$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4a105c03-cf50-3eee-b311-7de1acf19501.roa File: 4a105c03-cf50-3eee-b311-7de1acf19501.roa (raw, json) Hash identifier: XeDTX6rcE/rg+VwPFo1NhWAa50HF4nYugvSn+MXwS58= Subject key identifier: 40:C3:53:01:38:CB:36:06:5E:D3:12:CB:B3:41:AD:EC:14:33:CC:51 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858499F24C5956BDDC6C67B14FE40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4a105c03-cf50-3eee-b311-7de1acf19501.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 54113 IP address blocks: 157.5.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c5:95:6b:dd:c6:c6:7b:14:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=1dd929f8-bc4c-41aa-a17a-62c0c4be5f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:ea:10:1e:a1:a3:30:8d:6b:9c:8d:fa:73: e2:8a:8d:2a:a4:47:7e:97:c4:d1:ff:b0:c1:7d:97: aa:6a:94:e5:87:10:de:49:0c:99:6b:93:c7:6f:d7: b3:a0:3f:de:05:7b:3f:f4:25:dc:29:03:6c:40:26: a7:f1:4f:ff:18:8b:a6:d5:e6:dc:b0:37:c2:d7:88: fa:92:ea:3e:6b:02:cc:23:40:46:78:3a:db:2a:40: 4f:10:74:ef:b9:5c:fc:7c:ce:56:74:8f:7e:00:3a: 6e:40:c0:cd:a7:e9:ea:7c:2d:cc:cb:1a:d1:4f:d8: 8a:34:3b:10:83:44:6b:94:59:b6:3f:11:33:23:09: a5:0c:4f:91:5c:fd:ca:71:00:49:49:81:33:3b:d5: 33:45:21:76:e5:55:d8:a9:1a:13:3d:fa:f6:3a:d8: e0:1a:de:20:80:a9:25:6d:1e:79:73:ce:e0:49:e0: 0f:3b:e6:f6:82:4f:62:32:7f:49:80:52:63:6b:12: 84:16:5f:0c:cd:d4:6d:86:02:54:b4:1a:34:38:ea: b9:f3:fc:e4:f8:b3:80:ed:f4:c5:fb:48:3e:9b:db: cb:32:48:f7:e4:4e:a7:77:f7:ae:bb:b3:54:20:36: e6:d7:e5:30:03:ac:1c:ba:ed:68:cd:75:b7:57:ff: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:53:01:38:CB:36:06:5E:D3:12:CB:B3:41:AD:EC:14:33:CC:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4a105c03-cf50-3eee-b311-7de1acf19501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c8:11:14:fe:61:c1:41:09:25:4a:7b:11:39:7c:a1:33:8d: ad:77:8e:04:52:83:b1:f6:e8:00:0b:39:8d:ed:85:30:7b:14: e1:e8:19:3a:e1:2b:d6:98:01:a6:0a:d0:29:24:3d:24:db:2c: 3f:21:9e:ee:60:10:62:08:41:80:48:06:25:2b:30:0c:79:e2: ba:eb:e2:08:b4:c1:58:0b:ca:cd:eb:53:ab:86:a3:0c:8d:20: d0:4c:50:b7:ef:56:fd:ae:12:45:72:bd:4e:2f:69:00:ec:cc: 7f:1b:a3:4b:ef:13:9c:ef:1b:1f:3c:b2:85:de:ab:53:13:32: ed:af:89:84:18:3e:ec:13:0b:2f:d5:f2:c6:7e:31:a7:8c:22: 80:45:4a:4c:6b:26:6d:d5:4f:4a:79:69:26:e1:d9:83:e8:8f: aa:0e:85:ec:ee:e2:e8:cb:28:68:d2:ff:e9:78:c2:c2:ab:f2: 84:40:24:cf:75:1c:03:ba:f4:85:c5:3d:ef:32:b3:74:39:87: 48:f0:d3:a6:57:37:88:2e:ff:78:88:f0:e9:ce:3c:b1:b1:96: 23:c0:6b:71:c3:58:b9:7f:0d:d6:d5:fa:cb:da:97:65:b5:af: 83:a7:08:6e:7d:5c:09:d6:88:21:ef:90:8e:fb:a2:74:82:8e: ee:8f:3e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMWVa93GxnsU/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MWRkOTI5ZjgtYmM0Yy00MWFhLWExN2EtNjJjMGM0YmU1ZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO3qEB6hozCNa5yN+nPiio0qpEd+l8TR/7DB fZeqapTlhxDeSQyZa5PHb9ezoD/eBXs/9CXcKQNsQCan8U//GIum1ebcsDfC14j6 kuo+awLMI0BGeDrbKkBPEHTvuVz8fM5WdI9+ADpuQMDNp+nqfC3MyxrRT9iKNDsQ g0RrlFm2PxEzIwmlDE+RXP3KcQBJSYEzO9UzRSF25VXYqRoTPfr2OtjgGt4ggKkl bR55c87gSeAPO+b2gk9iMn9JgFJjaxKEFl8MzdRthgJUtBo0OOq58/zk+LOA7fTF +0g+m9vLMkj35E6nd/euu7NUIDbm1+UwA6wcuu1ozXW3V/+T7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDDUwE4yzYGXtMSy7NBrewUM8xRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGExMDVjMDMtY2Y1MC0z ZWVlLWIzMTEtN2RlMWFjZjE5NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbIERT+YcFBCSVKexE5fKEzja13jgRSg7H26AALOY3thTB7FOHoGTrh K9aYAaYK0CkkPSTbLD8hnu5gEGIIQYBIBiUrMAx54rrr4gi0wVgLys3rU6uGowyN INBMULfvVv2uEkVyvU4vaQDszH8bo0vvE5zvGx88soXeq1MTMu2viYQYPuwTCy/V 8sZ+MaeMIoBFSkxrJm3VT0p5aSbh2YPoj6oOhezu4ujLKGjS/+l4wsKr8oRAJM91 HAO69IXFPe8ys3Q5h0jw06ZXN4gu/3iI8OnOPLGxliPAa3HDWLl/DdbV+sval2W1 r4OnCG59XAnWiCHvkI77onSCju6PPv8= -----END CERTIFICATE-----Generated at Thu May 8 04:21:16 2025 by rpki-client