$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/898bf973-ef5d-356d-ab29-0182ccb0cee8.roa File: 898bf973-ef5d-356d-ab29-0182ccb0cee8.roa (raw, json) Hash identifier: Rm8r6o780CjUrt/fGoQyzE9rDpBi1mOBWDTP23iBgfs= Subject key identifier: DB:3A:8D:AE:08:12:3C:FB:F5:64:42:F4:DE:B7:BC:11:F5:99:CA:49 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E56554DB6B29DB6E0680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/898bf973-ef5d-356d-ab29-0182ccb0cee8.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e5:65:54:db:6b:29:db:6e:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=c0222c12-543a-4a4a-9653-62cc65d76065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:52:c5:b2:7a:16:d4:60:26:9d:84:1d:6b: e4:0a:27:86:0a:df:91:83:ba:f7:d0:99:7b:4a:6c: ea:f3:05:de:d3:ec:54:ce:21:90:8a:f3:36:b7:44: 1b:f7:83:c3:a6:dc:da:fa:19:00:26:f4:67:e7:b9: 51:5a:c8:02:0e:15:bb:ae:64:ee:eb:59:5e:e7:de: 1a:b0:a7:47:6f:bd:a6:c5:38:b7:69:87:bc:e9:c1: a0:c3:19:83:42:69:6d:10:d0:9a:89:03:b1:42:b5: 27:4b:76:c0:1c:f6:f9:f1:70:f2:16:95:b2:86:62: b5:53:46:f7:1b:7d:3b:e8:9c:e9:f5:91:c1:d6:aa: ae:a3:36:b1:44:32:79:aa:6a:55:f6:9c:27:2c:4d: 04:4d:4d:ec:8e:e7:6f:bd:9a:36:7c:aa:44:02:8f: 59:24:2f:7e:40:55:5e:8b:58:43:51:7e:70:0e:b2: 82:a2:a5:33:13:2e:7d:24:a3:de:f0:d7:c5:5d:a8: 9a:04:82:fc:f6:d8:93:02:83:ad:a3:7a:eb:26:cb: ad:5c:da:06:ce:e4:ec:e2:72:8e:b4:48:4e:5a:2d: 99:a0:e3:54:01:b6:e4:b5:06:0c:14:e9:97:cc:ae: 7d:f2:a6:6d:c8:95:73:1f:51:9f:ba:6e:33:9b:c4: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3A:8D:AE:08:12:3C:FB:F5:64:42:F4:DE:B7:BC:11:F5:99:CA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/898bf973-ef5d-356d-ab29-0182ccb0cee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ea:62:a9:e0:78:34:a8:df:3f:9c:3e:25:7f:89:00:e5:11: 1d:db:33:0b:d4:a9:c4:21:51:f7:e0:7e:93:b1:be:f6:d6:20: 0f:14:28:d3:1e:bb:af:fc:40:2f:a2:7d:a9:90:2d:ff:c2:ff: b7:6d:4e:16:db:4e:7d:ef:b3:14:34:ec:7e:42:56:67:d0:0a: a7:20:2b:fa:dd:bd:39:cc:0c:37:7c:a9:e0:77:2c:e3:aa:0d: 6c:25:3b:32:c7:52:2b:64:30:f4:4b:b3:58:76:ff:fa:50:61: ea:01:6c:72:97:7d:66:9f:36:6e:55:28:1a:d6:5d:3b:46:a7: 7b:be:8f:b4:61:ee:f0:eb:ce:91:5d:04:bb:40:8a:26:d0:24: 64:50:bc:3a:90:e9:d4:f8:82:07:84:eb:31:24:c7:c4:8c:2b: fb:ea:0b:51:96:f7:92:77:ad:f7:a7:c1:d1:2e:22:c0:25:5a: 57:dd:c5:d2:8a:f0:72:06:f3:31:d8:43:18:7a:55:dd:db:e5: 71:83:1f:7f:a1:fc:e7:4b:1a:9f:8a:a6:97:23:6a:94:18:79: b8:92:bb:8b:8d:4b:1e:3b:e4:85:74:99:8f:4c:78:ca:12:76: fb:35:e7:62:6c:e9:3b:18:c1:89:36:1e:8d:c7:b9:a3:ef:96: 9e:37:4a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eVlVNtrKdtuBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YzAyMjJjMTItNTQzYS00YTRhLTk2NTMtNjJjYzY1ZDc2MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VpSxbJ6FtRgJp2EHWvkCieGCt+Rg7r30Jl7 Smzq8wXe0+xUziGQivM2t0Qb94PDptza+hkAJvRn57lRWsgCDhW7rmTu61le594a sKdHb72mxTi3aYe86cGgwxmDQmltENCaiQOxQrUnS3bAHPb58XDyFpWyhmK1U0b3 G3076Jzp9ZHB1qquozaxRDJ5qmpV9pwnLE0ETU3sjudvvZo2fKpEAo9ZJC9+QFVe i1hDUX5wDrKCoqUzEy59JKPe8NfFXaiaBIL89tiTAoOto3rrJsutXNoGzuTs4nKO tEhOWi2ZoONUAbbktQYMFOmXzK598qZtyJVzH1Gfum4zm8SAZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs6ja4IEjz79WRC9N63vBH1mcpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODk4YmY5NzMtZWY1ZC0z NTZkLWFiMjktMDE4MmNjYjBjZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPqYqngeDSo3z+cPiV/iQDlER3bMwvUqcQhUffgfpOxvvbWIA8UKNMe u6/8QC+ifamQLf/C/7dtThbbTn3vsxQ07H5CVmfQCqcgK/rdvTnMDDd8qeB3LOOq DWwlOzLHUitkMPRLs1h2//pQYeoBbHKXfWafNm5VKBrWXTtGp3u+j7Rh7vDrzpFd BLtAiibQJGRQvDqQ6dT4ggeE6zEkx8SMK/vqC1GW95J3rfenwdEuIsAlWlfdxdKK 8HIG8zHYQxh6Vd3b5XGDH3+h/OdLGp+KppcjapQYebiSu4uNSx475IV0mY9MeMoS dvs152Js6TsYwYk2Ho3HuaPvlp43SjM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:31 2025 by rpki-client