$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa File: ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa (raw, json) Hash identifier: xmTNoiYpvRa7iiU6j9XvT8Cx6XBh0DeAHB18sOyjUJU= Subject key identifier: BF:67:0E:AC:BE:2D:D7:25:6E:00:0F:AE:CE:29:E4:A3:08:1B:B1:EA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584993F9E6AA0C2B10319DAD8D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 54113 IP address blocks: 157.5.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e6:aa:0c:2b:10:31:9d:ad:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=1a49b6db-26a7-4b03-93dd-f60851dec917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:0c:b7:86:99:e8:ef:e9:20:ab:f3:52:b3: 85:24:62:95:0c:ab:43:01:5f:bb:32:64:99:85:fb: 63:73:3e:c8:03:8e:fa:0d:bc:61:16:b4:05:a9:4e: 7b:c2:f9:7e:1a:22:b0:1b:80:11:0d:67:1b:d0:9f: f3:d8:61:e5:40:df:8f:0f:0b:80:8c:0d:b4:a6:85: 9a:8a:90:ab:08:bd:ec:a3:85:84:11:f6:e8:e4:46: 78:08:f2:bb:8a:6d:47:ef:46:01:42:0e:3f:1d:ab: 19:2a:b1:1e:ec:cf:f3:19:fa:23:fd:29:d4:1d:2e: 65:02:c2:12:d3:a1:5b:74:00:6b:bc:4a:be:c1:c5: be:6f:98:10:d4:46:e8:31:7f:1c:69:18:f2:b5:e5: 25:45:03:b4:0b:4c:3d:b9:28:f0:c1:23:9b:12:c4: 58:40:1b:7b:1e:c8:91:97:6b:05:d2:a6:14:eb:70: 31:d1:01:d0:0d:bd:33:9b:81:3a:6c:71:d8:d1:2b: 11:36:e6:d0:80:a2:5e:eb:76:e3:d9:3f:77:e3:09: eb:2d:13:a7:0a:59:a6:87:01:47:bc:72:4f:6d:02: 27:03:5a:de:11:b2:34:5b:82:e9:3e:6c:7b:3a:93: be:e0:d9:15:ef:5d:88:13:39:cd:26:e0:01:b4:3a: 30:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:67:0E:AC:BE:2D:D7:25:6E:00:0F:AE:CE:29:E4:A3:08:1B:B1:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f6:14:63:20:44:9e:d2:15:46:1f:b8:66:f1:90:58:65:b6: ab:0c:56:8a:33:5c:a1:7c:7c:1e:6c:8b:38:7f:0b:53:30:79: e0:81:e6:4a:59:41:27:ed:fd:94:7b:2f:f9:b2:01:80:bc:41: c7:6e:4a:ed:95:2c:8e:80:e0:b9:6f:90:57:f7:c2:4a:be:8b: bc:f6:d3:f3:42:ff:75:8e:44:2c:86:36:e2:06:a1:61:0b:32: 87:21:c6:47:bc:45:0a:74:17:b2:f3:73:74:a2:54:7b:0a:95: d5:c4:c2:64:22:93:23:c1:d4:f1:a2:13:14:bd:05:af:88:b4: f0:55:fb:d1:b7:08:f2:51:5b:22:99:15:71:2a:6a:68:b4:a3: dd:b7:25:3c:5c:fb:6a:98:58:17:4a:b9:ee:4c:58:1f:2e:3b: 51:4b:f8:bc:21:cb:97:6f:07:1b:0e:f3:f0:ad:04:a9:58:56: 5b:af:8a:0d:2c:40:57:7a:27:c1:ef:d3:d3:5f:5d:e6:33:b8: 4b:96:d2:23:d1:08:89:56:9a:b0:80:a7:48:d0:6c:d4:96:9e: 8a:4d:8a:aa:aa:74:de:ac:27:e1:4c:db:2f:88:32:47:66:1a: ca:10:18:9a:bb:00:f5:26:bb:42:39:9c:6c:aa:f0:f1:6d:91: c8:25:4a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eaqDCsQMZ2tjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MWE0OWI2ZGItMjZhNy00YjAzLTkzZGQtZjYwODUxZGVjOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gMMt4aZ6O/pIKvzUrOFJGKVDKtDAV+7MmSZ hftjcz7IA476DbxhFrQFqU57wvl+GiKwG4ARDWcb0J/z2GHlQN+PDwuAjA20poWa ipCrCL3so4WEEfbo5EZ4CPK7im1H70YBQg4/HasZKrEe7M/zGfoj/SnUHS5lAsIS 06FbdABrvEq+wcW+b5gQ1EboMX8caRjyteUlRQO0C0w9uSjwwSObEsRYQBt7HsiR l2sF0qYU63Ax0QHQDb0zm4E6bHHY0SsRNubQgKJe63bj2T934wnrLROnClmmhwFH vHJPbQInA1reEbI0W4LpPmx7OpO+4NkV712IEznNJuABtDowKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9nDqy+LdclbgAPrs4p5KMIG7HqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmZlMjlkYmQtZTMxMC0z NzE1LTg1YWMtMWFiOThlNGNiOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD2FGMgRJ7SFUYfuGbxkFhltqsMVoozXKF8fB5sizh/C1MweeCB5kpZ QSft/ZR7L/myAYC8QcduSu2VLI6A4LlvkFf3wkq+i7z20/NC/3WORCyGNuIGoWEL Mochxke8RQp0F7Lzc3SiVHsKldXEwmQikyPB1PGiExS9Ba+ItPBV+9G3CPJRWyKZ FXEqami0o923JTxc+2qYWBdKue5MWB8uO1FL+Lwhy5dvBxsO8/CtBKlYVluvig0s QFd6J8Hv09NfXeYzuEuW0iPRCIlWmrCAp0jQbNSWnopNiqqqdN6sJ+FM2y+IMkdm GsoQGJq7APUmu0I5nGyq8PFtkcglSos= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:38 2025 by rpki-client