$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa File: 1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa (raw, json) Hash identifier: ita3UyhRLW2MsrS/Ymr2W91TTuiJ1zNroF8RGPahLb0= Subject key identifier: 55:AF:E5:DE:DE:07:10:94:09:84:E6:5C:CA:AD:CB:9A:DC:E1:0E:07 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E5C3A82770D86B66A980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e5:c3:a8:27:70:d8:6b:66:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=0fa59c06-8d74-4827-ab18-0946690ca88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:e4:7e:e9:a9:2b:80:33:97:3d:a6:8f:06: 0b:a0:03:29:ef:ce:41:e1:13:95:42:59:4f:86:d6: 93:71:7f:18:0e:07:8b:3c:c9:b7:73:68:bb:59:53: a1:d6:3b:7e:53:95:bc:ce:6e:e3:15:24:cd:b7:59: ec:da:9f:19:6b:2b:c5:fe:37:88:7d:90:78:ad:3d: e9:42:34:da:c5:e1:82:f9:3e:af:49:fe:2a:19:2f: 4e:d1:2c:e2:e0:eb:04:56:25:f7:db:e5:8a:89:13: bd:37:6a:1c:12:f2:30:b2:da:16:81:d1:47:f9:8c: a3:58:d7:dd:3c:29:32:18:fd:c1:da:50:d6:cf:37: 47:e7:7e:db:91:7f:b9:14:89:e6:2e:83:84:f3:9f: be:a8:86:58:72:1f:e9:8e:10:ba:dd:4d:a5:91:0c: 99:e6:fd:7d:86:dd:66:ff:88:ff:c0:04:45:70:78: 5b:ec:c5:6c:75:70:82:4f:bf:d0:04:eb:f9:3e:7c: 25:de:d1:f1:6f:27:6f:51:e3:a6:c9:2c:38:9a:93: fa:79:46:33:db:3f:ec:da:50:1f:b7:65:f2:54:fb: 45:91:62:d5:c7:7a:a6:32:34:d6:e6:b2:04:93:b3: 49:b2:a2:05:fc:88:d6:28:09:33:c5:25:56:77:5c: 13:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AF:E5:DE:DE:07:10:94:09:84:E6:5C:CA:AD:CB:9A:DC:E1:0E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d1:9c:df:05:bf:3a:f7:18:53:7a:0b:db:85:4f:9f:3b:5f: c0:23:4e:4e:d2:ca:18:d3:c2:08:d2:b1:1a:2e:7c:f4:5e:dc: c4:73:15:5d:13:4f:1e:0a:8f:6a:34:b7:a9:7c:3b:4d:c5:50: fc:18:75:26:a5:a6:66:7e:cc:49:ad:57:2d:78:bd:49:c8:d9: 47:de:db:23:4b:f4:79:1e:db:49:a7:4c:f6:73:ca:e3:bd:7f: 32:5b:8a:9a:4f:d2:59:a1:7b:12:2a:57:3e:ed:f1:c1:0d:79: 6d:2b:96:70:9a:a0:64:82:ad:ca:a3:e7:05:2f:e9:21:e1:90: f1:d7:9e:80:67:14:34:de:0a:c0:9b:36:d2:a9:56:b8:f4:3a: c8:cb:3a:b0:27:b9:83:eb:f0:e3:63:51:96:6c:be:8d:16:12: f0:d5:71:4c:83:a2:12:17:00:ec:ea:c7:18:55:1d:0f:e7:16: 95:f9:d2:69:e2:6d:44:43:5a:c3:12:7f:a5:2f:75:c3:5f:25: 70:55:5f:8a:91:e5:ac:73:28:a2:5c:39:3f:3e:bd:14:9b:4e: 39:d0:bf:a8:f7:58:d2:ae:16:e1:c5:1a:09:52:56:81:93:c1: 83:63:b5:73:84:2d:30:e5:12:70:a7:25:9b:f8:44:74:e8:ee: c4:92:fc:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eXDqCdw2GtmqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MGZhNTljMDYtOGQ3NC00ODI3LWFiMTgtMDk0NjY5MGNhODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn3kfumpK4Azlz2mjwYLoAMp785B4ROVQllP htaTcX8YDgeLPMm3c2i7WVOh1jt+U5W8zm7jFSTNt1ns2p8ZayvF/jeIfZB4rT3p QjTaxeGC+T6vSf4qGS9O0Szi4OsEViX32+WKiRO9N2ocEvIwstoWgdFH+YyjWNfd PCkyGP3B2lDWzzdH537bkX+5FInmLoOE85++qIZYch/pjhC63U2lkQyZ5v19ht1m /4j/wARFcHhb7MVsdXCCT7/QBOv5Pnwl3tHxbydvUeOmySw4mpP6eUYz2z/s2lAf t2XyVPtFkWLVx3qmMjTW5rIEk7NJsqIF/IjWKAkzxSVWd1wT7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWv5d7eBxCUCYTmXMqty5rc4Q4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWFiMTE3MmYtY2Q2YS0z MWY2LWE5ZDUtYzQ5NjhkZjliMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/RnN8Fvzr3GFN6C9uFT587X8AjTk7SyhjTwgjSsRoufPRe3MRzFV0T Tx4Kj2o0t6l8O03FUPwYdSalpmZ+zEmtVy14vUnI2Ufe2yNL9Hke20mnTPZzyuO9 fzJbippP0lmhexIqVz7t8cENeW0rlnCaoGSCrcqj5wUv6SHhkPHXnoBnFDTeCsCb NtKpVrj0OsjLOrAnuYPr8ONjUZZsvo0WEvDVcUyDohIXAOzqxxhVHQ/nFpX50mni bURDWsMSf6UvdcNfJXBVX4qR5axzKKJcOT8+vRSbTjnQv6j3WNKuFuHFGglSVoGT wYNjtXOELTDlEnCnJZv4RHTo7sSS/II= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:37 2025 by rpki-client