$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa File: d2001e7d-c16b-3759-984b-235a50540d9b.roa (raw, json) Hash identifier: vq9OaGP6ompw2X+NZliBZ25A1WiSnFZ2egECGm97v7I= Subject key identifier: 36:72:1B:D4:57:7E:0C:35:6E:69:69:78:DD:47:31:43:CE:9A:EB:92 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848B4C0D7367058144BE38FAB00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 54113 IP address blocks: 157.5.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d7:36:70:58:14:4b:e3:8f:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=f7c2a2de-f436-4366-a10a-8ed1642b8b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:92:ac:37:5b:94:90:45:37:80:3e:66:a0: ef:16:5c:40:0e:ab:02:28:ee:23:aa:e5:f4:0f:16: 70:d9:79:c8:2e:97:8d:fc:a4:e9:bd:4c:4b:ae:50: ac:8e:38:c8:54:a2:83:8b:fe:61:6b:6d:46:57:e5: 07:b4:31:23:af:7f:58:cb:30:12:93:95:1a:f1:5a: 98:c5:77:3a:e1:bd:24:d4:9d:bd:62:bb:df:23:3f: e6:cc:9d:53:ed:bc:1a:72:20:a2:ed:ac:07:26:2b: 14:7b:15:21:e3:3d:22:f1:db:b3:0a:25:83:03:59: 66:9b:b7:49:04:47:e0:44:ac:7b:ff:71:d6:70:08: 30:c5:20:73:98:a7:70:ef:94:38:c3:f9:d6:03:bb: 42:8c:3e:0f:5e:37:aa:a8:c5:4d:6c:3e:e5:8f:11: 81:1c:7b:fe:93:06:81:f8:88:20:84:a3:22:88:99: 03:ea:57:07:18:0a:de:c1:63:c5:b1:75:9b:47:6b: d9:ee:f0:21:90:67:2f:09:d9:b9:d6:2f:2c:e2:aa: 7a:60:29:d4:bb:10:ab:df:b1:69:2d:de:2a:78:ce: cb:ad:aa:ae:1c:f0:fc:07:05:4a:24:59:ab:c0:09: 1a:5e:94:30:8e:1d:f3:14:bd:b6:aa:f0:9a:dc:5d: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:72:1B:D4:57:7E:0C:35:6E:69:69:78:DD:47:31:43:CE:9A:EB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ee:8c:01:d3:b3:ed:3b:80:bf:68:42:e2:6e:60:33:72:68: 78:5b:72:0c:18:55:5a:7b:e0:99:50:68:7e:b6:fc:1e:b7:21: b2:3a:69:f5:83:07:9a:fc:29:d0:85:29:d1:9f:0a:57:49:91: 73:8a:9f:53:87:a3:61:1b:23:f7:f0:2c:74:bc:5d:1d:94:b6: 69:c3:ad:54:26:21:56:c7:f3:7d:44:d8:39:e5:30:4c:b7:50: e4:f8:ef:8e:4e:60:4f:8a:32:74:06:a3:99:45:66:5f:e6:57: 21:5e:37:ec:d1:d2:ec:1c:e7:a2:15:26:3f:d7:90:a8:e3:96: fa:22:40:71:1e:8e:e9:a8:97:09:3e:e7:01:22:39:5a:18:0b: bd:62:7d:25:63:c2:9f:c7:eb:80:94:8f:2c:0d:47:02:ad:3f: 8a:77:ce:b3:f6:3e:42:47:f4:9e:50:a7:86:b4:09:7f:31:15: 7b:6a:df:e9:bd:24:97:29:46:ff:b2:ca:23:13:2c:2c:c4:75: ff:74:19:a6:ca:7f:44:8c:fa:3a:ed:db:39:17:5f:84:b6:be: 12:97:3a:f7:dd:b8:5f:08:ad:2e:16:1f:5b:00:9c:87:87:52: fe:69:37:07:01:c9:7f:46:1e:1d:ca:14:63:36:6c:79:b8:7a: 96:1e:23:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNc2cFgUS+OPqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZjdjMmEyZGUtZjQzNi00MzY2LWExMGEtOGVkMTY0MmI4YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaKSrDdblJBFN4A+ZqDvFlxADqsCKO4jquX0 DxZw2XnILpeN/KTpvUxLrlCsjjjIVKKDi/5ha21GV+UHtDEjr39YyzASk5Ua8VqY xXc64b0k1J29YrvfIz/mzJ1T7bwaciCi7awHJisUexUh4z0i8duzCiWDA1lmm7dJ BEfgRKx7/3HWcAgwxSBzmKdw75Q4w/nWA7tCjD4PXjeqqMVNbD7ljxGBHHv+kwaB +IgghKMiiJkD6lcHGArewWPFsXWbR2vZ7vAhkGcvCdm51i8s4qp6YCnUuxCr37Fp Ld4qeM7LraquHPD8BwVKJFmrwAkaXpQwjh3zFL22qvCa3F2MFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZyG9RXfgw1bmlpeN1HMUPOmuuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDIwMDFlN2QtYzE2Yi0z NzU5LTk4NGItMjM1YTUwNTQwZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/ujAHTs+07gL9oQuJuYDNyaHhbcgwYVVp74JlQaH62/B63IbI6afWD B5r8KdCFKdGfCldJkXOKn1OHo2EbI/fwLHS8XR2UtmnDrVQmIVbH831E2DnlMEy3 UOT4745OYE+KMnQGo5lFZl/mVyFeN+zR0uwc56IVJj/XkKjjlvoiQHEejumolwk+ 5wEiOVoYC71ifSVjwp/H64CUjywNRwKtP4p3zrP2PkJH9J5Qp4a0CX8xFXtq3+m9 JJcpRv+yyiMTLCzEdf90GabKf0SM+jrt2zkXX4S2vhKXOvfduF8IrS4WH1sAnIeH Uv5pNwcByX9GHh3KFGM2bHm4epYeI1Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:00 2025 by rpki-client