$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6cb306d9-9156-3e00-90b1-02bb90252102.roa File: 6cb306d9-9156-3e00-90b1-02bb90252102.roa (raw, json) Hash identifier: zXWtwsCEKhOrzp7Z240IYK4TaDbckhhiZl0RuWtHfng= Subject key identifier: B8:8C:06:36:F5:FB:B8:62:D4:7C:0A:16:37:62:09:C8:14:BE:F5:C5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E4A33A68BF15988B0240 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6cb306d9-9156-3e00-90b1-02bb90252102.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e4:a3:3a:68:bf:15:98:8b:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=1a2b3aa2-a187-44f0-9990-42ce88c73ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:c5:b3:1d:cb:c0:80:0c:95:35:63:ce:e5: 53:7f:8f:2a:ce:b4:f1:6e:a3:6e:5f:44:fa:b3:68: 0e:61:ab:5c:af:d3:83:28:9b:6f:24:e9:81:0b:b9: d7:95:79:69:37:e2:b1:08:1a:c7:00:c1:ad:84:1a: 20:89:8e:41:8f:8d:0d:0b:6b:3a:06:9c:60:0b:7f: 3b:50:90:33:26:1c:bd:9f:7a:b0:5e:b0:e4:f4:a3: 5c:ee:f7:e9:1f:c2:d6:b2:93:7f:ad:c5:4b:fc:09: 84:d4:64:e1:d1:d9:b1:66:e7:a8:d2:5a:57:3e:84: c8:07:d7:c8:9d:78:e1:61:89:8b:c2:82:ef:ee:e3: b6:df:3c:9a:7c:cf:84:61:a8:0f:9a:78:8b:a1:f8: d0:11:d8:c9:3c:a9:bc:46:06:9e:6f:2d:e2:23:de: fb:22:c9:55:0c:9b:20:f1:8f:72:b2:01:6c:7a:59: c6:d7:74:83:8c:cb:7d:84:cf:28:b9:51:5f:be:5b: e7:47:f5:71:11:56:db:41:43:a6:a9:44:23:3b:28: 1b:dd:77:70:05:33:fe:05:fa:49:75:e8:8d:a5:61: 50:bd:a3:ee:e9:71:2e:83:b1:27:e7:47:ef:7a:e1: 56:68:d6:d0:8e:ee:56:e2:0c:7e:e5:78:0d:f8:53: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8C:06:36:F5:FB:B8:62:D4:7C:0A:16:37:62:09:C8:14:BE:F5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6cb306d9-9156-3e00-90b1-02bb90252102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:24:14:14:1e:b7:b2:63:27:96:54:7a:50:ce:26:05:cc:8e: f7:8b:6c:47:0e:23:7c:5c:c0:de:42:41:2f:bd:d5:a9:b1:39: b7:86:42:35:62:a1:d6:f0:a9:ca:65:66:f0:89:aa:19:f8:36: 68:6e:c7:81:43:f8:cf:af:3d:7a:c3:25:49:3b:9c:dd:f5:71: 9f:1f:c1:b8:fb:c1:48:b6:56:92:88:d4:ac:6f:e8:e6:54:ee: 07:26:c3:71:c0:ef:ed:7a:0d:9e:ae:95:20:73:a1:6a:18:79: 2f:41:0d:45:4a:91:a5:2f:50:5f:d5:d2:c3:4e:b0:30:59:f5: b3:81:a8:5f:4a:d2:cb:d5:69:0c:0c:91:7e:1b:ca:bf:b7:f3: a8:71:1f:94:93:0f:ca:5a:fd:cb:25:0c:bc:9d:d8:88:f6:83: 67:bd:2b:4d:9e:db:5e:26:e1:da:ce:ab:ae:99:55:30:10:e9: 91:94:ab:e7:53:44:e4:4f:36:9a:bf:6d:d9:68:7a:92:b4:37: be:b8:9f:91:af:05:c0:55:02:03:d3:67:38:2d:96:41:5d:0f: bd:05:c7:49:2c:df:5d:0e:2b:55:ac:00:0a:bc:c8:e9:f0:ef: 43:a2:da:9b:ad:f5:d0:9b:ab:a2:80:7c:9e:f1:40:eb:8f:1c: 8c:61:74:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eSjOmi/FZiLAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MWEyYjNhYTItYTE4Ny00NGYwLTk5OTAtNDJjZTg4YzczYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx3Fsx3LwIAMlTVjzuVTf48qzrTxbqNuX0T6 s2gOYatcr9ODKJtvJOmBC7nXlXlpN+KxCBrHAMGthBogiY5Bj40NC2s6BpxgC387 UJAzJhy9n3qwXrDk9KNc7vfpH8LWspN/rcVL/AmE1GTh0dmxZueo0lpXPoTIB9fI nXjhYYmLwoLv7uO23zyafM+EYagPmniLofjQEdjJPKm8Rgaeby3iI977IslVDJsg 8Y9ysgFselnG13SDjMt9hM8ouVFfvlvnR/VxEVbbQUOmqUQjOygb3XdwBTP+BfpJ deiNpWFQvaPu6XEug7En50fveuFWaNbQju5W4gx+5XgN+FNQuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiMBjb1+7hi1HwKFjdiCcgUvvXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmNiMzA2ZDktOTE1Ni0z ZTAwLTkwYjEtMDJiYjkwMjUyMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0kFBQet7JjJ5ZUelDOJgXMjveLbEcOI3xcwN5CQS+91amxObeGQjVi odbwqcplZvCJqhn4Nmhux4FD+M+vPXrDJUk7nN31cZ8fwbj7wUi2VpKI1Kxv6OZU 7gcmw3HA7+16DZ6ulSBzoWoYeS9BDUVKkaUvUF/V0sNOsDBZ9bOBqF9K0svVaQwM kX4byr+386hxH5STD8pa/cslDLyd2Ij2g2e9K02e214m4drOq66ZVTAQ6ZGUq+dT RORPNpq/bdloepK0N764n5GvBcBVAgPTZzgtlkFdD70Fx0ks310OK1WsAAq8yOnw 70Oi2put9dCbq6KAfJ7xQOuPHIxhdBY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:09:28 2025 by rpki-client