$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0dc5997d-840a-32da-88bf-847223da7391.roa File: 0dc5997d-840a-32da-88bf-847223da7391.roa (raw, json) Hash identifier: gP2tD6siq9jxY12aaX6tC9kzW+3ExUt3DT7GusYryOI= Subject key identifier: F9:06:60:AB:54:77:DB:C7:0E:1E:B1:B2:15:C1:ED:9C:2B:42:DD:02 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F7BB98F3A9402A8FE35A0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0dc5997d-840a-32da-88bf-847223da7391.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:7b:b9:8f:3a:94:02:a8:fe:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=c5e45989-af3a-4cf8-9334-f2ed7a4f01f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:e1:97:36:19:f2:c4:ca:a6:b8:7f:1f:1d: e8:e0:72:2c:0e:7e:43:07:6d:72:de:e0:3d:3b:f1: ab:6d:7d:22:a2:27:f9:0b:00:d6:ed:44:ba:3c:dd: 76:bf:ff:c8:72:c3:08:89:0b:a1:c0:28:9f:2c:09: 74:08:6e:c5:7e:7c:7a:f6:86:47:74:85:ae:af:4c: 31:14:b9:ad:b0:e7:66:86:97:15:26:9e:d2:23:9b: 80:a4:c2:7e:5c:17:e7:2b:50:29:98:8c:a0:1c:bd: e4:c5:41:e4:48:54:4e:1b:e5:2d:b6:ef:27:96:b5: 62:52:f9:50:82:78:ea:6a:d4:6d:c2:31:a6:bf:e9: dc:f1:12:92:90:64:4b:f2:8b:a8:ca:6d:90:88:16: 4d:c1:5f:42:cb:60:c7:99:c9:39:ac:0b:99:82:91: 13:0d:b1:bf:97:8f:47:45:c5:78:8a:de:d8:4e:ae: e0:1e:29:58:74:a2:09:84:9f:55:f9:0e:03:f8:dd: 71:1d:cc:ff:5b:80:d0:fd:35:fe:b0:10:a1:f3:24: db:83:81:db:4b:6e:d1:44:f1:b3:27:06:33:9d:a0: b2:2f:14:5e:c3:c2:d6:db:46:72:77:ff:37:6e:a7: c6:57:66:bf:3a:e3:28:35:12:41:53:6a:3c:9f:45: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:60:AB:54:77:DB:C7:0E:1E:B1:B2:15:C1:ED:9C:2B:42:DD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0dc5997d-840a-32da-88bf-847223da7391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e2:02:02:dc:bb:af:f7:4e:27:9b:26:6e:15:07:0b:29:40: 6c:24:2c:80:b6:01:b6:d2:c8:62:52:d8:15:5c:3a:e2:36:e1: 9d:a5:de:38:5c:1c:16:28:5d:a2:e1:ab:30:f8:a3:8a:5f:f8: 35:3f:88:7c:de:4b:f1:84:88:2c:c5:9e:1f:61:04:fc:4a:0f: 69:c5:14:7d:ea:2b:04:36:8b:4e:86:bf:37:8d:26:33:86:bc: 03:79:60:12:b7:85:4d:a6:f1:d8:da:50:6b:d9:4b:30:b1:3c: f0:47:56:80:48:56:66:d0:82:b0:7e:8b:ee:e9:e2:90:b5:86: 39:b8:1f:1d:80:b4:bc:5a:07:fe:af:86:05:2e:63:2a:93:e5: 28:4e:76:92:1d:41:64:67:8d:31:8f:88:94:0a:51:c1:f6:92: 19:08:d4:00:f5:d8:91:08:14:1b:3b:d9:b8:c4:8c:7b:b1:e4: e5:63:9a:9f:53:c6:25:de:cf:c4:ae:49:d1:f6:58:c6:25:4e: 5e:12:20:b8:57:70:1c:19:ce:cb:f6:d9:ee:e2:ed:02:25:80: ad:b8:7d:c5:cb:03:99:4c:1e:61:93:5a:05:50:1c:9a:5a:3e: cd:0f:99:4d:f5:c7:ca:8a:d8:6a:c5:2c:6a:92:71:45:6c:0b: 66:06:96:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3u5jzqUAqj+NaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YzVlNDU5ODktYWYzYS00Y2Y4LTkzMzQtZjJlZDdhNGYwMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYDhlzYZ8sTKprh/Hx3o4HIsDn5DB21y3uA9 O/GrbX0ioif5CwDW7US6PN12v//IcsMIiQuhwCifLAl0CG7Ffnx69oZHdIWur0wx FLmtsOdmhpcVJp7SI5uApMJ+XBfnK1ApmIygHL3kxUHkSFROG+Uttu8nlrViUvlQ gnjqatRtwjGmv+nc8RKSkGRL8ouoym2QiBZNwV9Cy2DHmck5rAuZgpETDbG/l49H RcV4it7YTq7gHilYdKIJhJ9V+Q4D+N1xHcz/W4DQ/TX+sBCh8yTbg4HbS27RRPGz JwYznaCyLxRew8LW20Zyd/83bqfGV2a/OuMoNRJBU2o8n0V2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkGYKtUd9vHDh6xshXB7ZwrQt0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGRjNTk5N2QtODQwYS0z MmRhLTg4YmYtODQ3MjIzZGE3MzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3iAgLcu6/3TiebJm4VBwspQGwkLIC2AbbSyGJS2BVcOuI24Z2l3jhc HBYoXaLhqzD4o4pf+DU/iHzeS/GEiCzFnh9hBPxKD2nFFH3qKwQ2i06GvzeNJjOG vAN5YBK3hU2m8djaUGvZSzCxPPBHVoBIVmbQgrB+i+7p4pC1hjm4Hx2AtLxaB/6v hgUuYyqT5ShOdpIdQWRnjTGPiJQKUcH2khkI1AD12JEIFBs72bjEjHux5OVjmp9T xiXez8SuSdH2WMYlTl4SILhXcBwZzsv22e7i7QIlgK24fcXLA5lMHmGTWgVQHJpa Ps0PmU31x8qK2GrFLGqScUVsC2YGlgM= -----END CERTIFICATE-----Generated at Sun May 11 02:00:05 2025 by rpki-client