$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa File: 1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa (raw, json) Hash identifier: z1P5GvVTlUgyhwZcClJJNXk2zA9rna7WvmS6d6rSkUQ= Subject key identifier: B0:F9:7D:29:9B:F6:A4:75:C7:57:23:9B:B6:C6:D6:C0:6A:9B:3A:A7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E5336F397C3BCF9FFA20 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e5:33:6f:39:7c:3b:cf:9f:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=65bef76e-36a6-4acf-8496-d19cc247a6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ee:7f:da:ca:54:fd:ea:4f:b7:b0:d4:02:db: 2e:4b:c3:ac:c8:64:89:d5:e0:c8:b8:f2:ad:07:de: 36:73:67:b7:3e:68:64:83:4d:0c:41:d4:88:e8:3a: be:40:41:d5:c1:e0:41:3d:f6:c2:29:50:e5:00:b5: 7a:c8:67:fa:d0:7b:b4:80:61:cc:cf:3f:9f:a8:4c: ab:94:a6:cb:6e:66:f5:72:d0:b5:53:35:b1:c3:25: 21:ab:a3:7d:53:a4:23:d6:6b:f0:4f:15:28:60:89: f9:c9:c5:22:1c:d1:61:3b:6e:d4:14:49:c9:16:bb: 6d:8d:66:ed:db:74:72:44:51:57:b2:00:3f:c8:7e: d8:a3:71:e4:04:30:2a:70:20:a6:61:be:9c:d0:96: 4a:2d:3b:6d:e3:5d:b2:ad:c8:96:04:7e:40:05:22: 02:97:33:cf:a1:d2:49:92:3a:33:88:4c:02:42:92: 45:44:46:10:66:e5:08:37:59:be:b2:34:cc:e4:7e: 6d:44:aa:c7:33:a3:22:3b:33:4e:d7:62:e4:77:a8: 06:2a:2b:1b:16:66:c9:a0:6e:fa:69:ae:93:34:e1: a3:30:be:e7:6f:32:54:3f:bc:de:bd:00:ca:a0:4c: 03:87:40:9f:ad:f2:ac:96:1a:1d:9d:15:5d:9f:1e: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F9:7D:29:9B:F6:A4:75:C7:57:23:9B:B6:C6:D6:C0:6A:9B:3A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:72:0a:04:e1:7e:0d:35:f7:a5:45:1d:c3:2b:5c:d5:c4:b7: e8:9a:da:22:a4:70:25:1a:a7:46:e4:41:8a:91:69:fd:b5:5d: 2d:10:d4:cc:b6:00:19:7b:9f:2c:c4:bc:97:94:ca:63:4c:da: 81:e6:78:71:c0:d0:22:8c:9d:23:ab:08:76:9c:01:a5:a6:b9: d1:27:72:a8:03:83:1e:60:22:3e:10:49:8f:97:b3:79:75:e3: 1d:16:c5:83:db:ac:03:4b:5d:44:63:ce:ad:a8:6c:88:9e:e5: 54:55:12:94:23:d5:8b:37:87:72:be:d1:5d:6a:5f:59:42:73: 9f:c6:34:98:46:f8:34:c8:ff:d8:05:d9:7c:a0:8e:79:09:c2: 4b:50:e9:35:c5:c7:8e:ed:b7:22:cf:0e:65:e8:82:d0:d8:b4: b2:80:3f:8f:c5:94:28:c7:3d:a5:f8:13:f1:90:0e:bf:c0:f8: 1c:dd:d1:e9:92:d5:6d:13:2e:01:81:90:cd:bb:20:86:0e:5f: d6:58:c6:9d:5d:e9:83:6c:a5:5d:83:cd:25:b7:2e:8f:37:5f: 08:cb:73:aa:d6:e2:50:ab:28:3d:41:10:fe:89:9d:73:75:28: c4:2a:0b:73:1b:fe:23:e7:ed:bd:ed:e9:e9:72:ed:b5:47:83: d1:d9:5c:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eUzbzl8O8+f+iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NjViZWY3NmUtMzZhNi00YWNmLTg0OTYtZDE5Y2MyNDdhNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO5/2spU/epPt7DUAtsuS8OsyGSJ1eDIuPKt B942c2e3Pmhkg00MQdSI6Dq+QEHVweBBPfbCKVDlALV6yGf60Hu0gGHMzz+fqEyr lKbLbmb1ctC1UzWxwyUhq6N9U6Qj1mvwTxUoYIn5ycUiHNFhO27UFEnJFrttjWbt 23RyRFFXsgA/yH7Yo3HkBDAqcCCmYb6c0JZKLTtt412yrciWBH5ABSIClzPPodJJ kjoziEwCQpJFREYQZuUIN1m+sjTM5H5tRKrHM6MiOzNO12Lkd6gGKisbFmbJoG76 aa6TNOGjML7nbzJUP7zevQDKoEwDh0CfrfKslhodnRVdnx4u+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD5fSmb9qR1x1cjm7bG1sBqmzqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTc1N2Q0YzgtODcwZS0z YTk0LTg5NzgtMGNmOWFhODcyZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACByCgThfg0196VFHcMrXNXEt+ia2iKkcCUap0bkQYqRaf21XS0Q1My2 ABl7nyzEvJeUymNM2oHmeHHA0CKMnSOrCHacAaWmudEncqgDgx5gIj4QSY+Xs3l1 4x0WxYPbrANLXURjzq2obIie5VRVEpQj1Ys3h3K+0V1qX1lCc5/GNJhG+DTI/9gF 2XygjnkJwktQ6TXFx47ttyLPDmXogtDYtLKAP4/FlCjHPaX4E/GQDr/A+Bzd0emS 1W0TLgGBkM27IIYOX9ZYxp1d6YNspV2DzSW3Lo83XwjLc6rW4lCrKD1BEP6JnXN1 KMQqC3Mb/iPn7b3t6ely7bVHg9HZXC4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:15 2025 by rpki-client