$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2378e806-8300-32e8-a238-5007df3842ee.roa File: 2378e806-8300-32e8-a238-5007df3842ee.roa (raw, json) Hash identifier: eeSJpvEUL0GaGBRgGd7kqtYifUwK/Qn0SCPkDGjTzNU= Subject key identifier: 60:0F:01:15:A3:5A:40:E4:4F:53:71:95:20:6C:A7:F8:4C:96:0A:39 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858499F24C6E136E5950EB9636F00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2378e806-8300-32e8-a238-5007df3842ee.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 54113 IP address blocks: 157.5.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c6:e1:36:e5:95:0e:b9:63:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3d9da426-81a9-4045-9858-482aa1cbe0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:0e:8f:9a:44:fb:03:e7:77:80:c4:f5:4a: 32:5c:1d:53:7c:7c:cf:bd:bb:d1:d3:25:fc:87:8c: 24:ea:85:bf:ba:c6:1a:de:4a:e0:37:4d:f4:f1:a0: 25:36:c8:58:18:b8:c0:4c:ca:98:43:ea:cc:c0:38: c1:55:d2:4d:35:fc:83:3a:05:cf:f7:62:64:7b:3b: ef:0f:32:d6:e1:d0:6d:d3:ce:5f:79:a2:fd:e3:e0: 53:79:ce:ea:50:48:c2:0d:48:c9:10:f0:21:c2:1b: d1:7b:f3:ca:1d:43:da:d0:1d:fb:40:b7:cc:ae:28: 7a:e0:c7:eb:96:f8:d5:0e:a2:71:f0:a1:ac:d7:66: 2a:f5:3b:ce:ee:77:26:a3:cb:39:93:c2:51:c1:51: 26:23:2d:e7:61:20:13:64:88:19:e6:fe:11:4c:12: 4d:1f:59:71:a2:db:07:21:d6:64:6e:87:85:58:c8: 27:38:e3:52:1b:41:1f:f2:99:7f:b3:b6:33:a7:3f: a4:43:44:7b:07:99:81:86:c4:e1:ab:b5:fe:3d:08: 73:61:43:e8:55:af:fa:72:1d:4c:67:95:5f:a7:fc: 80:8a:0c:ae:5f:6f:47:43:64:04:bd:36:49:e0:2e: c4:ab:8d:d5:b4:19:0f:80:09:21:ee:d6:d6:c8:fb: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0F:01:15:A3:5A:40:E4:4F:53:71:95:20:6C:A7:F8:4C:96:0A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2378e806-8300-32e8-a238-5007df3842ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ab:c5:91:5b:30:9b:9c:87:d6:dd:64:b4:05:c6:82:e6:b2: 59:f1:40:d5:6d:32:a5:93:36:eb:e5:48:15:54:c3:e9:5c:69: 01:0c:d5:dc:d8:bf:f9:f3:35:f9:85:62:c4:95:05:8a:01:2c: f5:40:cb:f4:5c:fb:0d:5a:9c:f1:df:68:3b:0d:5e:09:9c:7a: 24:d8:fd:dc:69:e3:7c:cd:78:bd:24:3c:44:e6:c9:c0:2d:c1: ff:00:a6:49:d2:f2:67:47:2e:6e:c8:f5:cb:75:80:e3:97:cf: 34:6a:65:42:aa:66:0f:ff:69:4e:dd:b8:19:49:1b:e5:ec:ee: 83:c2:94:84:56:b4:26:d1:2b:d8:06:b6:1d:ac:fe:96:ea:5c: c2:b1:9e:90:32:03:f2:3c:06:52:27:8c:d2:e8:bc:80:50:51: 4f:a9:90:e4:08:8b:22:06:7f:60:eb:e7:94:aa:ef:84:c1:c2: de:2e:84:64:dc:94:d6:0c:d3:17:39:fe:79:f6:c4:3c:77:e3: 3d:cc:63:5f:5a:1e:66:74:dd:c6:24:a1:31:45:93:aa:46:cf: c0:73:c0:26:33:56:d4:7f:bc:6d:35:87:83:30:0f:60:45:f4: 15:26:9c:6e:36:04:1c:40:a9:61:74:24:d5:05:61:d7:1c:bd: 42:a1:14:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMbhNuWVDrljbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2Q5ZGE0MjYtODFhOS00MDQ1LTk4NTgtNDgyYWExY2JlMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA0Oj5pE+wPnd4DE9UoyXB1TfHzPvbvR0yX8 h4wk6oW/usYa3krgN0308aAlNshYGLjATMqYQ+rMwDjBVdJNNfyDOgXP92Jkezvv DzLW4dBt085feaL94+BTec7qUEjCDUjJEPAhwhvRe/PKHUPa0B37QLfMrih64Mfr lvjVDqJx8KGs12Yq9TvO7ncmo8s5k8JRwVEmIy3nYSATZIgZ5v4RTBJNH1lxotsH IdZkboeFWMgnOONSG0Ef8pl/s7Yzpz+kQ0R7B5mBhsThq7X+PQhzYUPoVa/6ch1M Z5Vfp/yAigyuX29HQ2QEvTZJ4C7Eq43VtBkPgAkh7tbWyPs23wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAPARWjWkDkT1NxlSBsp/hMlgo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjM3OGU4MDYtODMwMC0z MmU4LWEyMzgtNTAwN2RmMzg0MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKrxZFbMJuch9bdZLQFxoLmslnxQNVtMqWTNuvlSBVUw+lcaQEM1dzY v/nzNfmFYsSVBYoBLPVAy/Rc+w1anPHfaDsNXgmceiTY/dxp43zNeL0kPETmycAt wf8ApknS8mdHLm7I9ct1gOOXzzRqZUKqZg//aU7duBlJG+Xs7oPClIRWtCbRK9gG th2s/pbqXMKxnpAyA/I8BlInjNLovIBQUU+pkOQIiyIGf2Dr55Sq74TBwt4uhGTc lNYM0xc5/nn2xDx34z3MY19aHmZ03cYkoTFFk6pGz8BzwCYzVtR/vG01h4MwD2BF 9BUmnG42BBxAqWF0JNUFYdccvUKhFBM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:03 2025 by rpki-client