$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0737053e-040f-3b36-83d1-d5cd446d4b87.roa File: 0737053e-040f-3b36-83d1-d5cd446d4b87.roa (raw, json) Hash identifier: 99ExxuwrcLgS0lmItn4UexqXW8+Va04cVAjXPNVIbto= Subject key identifier: D1:86:BA:F4:B8:3A:40:29:A6:D4:F4:2E:79:3A:54:5B:51:44:7E:F6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858499F24C5DFB4003DDEBE41D300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0737053e-040f-3b36-83d1-d5cd446d4b87.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 54113 IP address blocks: 157.5.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c5:df:b4:00:3d:de:be:41:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=26459873-f918-4a56-bca7-b315d3a61e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:1e:76:b2:16:1a:67:b3:c6:03:67:3a:17: fa:9f:3a:0b:26:13:ca:5d:24:44:aa:2e:09:89:d9: 76:df:5c:aa:1f:e8:88:fb:05:c7:af:d6:b7:e4:a8: 8b:6c:51:b3:dd:9a:72:3c:19:1e:e2:ab:73:07:8a: 4a:2c:5f:3f:c5:d8:eb:f2:42:4b:92:c5:6e:af:e0: 28:cf:7d:7a:9c:e2:35:56:aa:9d:d1:ec:41:83:c0: af:2b:46:54:9b:08:b9:b5:a9:aa:d8:46:6d:8e:87: ba:d4:d5:29:b6:b3:73:1e:c7:3b:b6:09:95:28:b3: 71:2d:5c:04:b2:e9:da:3e:da:08:59:5c:cd:49:0a: b7:27:d6:1c:3f:b0:fa:2a:40:32:8b:5a:b7:21:bd: 9c:ea:2c:e5:f7:c2:c2:df:9d:7a:47:8a:07:58:bf: 2b:35:b3:66:e0:a9:d6:7d:11:68:04:77:96:a1:4f: 2f:ca:70:f6:d4:a1:00:35:08:24:7e:41:1f:8a:8a: 1d:2b:4e:72:65:8c:e6:58:55:06:4d:7c:2f:ae:b1: 43:24:86:90:cb:85:18:4a:20:e7:60:fa:21:f2:cd: 92:81:cf:2f:01:1b:67:6b:ee:b9:f1:86:b4:2f:02: f4:87:bd:e0:c1:32:1b:ed:80:a4:23:ac:7a:98:6a: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:BA:F4:B8:3A:40:29:A6:D4:F4:2E:79:3A:54:5B:51:44:7E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0737053e-040f-3b36-83d1-d5cd446d4b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:84:4d:26:d4:a2:5c:fe:29:e4:7a:15:4e:14:c7:e7:dc:67: 8b:17:f5:5f:11:cc:6d:53:9b:b6:7d:53:49:79:32:5c:4c:60: c1:be:ae:b9:33:40:44:9f:e2:e2:fa:50:17:72:c2:a1:ea:14: 72:7c:6d:c3:57:b7:f7:02:b1:35:1b:a0:31:39:2d:3d:4d:df: 86:c9:ba:63:86:69:54:6b:85:18:0c:5d:96:76:c2:60:f0:93: 8a:a5:f3:55:63:92:8c:17:ff:2a:5c:69:6a:0f:6c:7c:af:e0: 96:91:81:fa:0f:92:74:89:96:b2:4b:4e:13:93:ac:47:54:b8: 62:4e:d8:f9:3b:6e:c3:71:a4:7f:ae:d7:0a:93:ae:77:6a:a4: 31:80:7a:60:77:a2:06:a7:9b:41:07:30:fd:57:11:2b:39:53: 25:54:21:a8:75:20:63:ca:32:ff:4c:37:52:18:f4:85:ab:31: 6c:d5:c3:c4:b6:c0:7f:c9:37:14:47:a3:48:cc:1a:c4:9e:7b: ee:de:cc:42:02:5d:11:3f:fa:82:dd:f1:46:ae:2a:3f:82:b9: f5:bd:2a:1e:09:4e:fe:d6:da:7a:5e:d0:6e:af:a7:d6:3e:6b: 0b:b3:f2:f0:5a:d7:da:58:fd:e9:ab:ed:d2:50:01:aa:24:f5: 19:4b:36:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMXftAA93r5B0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MjY0NTk4NzMtZjkxOC00YTU2LWJjYTctYjMxNWQzYTYxZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlagedrIWGmezxgNnOhf6nzoLJhPKXSREqi4J idl231yqH+iI+wXHr9a35KiLbFGz3ZpyPBke4qtzB4pKLF8/xdjr8kJLksVur+Ao z316nOI1Vqqd0exBg8CvK0ZUmwi5tamq2EZtjoe61NUptrNzHsc7tgmVKLNxLVwE sunaPtoIWVzNSQq3J9YcP7D6KkAyi1q3Ib2c6izl98LC3516R4oHWL8rNbNm4KnW fRFoBHeWoU8vynD21KEANQgkfkEfioodK05yZYzmWFUGTXwvrrFDJIaQy4UYSiDn YPoh8s2Sgc8vARtna+658Ya0LwL0h73gwTIb7YCkI6x6mGpacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGGuvS4OkApptT0Lnk6VFtRRH72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDczNzA1M2UtMDQwZi0z YjM2LTgzZDEtZDVjZDQ0NmQ0Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6ETSbUolz+KeR6FU4Ux+fcZ4sX9V8RzG1Tm7Z9U0l5MlxMYMG+rrkz QESf4uL6UBdywqHqFHJ8bcNXt/cCsTUboDE5LT1N34bJumOGaVRrhRgMXZZ2wmDw k4ql81VjkowX/ypcaWoPbHyv4JaRgfoPknSJlrJLThOTrEdUuGJO2Pk7bsNxpH+u 1wqTrndqpDGAemB3oganm0EHMP1XESs5UyVUIah1IGPKMv9MN1IY9IWrMWzVw8S2 wH/JNxRHo0jMGsSee+7ezEICXRE/+oLd8UauKj+CufW9Kh4JTv7W2npe0G6vp9Y+ awuz8vBa19pY/emr7dJQAaok9RlLNsM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:38 2025 by rpki-client