$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa File: ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa (raw, json) Hash identifier: nQwMJ4eTiF7J3qrzYdPBIW261MWYDQ5XS5WwZ8R/+H4= Subject key identifier: AE:09:A4:EB:E7:33:F2:8C:B5:88:A5:A3:AB:10:D4:71:62:C7:70:C9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848B4C0D94215446FF730C84760 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 54113 IP address blocks: 157.5.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d9:42:15:44:6f:f7:30:c8:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=0d5a7916-a889-4b30-b815-8f933c4e9b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:30:58:3f:f0:7a:0a:7b:e5:48:51:d0:a1: de:f3:c3:56:3c:22:5a:95:f4:6e:a9:98:88:a8:76: 42:4e:7d:7e:9a:da:66:fb:dc:e1:e1:8c:46:57:2d: dd:d9:a3:53:f0:58:43:30:ae:86:de:37:cd:2a:65: 49:ca:94:b4:b5:d4:bd:d3:16:b9:37:88:86:69:27: c3:97:81:00:63:07:cb:76:d0:6f:cc:48:0e:23:38: 18:5d:4b:d1:b5:a1:04:b2:67:c8:b4:3b:b9:42:6a: d7:fc:2f:1d:37:39:8f:da:5a:5d:b4:ff:b0:f1:fc: e5:b3:cd:7a:1b:b2:6a:41:ed:af:74:18:77:a7:b0: 9d:cb:ac:56:8b:bd:ff:c0:c2:58:63:a8:4b:3c:1e: f9:b9:0d:70:02:2f:48:b1:15:c2:63:23:ff:c0:a5: ad:85:bb:fc:79:c7:9a:fa:1e:3c:4c:2f:59:01:89: 8d:49:d9:d2:f0:97:4f:d7:fb:ea:6d:6e:34:41:e4: 5a:6e:cb:b8:75:e2:d7:cd:d1:88:73:dd:06:cc:d8: af:c2:28:7e:0f:ee:ba:bd:2f:9a:96:71:17:40:2c: 5a:e1:62:80:e9:32:b4:64:d4:ea:00:a0:97:37:b8: b5:1e:7f:a5:94:3e:1f:ce:e3:59:4b:62:c9:19:12: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:09:A4:EB:E7:33:F2:8C:B5:88:A5:A3:AB:10:D4:71:62:C7:70:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b1:8b:4b:ee:a9:31:e0:d9:24:d8:c2:78:fd:6b:75:24:48: 3d:87:42:65:b5:e5:fb:1a:a4:f7:61:eb:96:5c:c9:55:41:7f: 40:09:d9:dd:60:f8:81:bf:e4:03:06:bc:e3:99:ec:66:a6:89: b7:3f:5e:33:fc:5f:f8:7a:27:9d:a9:a8:a3:39:fd:c5:0c:8e: ca:f8:08:82:de:dc:4c:c7:fc:f6:03:b6:0d:87:1d:ba:a0:06: 0e:2f:f1:5b:f8:34:70:03:d0:4b:6b:8d:cf:24:47:03:82:96: cc:38:bb:ed:bc:59:ba:ac:9f:f0:5d:10:58:a2:9c:22:ca:64: f3:0b:44:2f:cc:03:35:7e:53:29:2e:d4:cb:75:61:d6:1f:bf: 5a:3d:fb:26:c2:82:24:a7:f4:19:1e:ad:8c:68:43:02:90:6f: 1c:5a:26:d3:10:be:ef:94:9d:ed:12:f7:ea:35:90:5a:19:df: d7:52:b7:49:75:06:90:67:f1:a1:27:9b:10:77:91:ac:20:89: 70:96:dc:77:27:c7:41:bc:1d:34:0a:a7:74:84:d1:2a:d0:3a: dc:a2:2a:af:1d:2e:45:ac:a0:ef:49:df:ed:21:19:dc:1a:53: 5a:a4:c5:af:17:d0:5c:15:b4:86:7f:eb:2e:cc:48:55:f8:d9: bb:2f:e6:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNlCFURv9zDIR2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MGQ1YTc5MTYtYTg4OS00YjMwLWI4MTUtOGY5MzNjNGU5YjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreEwWD/wegp75UhR0KHe88NWPCJalfRuqZiI qHZCTn1+mtpm+9zh4YxGVy3d2aNT8FhDMK6G3jfNKmVJypS0tdS90xa5N4iGaSfD l4EAYwfLdtBvzEgOIzgYXUvRtaEEsmfItDu5QmrX/C8dNzmP2lpdtP+w8fzls816 G7JqQe2vdBh3p7Cdy6xWi73/wMJYY6hLPB75uQ1wAi9IsRXCYyP/wKWthbv8ecea +h48TC9ZAYmNSdnS8JdP1/vqbW40QeRabsu4deLXzdGIc90GzNivwih+D+66vS+a lnEXQCxa4WKA6TK0ZNTqAKCXN7i1Hn+llD4fzuNZS2LJGRLuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4JpOvnM/KMtYilo6sQ1HFix3DJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmZlMjlkYmQtZTMxMC0z NzE1LTg1YWMtMWFiOThlNGNiOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCxi0vuqTHg2STYwnj9a3UkSD2HQmW15fsapPdh65ZcyVVBf0AJ2d1g +IG/5AMGvOOZ7Gamibc/XjP8X/h6J52pqKM5/cUMjsr4CILe3EzH/PYDtg2HHbqg Bg4v8Vv4NHAD0Etrjc8kRwOClsw4u+28Wbqsn/BdEFiinCLKZPMLRC/MAzV+Uyku 1Mt1YdYfv1o9+ybCgiSn9BkerYxoQwKQbxxaJtMQvu+Une0S9+o1kFoZ39dSt0l1 BpBn8aEnmxB3kawgiXCW3Hcnx0G8HTQKp3SE0SrQOtyiKq8dLkWsoO9J3+0hGdwa U1qkxa8X0FwVtIZ/6y7MSFX42bsv5gw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:45 2025 by rpki-client