$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/790be6c0-4dbc-36da-98d7-7dec5496ba9e.roa File: 790be6c0-4dbc-36da-98d7-7dec5496ba9e.roa (raw, json) Hash identifier: QMLPgWsaM+9bkVw83oiwSFBmV1xbVwvIdPnJWpDclwg= Subject key identifier: 9F:5A:E3:01:A5:29:3C:77:E7:11:E3:F4:CD:9A:25:E7:1A:74:17:DB Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E3D204FEDF7B5C722980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/790be6c0-4dbc-36da-98d7-7dec5496ba9e.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e3:d2:04:fe:df:7b:5c:72:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=fcb99e83-de52-4a87-88d1-0c2295c7edf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:12:7b:e7:42:db:1b:40:a6:fd:c3:ca:0a: 6d:c1:d0:46:a5:5d:32:69:52:27:c6:a8:58:89:90: 92:0b:e2:b5:22:b8:14:cb:58:44:26:be:6d:b3:88: 97:7f:33:57:55:57:96:d4:9d:dc:1e:2b:ea:20:c2: d5:11:47:17:d7:e7:a5:37:a5:d3:9e:7a:f4:8a:02: 44:c5:38:66:61:b3:db:27:53:9b:6a:db:4c:e0:a3: 21:4a:29:5a:a4:73:ac:86:4b:ce:14:44:4e:af:0b: dc:21:fd:90:42:c2:2c:ba:84:01:21:60:e5:38:c7: a0:ba:b3:6d:89:46:7b:1f:cd:bd:3c:5d:98:e9:1b: d8:b5:a8:53:6a:9b:a1:61:02:88:80:3e:18:ad:e8: 2b:12:45:0e:a7:da:09:f5:f1:47:68:ca:e3:68:6a: 2a:92:e4:26:6f:6e:09:cd:d0:06:4b:80:76:99:3a: 7f:04:46:e9:ef:c6:e3:a6:59:16:6f:55:df:da:9a: 07:02:14:cd:a8:16:27:11:e0:09:f5:f6:74:95:a1: fd:f9:32:c8:dd:7e:93:86:49:83:b9:a5:d0:da:92: f8:dd:8c:af:40:15:9d:da:bc:b3:29:3e:55:53:09: ef:17:e5:f4:9e:80:d2:9c:ef:7a:83:50:62:d4:8c: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:E3:01:A5:29:3C:77:E7:11:E3:F4:CD:9A:25:E7:1A:74:17:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/790be6c0-4dbc-36da-98d7-7dec5496ba9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d6:12:4f:d5:61:7a:a6:89:5e:6f:fc:64:2c:23:7e:4a:80: 5d:ec:6d:e0:93:df:f7:33:94:7a:fb:aa:f5:b7:64:50:4a:1e: df:f6:6e:a8:9d:e3:9a:9b:e7:77:14:76:67:5a:48:4d:30:f6: bd:f9:7c:5e:28:b6:46:27:bd:27:d0:32:47:d5:1c:0a:64:b1: 85:64:ed:f0:14:25:60:d3:a3:55:98:8a:48:75:51:90:df:6e: 90:98:ba:dc:34:36:20:53:11:6c:de:68:c2:a4:c6:72:ca:16: fa:07:68:49:2a:f2:67:55:a7:10:10:44:6c:c0:2e:ae:47:bd: cd:78:a7:fc:bf:a7:15:50:7b:7f:52:bc:e2:e7:a5:9e:c5:3f: 78:d1:bd:93:7c:a7:42:40:51:bf:11:82:9d:f3:12:0e:7d:9a: c3:7b:93:ce:47:38:a8:7a:9f:9a:60:77:42:45:c3:c2:b7:17: a5:08:6a:07:1a:26:8c:e4:4b:33:50:35:fe:76:5f:a5:62:4f: 0b:4e:99:c3:e3:dc:b2:80:63:1b:f7:44:fc:da:4d:fa:43:f6: c3:9f:e5:99:9a:ad:a3:a9:65:3f:63:b2:26:78:f4:01:da:45: e1:b0:81:ef:28:3f:69:8b:9f:b1:6d:f9:6a:2c:4b:3f:17:c8: 35:b5:58:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+ePSBP7fe1xyKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZmNiOTllODMtZGU1Mi00YTg3LTg4ZDEtMGMyMjk1YzdlZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS0Se+dC2xtApv3DygptwdBGpV0yaVInxqhY iZCSC+K1IrgUy1hEJr5ts4iXfzNXVVeW1J3cHivqIMLVEUcX1+elN6XTnnr0igJE xThmYbPbJ1ObattM4KMhSilapHOshkvOFEROrwvcIf2QQsIsuoQBIWDlOMegurNt iUZ7H829PF2Y6RvYtahTapuhYQKIgD4YregrEkUOp9oJ9fFHaMrjaGoqkuQmb24J zdAGS4B2mTp/BEbp78bjplkWb1Xf2poHAhTNqBYnEeAJ9fZ0laH9+TLI3X6ThkmD uaXQ2pL43YyvQBWd2ryzKT5VUwnvF+X0noDSnO96g1Bi1IxFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9a4wGlKTx35xHj9M2aJecadBfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzkwYmU2YzAtNGRiYy0z NmRhLTk4ZDctN2RlYzU0OTZiYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3WEk/VYXqmiV5v/GQsI35KgF3sbeCT3/czlHr7qvW3ZFBKHt/2bqid 45qb53cUdmdaSE0w9r35fF4otkYnvSfQMkfVHApksYVk7fAUJWDTo1WYikh1UZDf bpCYutw0NiBTEWzeaMKkxnLKFvoHaEkq8mdVpxAQRGzALq5Hvc14p/y/pxVQe39S vOLnpZ7FP3jRvZN8p0JAUb8Rgp3zEg59msN7k85HOKh6n5pgd0JFw8K3F6UIagca JozkSzNQNf52X6ViTwtOmcPj3LKAYxv3RPzaTfpD9sOf5ZmaraOpZT9jsiZ49AHa ReGwge8oP2mLn7Ft+WosSz8XyDW1WCQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:55 2025 by rpki-client