$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa File: d2001e7d-c16b-3759-984b-235a50540d9b.roa (raw, json) Hash identifier: I8ujOfDPN4GoSOIykIx1nTq8IRKYB2CoG1AjWKOsbMQ= Subject key identifier: 95:E0:E8:D7:F5:65:61:24:85:29:91:5D:EA:5A:42:27:BE:9C:30:82 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E3F9966881BD0048A580 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e3:f9:96:68:81:bd:00:48:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=69fb0e04-94dd-4963-a8cf-acb90454df74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:dd:ee:9d:4e:15:4d:cb:6d:ee:8e:f9:6c: 8b:e3:5c:be:fd:4f:b9:fe:d3:9a:9d:4d:8b:5f:b4: e7:32:0d:04:a7:65:cc:ef:fe:2a:8b:07:78:0b:cb: ab:53:3e:9e:4a:dc:07:54:f7:ab:c1:39:12:e3:06: 81:3a:79:7c:f7:c5:48:ba:76:f3:6b:0d:71:b0:dc: 86:1b:18:dc:dd:46:84:af:4c:ef:b2:92:e6:6f:bf: ec:93:fa:de:8c:ec:77:27:45:50:35:04:67:b0:7a: c5:28:fb:0b:c2:1a:53:16:57:7e:f0:db:cf:ec:96: 2c:c8:a7:b0:91:92:51:62:5c:47:50:84:93:ff:3c: b5:3e:c5:92:51:27:27:56:bd:7f:46:53:ce:73:8f: 93:64:d6:9d:16:b1:b3:2a:d0:4b:9d:8d:4a:bd:d1: 8a:fc:57:5d:d8:70:95:b3:23:66:1a:b4:14:56:b3: ed:ae:fe:e9:de:9a:f6:07:73:00:9a:94:21:1e:f4: 2c:41:cd:64:c3:21:8b:52:91:8b:5d:1f:ca:12:8f: 1f:8f:79:a6:ab:87:54:e7:40:7c:17:a6:47:e4:fc: 14:9c:92:5b:6b:9e:ac:c1:ad:7f:09:31:c9:e2:77: 97:62:65:c0:d5:1b:74:05:82:9f:9f:a7:2d:41:57: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E0:E8:D7:F5:65:61:24:85:29:91:5D:EA:5A:42:27:BE:9C:30:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bf:c0:31:fe:0f:13:43:ad:fa:fa:80:0f:a2:89:0c:8d:c9: 4c:1e:1d:9e:0d:e2:74:d4:57:15:50:95:be:d9:03:10:ee:1c: 5b:b0:2e:ad:83:cf:a8:17:6c:d3:3b:ac:83:f2:0e:eb:b9:d7: fa:31:16:94:bf:59:14:87:e4:67:a5:d5:9a:2f:4e:e1:24:67: b9:a8:31:d2:b9:5a:87:c0:d1:1c:77:f1:1c:5f:5c:fe:58:1a: 40:f2:04:09:a4:dd:47:55:98:a6:23:c2:5a:99:86:dd:99:a7: ae:2b:15:b5:48:43:eb:08:b0:94:f4:69:2a:69:fe:98:35:21: 07:a6:94:1c:cf:52:cb:36:e8:02:f3:df:0f:b3:56:c8:4d:5d: 82:87:18:db:f1:30:0f:8c:de:f5:73:0f:62:0b:2a:2f:e4:02: 67:2e:a4:10:2d:ba:e0:8b:92:dc:28:e6:cf:26:c6:20:9b:ea: 14:9a:1c:65:76:78:33:59:fb:83:11:6b:55:51:7e:05:f8:49: e5:a4:b9:72:3e:2c:3c:58:5b:24:56:a8:88:d5:78:00:fe:8c: fa:e4:36:00:7c:91:64:2f:5e:51:f0:99:53:ba:ea:13:02:bb: 62:4e:49:05:7c:a8:23:e6:4c:71:b9:e2:8d:0c:8d:13:dd:41: 44:af:59:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eP5lmiBvQBIpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NjlmYjBlMDQtOTRkZC00OTYzLWE4Y2YtYWNiOTA0NTRkZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkprd7p1OFU3Lbe6O+WyL41y+/U+5/tOanU2L X7TnMg0Ep2XM7/4qiwd4C8urUz6eStwHVPerwTkS4waBOnl898VIunbzaw1xsNyG Gxjc3UaEr0zvspLmb7/sk/rejOx3J0VQNQRnsHrFKPsLwhpTFld+8NvP7JYsyKew kZJRYlxHUIST/zy1PsWSUScnVr1/RlPOc4+TZNadFrGzKtBLnY1KvdGK/Fdd2HCV syNmGrQUVrPtrv7p3pr2B3MAmpQhHvQsQc1kwyGLUpGLXR/KEo8fj3mmq4dU50B8 F6ZH5PwUnJJba56swa1/CTHJ4neXYmXA1Rt0BYKfn6ctQVc1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXg6Nf1ZWEkhSmRXepaQie+nDCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDIwMDFlN2QtYzE2Yi0z NzU5LTk4NGItMjM1YTUwNTQwZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu/wDH+DxNDrfr6gA+iiQyNyUweHZ4N4nTUVxVQlb7ZAxDuHFuwLq2D z6gXbNM7rIPyDuu51/oxFpS/WRSH5Gel1ZovTuEkZ7moMdK5WofA0Rx38RxfXP5Y GkDyBAmk3UdVmKYjwlqZht2Zp64rFbVIQ+sIsJT0aSpp/pg1IQemlBzPUss26ALz 3w+zVshNXYKHGNvxMA+M3vVzD2ILKi/kAmcupBAtuuCLktwo5s8mxiCb6hSaHGV2 eDNZ+4MRa1VRfgX4SeWkuXI+LDxYWyRWqIjVeAD+jPrkNgB8kWQvXlHwmVO66hMC u2JOSQV8qCPmTHG54o0MjRPdQUSvWcM= -----END CERTIFICATE-----Generated at Thu May 8 14:22:04 2025 by rpki-client