$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a168318b-fba0-3160-afa8-9f8eef657443.roa File: a168318b-fba0-3160-afa8-9f8eef657443.roa (raw, json) Hash identifier: U1NnqoUendXdNJlXaCqilp5jAoZcTP0nxp0VrimKDSA= Subject key identifier: 33:A3:CA:21:13:EB:67:3D:74:C0:C8:A8:FF:B4:E7:6F:72:5D:F5:94 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285845408B257BE9DD51561348D340 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a168318b-fba0-3160-afa8-9f8eef657443.roa Signing time: Mon 18 Mar 2024 20:38:10 +0000 ROA not before: Mon 18 Mar 2024 20:38:10 +0000 ROA not after: Sun 16 Jun 2024 20:38:10 +0000 asID: 54113 IP address blocks: 157.5.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:8b:25:7b:e9:dd:51:56:13:48:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 18 20:38:10 2024 GMT Not After : Jun 16 20:38:10 2024 GMT Subject: CN=480f81c8-f75f-4d4b-9744-9a903f539a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:b9:d9:8a:13:0c:da:d4:1e:d3:6e:f1:e5: 5a:b8:a9:c5:69:14:7e:b7:f5:a1:7f:a9:90:a4:c9: 7b:5f:78:69:2a:2d:ab:c5:2b:2b:b2:ca:d5:c5:6f: fc:b4:b9:51:fe:66:61:07:58:36:44:c5:90:83:96: 73:05:31:f7:3c:86:4e:88:8d:6f:1c:22:c8:e0:82: 78:ad:e2:a7:90:c8:a3:b1:ed:6c:61:db:d7:29:d0: d8:0e:30:36:0d:a5:5b:66:25:c5:ba:58:d4:0f:e6: cd:9a:1b:39:01:69:c1:d9:fb:c5:69:6f:f8:33:37: bc:72:f5:0f:08:2d:a2:4f:f9:92:dc:df:91:33:7d: 4c:37:16:a6:a4:4f:0f:e3:34:f8:09:fd:4e:ba:f0: 5e:25:81:d6:35:af:cf:48:03:74:c0:4c:23:f9:9b: 7f:6d:45:cc:8b:29:3f:1c:94:59:d6:30:ae:b3:e8: 27:ad:36:a8:77:7f:d7:fe:5b:59:7a:ae:e5:d8:6f: 68:a9:40:a5:7a:9d:be:60:43:23:c3:b7:71:27:ba: bd:39:e0:92:1a:93:7e:9f:88:47:26:cc:3a:53:1a: fa:0a:67:a6:5a:2c:d7:ed:94:39:9c:f4:b1:3f:65: 4d:b6:0e:24:7c:c4:df:ca:33:a2:d5:24:06:d7:8c: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A3:CA:21:13:EB:67:3D:74:C0:C8:A8:FF:B4:E7:6F:72:5D:F5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a168318b-fba0-3160-afa8-9f8eef657443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ee:63:ad:6a:2b:6f:6e:f2:bf:aa:ba:0b:50:55:60:cd:6c: 91:7e:36:58:75:0b:4a:74:9e:bd:b5:0e:7e:e1:15:1b:a9:f8: 1e:fa:07:76:cb:93:25:0f:8e:07:5b:dc:8a:8e:09:28:13:a0: ac:ee:e3:59:53:df:95:84:57:cd:f1:5d:49:5c:da:81:f7:d6: 8b:c2:56:67:4d:45:93:ea:bf:8a:e1:2d:68:e4:d5:de:f8:aa: c7:79:cc:f0:c0:a7:96:64:fa:04:64:16:86:f1:90:48:96:cf: fe:25:9f:fb:3c:73:91:c8:24:8f:68:f1:7c:31:60:4b:e0:a9: 8d:f6:78:38:9f:d8:f4:ab:e4:1b:30:0a:9b:67:e1:9a:47:59: 3b:8b:e1:e4:d8:5a:b5:1b:73:e6:58:93:b2:61:a9:72:3a:39: 90:91:d2:ff:d3:dd:e4:c3:a8:b4:79:8d:6c:67:a4:33:23:5a: 6e:db:a1:a2:5d:8c:00:01:87:30:fd:ec:1a:90:91:f2:b0:d5: ec:73:b5:b0:6c:3f:59:f5:ee:bd:36:65:21:73:9b:bc:63:fe: 2f:06:bd:0b:e9:e9:da:d1:e9:44:04:35:b8:1a:e4:b9:9c:69: b1:dd:ee:1e:2e:59:97:ed:45:88:4d:2d:3d:bc:32:3d:f6:0d: 72:2a:4e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAiyV76d1RVhNI00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDMxODIwMzgxMFoXDTI0MDYxNjIwMzgxMFowLzEtMCsGA1UEAxMk NDgwZjgxYzgtZjc1Zi00ZDRiLTk3NDQtOWE5MDNmNTM5YTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjG52YoTDNrUHtNu8eVauKnFaRR+t/Whf6mQ pMl7X3hpKi2rxSsrssrVxW/8tLlR/mZhB1g2RMWQg5ZzBTH3PIZOiI1vHCLI4IJ4 reKnkMijse1sYdvXKdDYDjA2DaVbZiXFuljUD+bNmhs5AWnB2fvFaW/4Mze8cvUP CC2iT/mS3N+RM31MNxampE8P4zT4Cf1OuvBeJYHWNa/PSAN0wEwj+Zt/bUXMiyk/ HJRZ1jCus+gnrTaod3/X/ltZeq7l2G9oqUClep2+YEMjw7dxJ7q9OeCSGpN+n4hH Jsw6Uxr6CmemWizX7ZQ5nPSxP2VNtg4kfMTfyjOi1SQG14y/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOjyiET62c9dMDIqP+0529yXfWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTE2ODMxOGItZmJhMC0z MTYwLWFmYTgtOWY4ZWVmNjU3NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQV+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInuY61qK29u8r+qugtQVWDNbJF+Nlh1C0p0nr21Dn7hFRup+B76B3bL kyUPjgdb3IqOCSgToKzu41lT35WEV83xXUlc2oH31ovCVmdNRZPqv4rhLWjk1d74 qsd5zPDAp5Zk+gRkFobxkEiWz/4ln/s8c5HIJI9o8XwxYEvgqY32eDif2PSr5Bsw Cptn4ZpHWTuL4eTYWrUbc+ZYk7JhqXI6OZCR0v/T3eTDqLR5jWxnpDMjWm7boaJd jAABhzD97BqQkfKw1exztbBsP1n17r02ZSFzm7xj/i8GvQvp6drR6UQENbga5Lmc abHd7h4uWZftRYhNLT28Mj32DXIqTkM= -----END CERTIFICATE-----Generated at Tue Jun 4 18:38:37 2024 by rpki-client on console-fra.rpki-client.org