWeXmSgyIYJXtRjNd S+Ghvur+v1t/b3uhGcTSoIAazN7zntKiWC+md50PKvk+fL+eg6XE8PFh7MD39SL4 qHgs/rKE2YOUZfRANq3EX4bkux4c4tRASeFBTqlUABUsyUxbDEXnhgcSVX2rEp0Y dWUSnUzhuQa1yfKrAJ1LfocS3OgLeQA99zSHQpMA2hbGqb5iRSdgYI0gMnPFMXFy 8k3DHOVDr2scOUmA4uBUMnwXCu7hvIlhEvMDDUbELasaCu9h4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqSI9r38s7loaNbTJ+j8olyrkQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTNjOGZmMGEtMThjZC0z OGMzLWJhZmUtMGU2MjY1NWUxNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6dDzJXtd7MwNDcH0Y4HE4a7djsAJf9cNbEQUPblKEww05yxUv3dNUN xvLbqBifOtHAloy5pg5nSHBdRMgrwHJCJnMNNcYmjAopTYaOvjpVy6Qo2Eqb1fN8 Pntp5ibM/Zr/winfIqZaVgUsb0X0pdQ1uUxuFs/K5fdGBt483RaYPu/RXJLrA9YC mCIcp5uYGpQZfRjOj88+TPaDpbnEJDboCPkD/Zx0CsQ5oKMt0tGuLwOdJP/I+ZXx xmpwomPAclfW6sy3M9RwgdUswBtpD6nSt7k56LDEduupLOSbg8W8zgD0CcTG3O6Q ms6kBEqlDFp6aemX/W9gNKNZfdUjsL4= -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:38 2025 by rpki-client