$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa File: ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa (raw, json) Hash identifier: cE4HWXlR+MlVP/yqeQn+1U2jzRR9OHjqxcy0jodTFhM= Subject key identifier: A4:9D:1F:5B:9E:05:17:C4:EE:4A:D7:53:CD:2F:02:52:21:C9:14:5C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E5D60FFEFC7C604B8460 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e5:d6:0f:fe:fc:7c:60:4b:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=5cf2ef41-7a20-45a3-97e4-cde308904258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:b9:46:0f:a1:cb:ff:d2:34:c7:9d:8c:16: 31:a7:a1:de:44:ca:63:bb:55:73:e3:c4:13:f6:2a: a3:4e:ab:f2:d4:b0:9f:1b:62:80:77:b4:42:78:df: 62:b4:65:f5:a2:6e:13:8e:38:61:d5:6b:c6:ac:d1: 04:48:9e:a9:11:68:8d:86:bf:48:89:25:6c:9b:1a: 30:9d:1d:c1:3c:30:7d:5f:b7:10:83:a7:d7:7b:2e: 2b:03:6d:f1:b7:ce:5d:40:57:2b:f9:eb:96:0b:f0: 48:d1:10:34:f8:fd:9a:c3:37:c4:95:50:e6:06:ec: e5:b2:ea:40:e9:25:8c:97:ba:ea:1d:e6:05:5e:85: f8:af:31:3e:c3:ff:9a:66:c3:e3:d7:2d:e6:7b:da: 5a:84:e8:5d:dc:38:4b:e3:29:9c:7b:c8:ab:81:40: c4:7b:b9:e4:b2:ec:7e:7a:52:24:49:9a:05:9b:b2: 46:b2:b7:95:79:e3:61:b2:ba:80:7f:c9:41:b6:83: 60:0e:8d:36:cf:7c:bb:85:a1:91:7b:7b:61:f9:ff: df:2d:de:f9:da:db:e2:e8:4f:c7:83:82:22:a2:15: d4:f7:af:b1:c0:bd:09:de:87:e9:11:87:b2:35:19: 30:e6:30:e8:de:c5:a5:e9:77:6c:62:5e:28:17:e9: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:1F:5B:9E:05:17:C4:EE:4A:D7:53:CD:2F:02:52:21:C9:14:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:54:ee:f0:cc:5f:37:54:43:83:ee:a3:5a:12:da:cc:d3:d3: 71:98:56:45:65:91:fd:ca:2c:4e:6d:8f:38:a7:bf:28:e8:d1: ed:85:00:30:83:a3:6b:18:fb:8f:e3:4b:94:25:16:7b:0c:15: f3:1e:b3:07:39:74:38:9e:04:4d:31:39:cc:a0:aa:28:58:15: 58:7c:40:b1:4b:b4:32:5d:0c:16:d5:c5:aa:e1:d9:f2:72:03: fa:27:f3:ee:e1:ca:a7:8e:1b:8e:c9:40:75:5d:9c:71:9c:e5: 04:e8:59:f8:ec:2e:88:80:5c:ad:01:b6:e4:f3:49:eb:74:39: 7a:18:92:72:35:29:57:e8:30:7b:32:ad:03:84:d3:76:64:7a: 76:e5:62:02:d6:95:47:ef:45:5e:74:78:a3:f1:91:4b:fd:45: 20:eb:b5:a2:bc:f4:60:2a:a3:57:6e:c7:72:f1:1a:01:b5:8a: 8f:ca:9c:47:5c:5b:dd:1e:46:98:c0:bf:f4:fd:7b:d0:04:66: 41:75:17:d0:b9:34:9f:23:c9:e1:e6:7c:08:5b:74:0a:29:12: a8:0c:38:9f:3f:39:1a:fe:b6:f7:59:44:38:32:a0:75:3a:fe: 86:d3:34:46:8d:82:53:75:0f:0c:b5:44:88:9d:a7:af:ef:7c: 0a:ea:6b:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eXWD/78fGBLhGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NWNmMmVmNDEtN2EyMC00NWEzLTk3ZTQtY2RlMzA4OTA0MjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEu5Rg+hy//SNMedjBYxp6HeRMpju1Vz48QT 9iqjTqvy1LCfG2KAd7RCeN9itGX1om4Tjjhh1WvGrNEESJ6pEWiNhr9IiSVsmxow nR3BPDB9X7cQg6fXey4rA23xt85dQFcr+euWC/BI0RA0+P2awzfElVDmBuzlsupA 6SWMl7rqHeYFXoX4rzE+w/+aZsPj1y3me9pahOhd3DhL4ymce8irgUDEe7nksux+ elIkSZoFm7JGsreVeeNhsrqAf8lBtoNgDo02z3y7haGRe3th+f/fLd752tvi6E/H g4IiohXU96+xwL0J3ofpEYeyNRkw5jDo3sWl6XdsYl4oF+mTSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSdH1ueBRfE7krXU80vAlIhyRRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2EzZTM3NjktYmQwYi0z NjBjLWI3YTctMWFjNjVhODUyY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZU7vDMXzdUQ4Puo1oS2szT03GYVkVlkf3KLE5tjzinvyjo0e2FADCD o2sY+4/jS5QlFnsMFfMeswc5dDieBE0xOcygqihYFVh8QLFLtDJdDBbVxarh2fJy A/on8+7hyqeOG47JQHVdnHGc5QToWfjsLoiAXK0BtuTzSet0OXoYknI1KVfoMHsy rQOE03ZkenblYgLWlUfvRV50eKPxkUv9RSDrtaK89GAqo1dux3LxGgG1io/KnEdc W90eRpjAv/T9e9AEZkF1F9C5NJ8jyeHmfAhbdAopEqgMOJ8/ORr+tvdZRDgyoHU6 /obTNEaNglN1Dwy1RIidp6/vfArqa20= -----END CERTIFICATE-----Generated at Sat Apr 26 17:39:31 2025 by rpki-client