$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2753b1f5-1d09-3a2d-b4e7-83b9dae4f21c.roa File: 2753b1f5-1d09-3a2d-b4e7-83b9dae4f21c.roa (raw, json) Hash identifier: XkBX/6+lonHrVi8qvCyu56FV+ZIdiDcDK1x4N46FtxU= Subject key identifier: 75:E3:ED:50:9D:F9:F9:D8:10:97:24:06:BA:49:3D:41:41:7E:06:77 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E544C593791EE751CE48 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2753b1f5-1d09-3a2d-b4e7-83b9dae4f21c.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e5:44:c5:93:79:1e:e7:51:ce:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=3d1a73e5-9c67-4ca3-ae93-2099ef913740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:d4:db:4a:05:15:0c:e3:ac:8e:5b:b1:e6: 30:d5:37:1b:ea:83:00:d5:07:9a:ac:00:a2:45:63: db:95:0b:90:34:29:b3:43:20:61:2d:a8:98:5e:61: 3a:bb:86:1b:64:ca:9b:f2:ba:e2:9f:ab:01:2f:ee: d3:e6:53:c3:24:d2:23:69:87:54:33:ea:04:28:44: a7:e0:68:b4:b3:b1:db:80:59:43:b4:54:26:14:9e: 57:7f:15:69:3d:4f:b3:32:a2:c3:a4:b0:0c:b5:94: 52:6e:c6:cd:9d:15:57:32:21:c4:c7:fb:7a:cb:22: b0:45:2d:a1:3f:42:b4:c8:6e:a2:60:f9:48:30:d1: c5:e2:73:1b:88:9a:8d:1d:83:3d:f8:7e:53:51:b0: 8c:c4:c1:86:b8:1e:ab:f0:6d:ae:8b:6f:e8:8e:92: 04:ac:c0:63:7c:45:ad:68:81:ec:4b:fb:b6:f9:1e: ed:7d:86:4b:ad:ff:9b:9e:18:b5:10:6b:00:80:5b: b0:50:d2:40:4e:23:8d:2e:02:d7:d5:27:ac:c9:f8: f8:c0:11:83:90:7d:6c:cf:79:bc:af:94:04:a6:96: ef:21:35:37:47:1b:4d:45:02:b0:6b:04:ef:92:1a: d9:f7:75:4b:ff:25:6a:99:84:c1:1d:43:b1:62:ac: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E3:ED:50:9D:F9:F9:D8:10:97:24:06:BA:49:3D:41:41:7E:06:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2753b1f5-1d09-3a2d-b4e7-83b9dae4f21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9b:39:ec:20:71:22:db:b7:91:fb:f8:aa:e1:01:4d:23:2a: b2:2a:94:4a:1b:05:c8:6f:db:31:f4:82:31:3f:dc:55:39:62: 5e:1c:1b:53:52:85:ec:7b:c9:b6:13:53:16:b7:ca:c2:3a:84: 83:40:03:a6:e8:6a:0c:1a:7a:b6:cd:4e:84:9c:03:e0:62:d7: 3f:6d:de:f6:99:65:9e:37:1a:a9:1f:76:ad:3a:4a:6f:59:ab: d4:f6:89:70:24:a6:f1:0e:ae:05:02:02:67:c9:2c:a1:91:cb: ea:32:f2:61:86:48:5d:19:00:62:55:dd:c1:39:7b:20:03:cf: 87:41:aa:a5:98:9f:0b:ec:ed:79:0b:18:c8:63:b1:f6:85:e3: 6a:8d:d1:7e:da:7b:0f:b8:f0:de:99:0e:9e:05:30:db:d2:c4: 87:27:4f:0b:ca:2b:99:39:ed:d4:f5:6d:f1:e5:ce:80:3b:1d: b8:be:5b:88:b6:08:f3:f7:46:c4:36:db:4d:30:f3:c9:f1:e3: 10:af:35:75:5a:85:8e:ac:70:e9:fa:ce:c1:d2:6a:e0:89:0f: 42:6f:50:9f:3c:ec:07:93:e0:ba:85:46:5c:81:6a:37:db:9f: 8e:6a:ca:c3:4b:15:0f:a7:ff:66:56:15:ed:45:da:4a:f3:c2: ba:de:bf:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eVExZN5HudRzkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk M2QxYTczZTUtOWM2Ny00Y2EzLWFlOTMtMjA5OWVmOTEzNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3zU20oFFQzjrI5bseYw1Tcb6oMA1QearACi RWPblQuQNCmzQyBhLaiYXmE6u4YbZMqb8rrin6sBL+7T5lPDJNIjaYdUM+oEKESn 4Gi0s7HbgFlDtFQmFJ5XfxVpPU+zMqLDpLAMtZRSbsbNnRVXMiHEx/t6yyKwRS2h P0K0yG6iYPlIMNHF4nMbiJqNHYM9+H5TUbCMxMGGuB6r8G2ui2/ojpIErMBjfEWt aIHsS/u2+R7tfYZLrf+bnhi1EGsAgFuwUNJATiONLgLX1Sesyfj4wBGDkH1sz3m8 r5QEppbvITU3RxtNRQKwawTvkhrZ93VL/yVqmYTBHUOxYqxQUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXj7VCd+fnYEJckBrpJPUFBfgZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjc1M2IxZjUtMWQwOS0z YTJkLWI0ZTctODNiOWRhZTRmMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmbOewgcSLbt5H7+KrhAU0jKrIqlEobBchv2zH0gjE/3FU5Yl4cG1NS hex7ybYTUxa3ysI6hINAA6boagwaerbNToScA+Bi1z9t3vaZZZ43Gqkfdq06Sm9Z q9T2iXAkpvEOrgUCAmfJLKGRy+oy8mGGSF0ZAGJV3cE5eyADz4dBqqWYnwvs7XkL GMhjsfaF42qN0X7aew+48N6ZDp4FMNvSxIcnTwvKK5k57dT1bfHlzoA7Hbi+W4i2 CPP3RsQ2200w88nx4xCvNXVahY6scOn6zsHSauCJD0JvUJ887AeT4LqFRlyBajfb n45qysNLFQ+n/2ZWFe1F2krzwrrev34= -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:24 2025 by rpki-client