$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f9ae94a5-2e15-3c13-a878-4185779e6e8b.roa File: f9ae94a5-2e15-3c13-a878-4185779e6e8b.roa (raw, json) Hash identifier: OlWBi2tXNGQA6fr3Jhcj4Ygu/S5O8vxJAFB9ZWnILik= Subject key identifier: B6:7B:8D:2F:C5:AF:33:C9:47:FC:0C:1D:33:1C:A6:33:0E:36:70:74 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E593F2E448922F93ED00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f9ae94a5-2e15-3c13-a878-4185779e6e8b.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e5:93:f2:e4:48:92:2f:93:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=c7dc7543-d089-4986-a3f5-22eaaa509a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:07:13:8f:51:a1:0e:76:00:27:37:ed:4c: da:12:f0:58:cb:d9:57:c2:70:c4:d6:f5:21:30:0a: 81:6b:d1:91:77:09:25:eb:2e:ff:19:a0:d1:c0:e9: 86:a3:f5:e8:26:ab:6b:17:76:2b:66:79:df:b7:be: 46:88:1d:14:b3:58:d6:3f:c1:44:04:2a:80:f1:eb: b5:be:c6:86:51:91:7e:c2:7a:02:32:a0:1f:ac:b6: 35:37:1f:09:e8:a2:a1:9e:a0:e4:d5:ff:f3:07:5d: eb:e2:b0:51:ac:01:b9:23:72:6d:96:a6:ab:73:91: b3:31:3f:96:a1:cf:cf:d6:90:1e:98:c6:e5:e0:bc: b0:7c:7b:ee:98:38:22:85:37:07:ba:05:7b:5e:3d: 27:af:0d:22:b3:64:80:1a:f5:0d:df:2e:d4:ab:b8: 4b:40:4f:0d:55:dd:5a:5b:d2:bb:1c:0a:09:a7:4e: 1d:54:f9:99:ba:41:2a:0e:20:e6:30:18:e2:01:84: 6d:c1:7c:25:93:84:af:bf:86:d0:e9:c4:be:d1:4b: 5f:f8:fb:32:8a:8c:7b:8f:98:17:1f:97:86:c5:62: 3e:10:02:4d:e7:20:f4:2e:e1:d5:cf:f4:02:73:61: 66:23:9d:be:98:99:86:cc:17:ca:a1:13:fb:5c:89: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7B:8D:2F:C5:AF:33:C9:47:FC:0C:1D:33:1C:A6:33:0E:36:70:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f9ae94a5-2e15-3c13-a878-4185779e6e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:26:3a:9d:4c:5e:08:3b:36:b8:c1:3a:f7:1a:83:7c:0d:34: d3:6f:74:70:a9:a4:45:58:99:16:c7:6c:69:a0:f8:a8:88:ce: 01:5a:03:fd:aa:6c:07:9c:eb:54:cc:06:4c:76:1c:50:99:33: 6e:fa:2f:cc:7f:a9:a3:f3:07:5f:ee:28:1e:b2:a9:3f:e9:95: a4:53:10:44:8c:52:17:05:10:d1:58:81:ef:c9:5e:79:c0:12: 67:19:68:a6:57:e6:6d:e3:ab:5f:1b:ca:42:ab:ec:2d:7f:c3: 6c:ea:0e:c0:5c:fc:ca:fc:be:9d:83:23:d0:87:75:15:12:22: 82:c5:18:bd:71:63:ff:7a:2e:9c:12:46:84:c1:33:88:0e:bc: 00:c7:14:96:95:78:ca:37:1e:2b:09:25:02:55:02:21:0c:d1: 31:af:82:09:87:6d:5c:08:97:0d:af:46:91:5c:d9:af:e0:f0: 7f:3d:88:4d:dd:11:27:7f:99:f7:31:4e:a2:e9:92:8c:c5:01: 57:07:f0:1e:cc:dc:cd:6d:cc:a3:00:5e:c6:d0:6a:64:8f:d0: ab:9f:25:c3:db:75:17:d4:2e:3b:a7:1a:1b:3b:72:15:05:1f: 14:63:a8:26:d6:cc:fd:3a:cb:09:4f:22:18:71:23:d7:75:8b: ab:fb:a1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eWT8uRIki+T7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YzdkYzc1NDMtZDA4OS00OTg2LWEzZjUtMjJlYWFhNTA5YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s0HE49RoQ52ACc37UzaEvBYy9lXwnDE1vUh MAqBa9GRdwkl6y7/GaDRwOmGo/XoJqtrF3YrZnnft75GiB0Us1jWP8FEBCqA8eu1 vsaGUZF+wnoCMqAfrLY1Nx8J6KKhnqDk1f/zB13r4rBRrAG5I3Jtlqarc5GzMT+W oc/P1pAemMbl4LywfHvumDgihTcHugV7Xj0nrw0is2SAGvUN3y7Uq7hLQE8NVd1a W9K7HAoJp04dVPmZukEqDiDmMBjiAYRtwXwlk4Svv4bQ6cS+0Utf+Psyiox7j5gX H5eGxWI+EAJN5yD0LuHVz/QCc2FmI52+mJmGzBfKoRP7XIkH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ7jS/FrzPJR/wMHTMcpjMONnB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjlhZTk0YTUtMmUxNS0z YzEzLWE4NzgtNDE4NTc3OWU2ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0mOp1MXgg7NrjBOvcag3wNNNNvdHCppEVYmRbHbGmg+KiIzgFaA/2q bAec61TMBkx2HFCZM276L8x/qaPzB1/uKB6yqT/plaRTEESMUhcFENFYge/JXnnA EmcZaKZX5m3jq18bykKr7C1/w2zqDsBc/Mr8vp2DI9CHdRUSIoLFGL1xY/96LpwS RoTBM4gOvADHFJaVeMo3HisJJQJVAiEM0TGvggmHbVwIlw2vRpFc2a/g8H89iE3d ESd/mfcxTqLpkozFAVcH8B7M3M1tzKMAXsbQamSP0KufJcPbdRfULjunGhs7chUF HxRjqCbWzP06ywlPIhhxI9d1i6v7obg= -----END CERTIFICATE-----Generated at Sun Apr 27 03:04:08 2025 by rpki-client