$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa File: 297a0a3a-3c07-379d-94e5-e4192d35bd92.roa (raw, json) Hash identifier: 8I+/cH7V3VV3QBMfl0yUO8S8lE37TZQe81g3SPVtTms= Subject key identifier: 68:F9:A9:D8:1B:BE:01:DD:41:84:13:19:FE:16:F2:0F:52:A4:C9:BF Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858499F24C5C1DE949E0F355B0CE0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 54113 IP address blocks: 157.5.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c5:c1:de:94:9e:0f:35:5b:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=7abf85e2-88cc-4947-a37b-4c8a03e625a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:06:e2:ff:c2:ed:bb:d9:26:28:60:a3:0b:7d: f4:01:d3:c0:30:a2:b0:91:5a:02:ec:7d:4c:1b:7c: 98:28:ef:51:7b:20:81:8d:1a:a6:52:89:b4:18:5c: 20:22:5c:82:07:4a:d7:6e:05:52:69:e7:9e:2b:12: d9:18:69:b5:16:a1:ac:ba:18:68:f0:15:d7:ab:5d: 02:a4:3f:d6:dd:d5:80:09:5f:4c:68:52:9c:75:20: 44:8f:a7:4d:10:63:0f:ab:d3:0d:63:39:1e:a8:c4: a7:41:e9:92:f6:ac:58:f5:1d:e2:f4:f9:8d:f6:f1: 65:9f:64:15:6c:65:ad:59:e9:0b:6f:2a:8d:0c:ae: 92:f0:05:7f:fb:0e:aa:eb:45:63:93:0d:c6:c8:e7: 3d:ce:8b:6f:e1:bd:95:dc:ea:3b:05:78:f0:da:3c: eb:f7:4e:d6:64:c0:2d:78:8a:4a:e6:79:db:39:7a: c5:4d:9e:5b:d7:e2:47:6c:ad:d7:11:b8:77:8c:d7: 31:28:f3:7c:fb:da:a8:7c:c4:f3:48:d0:c1:9c:80: 5d:49:1e:7a:5b:f9:7b:f0:13:4b:27:6b:01:2c:d7: a9:db:dd:64:28:7a:e3:f4:47:51:e7:be:95:39:17: ac:e4:ab:de:aa:c5:bb:1c:88:5b:66:1f:0f:ab:12: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F9:A9:D8:1B:BE:01:DD:41:84:13:19:FE:16:F2:0F:52:A4:C9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0e:e0:37:3a:ff:eb:e7:53:6c:97:74:bb:4a:ff:61:59:81: b9:66:80:f5:ec:e0:62:8a:9c:4e:7a:55:43:a2:d9:57:a1:ce: 87:88:fa:7a:33:39:78:0d:aa:61:b1:2e:40:e6:69:3b:24:9c: 1a:f8:32:91:f9:cf:93:eb:cb:9c:90:91:ef:6c:f6:ce:5e:4b: e6:73:a1:d5:a4:ba:0d:0f:15:97:a7:5c:44:44:f7:36:54:4e: 2a:ff:f1:70:7c:d9:f7:83:0e:d9:0e:b5:63:08:1c:9d:7a:76: 42:a0:a1:92:16:78:59:6e:ef:72:f5:26:7e:5d:d2:d4:b8:b9: 10:62:9e:cd:b2:b1:12:d4:87:c5:07:8c:5b:19:be:83:f6:aa: 1d:eb:af:46:44:e8:91:81:ff:1b:78:0e:98:13:8e:b1:3a:e7: f0:d4:0b:17:28:d7:e2:16:3b:04:11:8a:2b:f9:66:d2:ef:57: fb:57:27:5a:5b:16:5b:72:97:7f:c9:97:02:38:24:b6:d1:79: 2c:7f:aa:7f:d5:b9:8d:45:a9:e9:7f:53:4b:ec:71:ec:af:40: 84:6a:e9:48:ce:62:35:6c:8f:5c:18:73:83:e1:5e:3d:b0:81: b5:21:b1:e7:fe:9f:be:47:e1:99:dc:15:fd:26:65:0a:71:8b: 24:3a:8e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMXB3pSeDzVbDOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk N2FiZjg1ZTItODhjYy00OTQ3LWEzN2ItNGM4YTAzZTYyNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAbi/8Ltu9kmKGCjC330AdPAMKKwkVoC7H1M G3yYKO9ReyCBjRqmUom0GFwgIlyCB0rXbgVSaeeeKxLZGGm1FqGsuhho8BXXq10C pD/W3dWACV9MaFKcdSBEj6dNEGMPq9MNYzkeqMSnQemS9qxY9R3i9PmN9vFln2QV bGWtWekLbyqNDK6S8AV/+w6q60Vjkw3GyOc9zotv4b2V3Oo7BXjw2jzr907WZMAt eIpK5nnbOXrFTZ5b1+JHbK3XEbh3jNcxKPN8+9qofMTzSNDBnIBdSR56W/l78BNL J2sBLNep291kKHrj9EdR576VORes5KveqsW7HIhbZh8PqxKqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj5qdgbvgHdQYQTGf4W8g9SpMm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjk3YTBhM2EtM2MwNy0z NzlkLTk0ZTUtZTQxOTJkMzViZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYO4Dc6/+vnU2yXdLtK/2FZgblmgPXs4GKKnE56VUOi2VehzoeI+noz OXgNqmGxLkDmaTsknBr4MpH5z5Pry5yQke9s9s5eS+ZzodWkug0PFZenXERE9zZU Tir/8XB82feDDtkOtWMIHJ16dkKgoZIWeFlu73L1Jn5d0tS4uRBins2ysRLUh8UH jFsZvoP2qh3rr0ZE6JGB/xt4DpgTjrE65/DUCxco1+IWOwQRiiv5ZtLvV/tXJ1pb Fltyl3/JlwI4JLbReSx/qn/VuY1Fqel/U0vsceyvQIRq6UjOYjVsj1wYc4PhXj2w gbUhsef+n75H4ZncFf0mZQpxiyQ6jmU= -----END CERTIFICATE-----Generated at Mon Jun 16 00:45:41 2025 by rpki-client