$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa File: bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa (raw, json) Hash identifier: 2AwjomnlkKY7TAbgOHQzRovI/S1QXwWLy0cPWCYO+j4= Subject key identifier: E7:03:22:D4:ED:68:71:6F:42:9B:CE:60:C5:36:DD:C1:67:24:23:C0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848B4C0D9FAF74BF6E0EF070180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 54113 IP address blocks: 157.5.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d9:fa:f7:4b:f6:e0:ef:07:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=ef1c6160-a547-49e0-a956-68b699d246ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:8b:71:44:b6:10:e6:da:52:6a:61:80:3a: 90:d4:4d:0f:9d:f0:71:a3:35:11:84:3a:46:fd:39: 31:d8:b9:33:81:54:78:80:a5:b1:e9:6a:b5:5d:d7: df:47:84:ce:21:be:5f:bd:21:52:cd:40:ef:63:35: 1e:60:c1:60:bb:b6:bd:b6:5e:b0:2e:b9:c4:b5:75: a7:75:5c:df:05:69:70:41:58:6b:a1:68:bf:94:56: ba:f8:3f:b0:85:77:72:c9:61:d8:4c:d8:19:52:b3: 27:0e:bb:0f:17:1b:89:a8:8b:68:72:06:8d:bb:cc: 53:ce:bb:4b:61:81:d1:45:fc:c7:98:2a:59:5b:81: 75:3c:1e:b0:12:a1:b1:82:4e:43:03:23:77:7a:1a: 78:dd:b1:7d:36:50:11:81:09:be:b1:b6:cb:e2:fb: d2:91:e2:ea:47:98:01:b5:22:c6:fc:06:a0:b0:6b: 3d:41:ee:b6:29:d8:3d:7b:6c:fb:59:1b:35:cf:b2: b9:91:cf:f4:c1:15:b0:02:07:36:11:ff:80:46:2c: 78:3d:e7:b2:18:8b:49:6c:44:50:66:99:7a:44:c7: 78:9d:6e:42:0a:cf:40:c7:7c:29:69:db:80:6e:7a: f9:ea:44:99:9e:3f:cb:08:00:5d:c3:d7:d2:7e:6a: a5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:03:22:D4:ED:68:71:6F:42:9B:CE:60:C5:36:DD:C1:67:24:23:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:01:a5:c4:0f:b9:54:7e:42:ba:9a:11:50:6f:20:9f:19:06: 4b:d6:ca:03:6e:2b:29:bd:45:e2:7d:b4:c8:11:da:f3:d1:4f: 41:d5:ad:8a:12:92:e6:b7:e2:3b:de:ea:12:f5:62:6a:65:a3: 6b:1f:ab:ae:2d:ca:b4:b9:0b:7d:5f:b8:7a:0e:2b:37:e0:aa: 74:10:a8:4b:85:b5:ce:94:4c:a6:e8:58:57:9c:91:af:3e:ae: cd:c9:d7:17:df:1f:3f:cb:2e:b1:20:ed:2f:40:1c:75:87:56: 23:e2:14:ad:68:83:c6:91:b0:6f:fc:29:6c:89:76:43:cf:28: 24:b1:b8:07:92:f5:a8:a8:99:73:0a:35:74:1f:66:18:fa:8c: 69:47:6b:6b:1d:c8:f1:d6:12:2b:25:58:87:9e:2d:56:39:e7: f3:fe:dd:00:0d:fe:aa:a7:f4:cf:dc:01:fe:db:35:e9:79:92: 3b:55:cf:fa:39:73:38:d6:21:59:82:8f:f6:3b:92:a9:90:e1: e6:42:39:bd:95:2d:1a:5c:24:39:ac:f4:34:ae:c8:32:59:05: 71:4a:9a:65:ef:49:74:62:6a:a6:67:5d:5c:04:d7:c3:a8:29: 58:71:17:b2:65:59:bd:85:40:59:20:44:db:2e:e4:94:a2:f6: f8:db:bb:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNn690v24O8HAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZWYxYzYxNjAtYTU0Ny00OWUwLWE5NTYtNjhiNjk5ZDI0NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmKLcUS2EObaUmphgDqQ1E0PnfBxozURhDpG /Tkx2LkzgVR4gKWx6Wq1XdffR4TOIb5fvSFSzUDvYzUeYMFgu7a9tl6wLrnEtXWn dVzfBWlwQVhroWi/lFa6+D+whXdyyWHYTNgZUrMnDrsPFxuJqItocgaNu8xTzrtL YYHRRfzHmCpZW4F1PB6wEqGxgk5DAyN3ehp43bF9NlARgQm+sbbL4vvSkeLqR5gB tSLG/AagsGs9Qe62Kdg9e2z7WRs1z7K5kc/0wRWwAgc2Ef+ARix4PeeyGItJbERQ Zpl6RMd4nW5CCs9Ax3wpaduAbnr56kSZnj/LCABdw9fSfmqlBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcDItTtaHFvQpvOYMU23cFnJCPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmJmNWY5ZDktNDgyMS0z NmQ0LTlkMzktYjU2MDA4MzZmNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYBpcQPuVR+QrqaEVBvIJ8ZBkvWygNuKym9ReJ9tMgR2vPRT0HVrYoS kua34jve6hL1Ymplo2sfq64tyrS5C31fuHoOKzfgqnQQqEuFtc6UTKboWFecka8+ rs3J1xffHz/LLrEg7S9AHHWHViPiFK1og8aRsG/8KWyJdkPPKCSxuAeS9aiomXMK NXQfZhj6jGlHa2sdyPHWEislWIeeLVY55/P+3QAN/qqn9M/cAf7bNel5kjtVz/o5 czjWIVmCj/Y7kqmQ4eZCOb2VLRpcJDms9DSuyDJZBXFKmmXvSXRiaqZnXVwE18Oo KVhxF7JlWb2FQFkgRNsu5JSi9vjbuyE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:31 2025 by rpki-client