$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa File: 0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa (raw, json) Hash identifier: lfNY8WDxgO33jVEcRggwuypkbyIIvJ1aFTQNw9pqFq0= Subject key identifier: DB:2A:32:BE:62:86:16:F4:DC:DA:15:C8:23:A7:DB:D4:AB:61:10:12 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F75161B5C11E127CEA000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:75:16:1b:5c:11:e1:27:ce:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=35bf947a-c19d-4b53-a203-12b70388d0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ec:6e:9e:ec:ce:25:bc:07:c9:4d:59:a9:35: b9:a8:7e:cf:60:42:bc:d0:46:fc:1f:ee:54:7c:90: 75:f1:e4:3b:c1:a4:18:e1:d4:83:53:9f:8c:25:1d: a4:7d:bf:50:1a:69:2e:cf:d6:a6:d1:47:44:a8:ac: 3d:9c:bc:7e:1c:27:79:28:3a:dd:ae:d1:4b:7b:d6: 8c:cc:71:49:ea:ce:f8:a1:eb:64:40:a6:63:96:a9: 1f:57:22:66:43:30:f2:ba:5b:36:28:a6:c9:18:3a: 40:d7:b4:b0:1e:43:2b:e8:02:ff:34:d9:ae:30:4b: e5:32:4f:4c:37:26:32:31:d1:86:57:5f:d6:a2:42: c1:3c:43:23:d5:2f:ee:fb:98:89:69:ba:fa:1b:97: 68:4f:62:b2:54:d8:ae:47:16:e4:cd:98:dd:81:d6: 4a:41:91:56:16:ee:01:90:8f:7c:61:a6:10:9c:1c: d8:f8:4a:b1:10:2a:c5:b4:0b:a9:2b:7e:38:95:6b: ee:94:f5:97:83:7d:63:91:63:e3:5a:32:aa:c7:b9: c8:cf:da:a9:87:bf:af:22:c2:30:cf:6b:7d:46:19: 6b:db:b1:b3:7a:45:bd:07:30:22:04:3e:02:1f:71: 2b:59:c1:8f:37:08:48:c1:fa:76:b4:15:ee:fb:fc: 2e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2A:32:BE:62:86:16:F4:DC:DA:15:C8:23:A7:DB:D4:AB:61:10:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:80:dc:1a:dc:a5:b2:10:3b:ee:5e:44:3c:91:84:04:7b:22: bf:bd:01:3f:e5:5d:3c:17:58:ff:7f:28:01:c1:e2:8d:7c:43: 1f:3e:fb:46:5a:08:fd:d6:cb:68:ce:ad:f9:f9:d0:9d:8e:1d: ff:ba:fb:b8:82:7a:98:a1:56:46:7f:ef:b7:73:9d:ac:8b:b1: 7a:02:69:e5:81:7a:1a:8b:55:1d:06:3c:84:df:e9:e4:8f:9b: fc:ab:99:ac:bd:ac:6a:04:9c:c7:70:45:df:76:36:dc:59:18: c1:e9:ec:a9:d4:bf:c9:cb:3c:84:37:b9:a8:20:2d:1d:49:c7: dc:3c:58:c9:0c:8a:10:71:90:48:a4:60:3b:b1:0c:2c:ac:ce: b2:b9:d3:09:ef:aa:7e:82:13:21:8e:14:94:36:a3:4d:4c:bf: 91:45:a1:58:3b:60:a3:ae:8b:52:55:85:aa:bc:07:7c:e2:2b: 12:9d:bf:d8:14:44:52:2c:c2:e4:bf:48:0b:cb:4f:f3:ef:fe: c8:c7:80:02:da:0c:1f:c4:55:5c:7a:23:a7:1f:a6:78:62:22: 8b:d2:86:5b:62:64:bb:60:23:f9:db:61:ec:17:24:9c:03:5e: 41:49:ae:7b:7e:08:76:54:55:63:1f:c3:6b:0d:38:ac:2b:85: 90:78:53:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3UWG1wR4SfOoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MzViZjk0N2EtYzE5ZC00YjUzLWEyMDMtMTJiNzAzODhkMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uxunuzOJbwHyU1ZqTW5qH7PYEK80Eb8H+5U fJB18eQ7waQY4dSDU5+MJR2kfb9QGmkuz9am0UdEqKw9nLx+HCd5KDrdrtFLe9aM zHFJ6s74oetkQKZjlqkfVyJmQzDyuls2KKbJGDpA17SwHkMr6AL/NNmuMEvlMk9M NyYyMdGGV1/WokLBPEMj1S/u+5iJabr6G5doT2KyVNiuRxbkzZjdgdZKQZFWFu4B kI98YaYQnBzY+EqxECrFtAupK344lWvulPWXg31jkWPjWjKqx7nIz9qph7+vIsIw z2t9Rhlr27GzekW9BzAiBD4CH3ErWcGPNwhIwfp2tBXu+/wuJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsqMr5ihhb03NoVyCOn29SrYRASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDk4OWIwZjktYWNiYS0z Y2Y2LWIzZTctNmM0Yzg0NzM0MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2A3BrcpbIQO+5eRDyRhAR7Ir+9AT/lXTwXWP9/KAHB4o18Qx8++0Za CP3Wy2jOrfn50J2OHf+6+7iCepihVkZ/77dznayLsXoCaeWBehqLVR0GPITf6eSP m/yrmay9rGoEnMdwRd92NtxZGMHp7KnUv8nLPIQ3uaggLR1Jx9w8WMkMihBxkEik YDuxDCyszrK50wnvqn6CEyGOFJQ2o01Mv5FFoVg7YKOui1JVhaq8B3ziKxKdv9gU RFIswuS/SAvLT/Pv/sjHgALaDB/EVVx6I6cfpnhiIovShltiZLtgI/nbYewXJJwD XkFJrnt+CHZUVWMfw2sNOKwrhZB4U2E= -----END CERTIFICATE-----Generated at Tue May 6 13:08:59 2025 by rpki-client