$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1065f2b1-5696-3c0c-b381-eec1becb046e.roa File: 1065f2b1-5696-3c0c-b381-eec1becb046e.roa (raw, json) Hash identifier: rikuW+YvE6r7rRcA43Vqg/u03e/F6WxzT2q3NnBOo68= Subject key identifier: 73:63:6A:A3:A1:7B:4C:E8:E4:72:BF:ED:93:7E:21:0C:0D:57:26:AD Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F75E7E44137251BF2DD80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1065f2b1-5696-3c0c-b381-eec1becb046e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:75:e7:e4:41:37:25:1b:f2:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=0b66b506-6016-48bc-9075-e05423f2bf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4f:d3:1b:65:dc:57:f8:a0:77:91:77:51:ec: 41:77:32:a6:42:85:6f:a0:21:b0:fc:62:e6:06:1e: b2:83:dc:b7:e9:52:26:ca:7e:62:94:53:68:11:8a: fa:4b:22:e1:76:67:d7:dd:28:bf:24:60:fe:bf:49: ff:ae:cf:d4:3a:f0:80:01:65:b1:68:de:b5:38:7c: 5d:7a:44:71:8e:82:b8:fa:64:86:1c:cb:b4:16:99: 45:a2:ca:ef:37:19:c0:1b:fc:fc:3d:db:dc:09:66: d2:33:2d:e2:ae:c0:42:f8:42:71:4a:27:0c:05:4a: 67:55:ac:f6:cf:d1:71:b1:67:19:11:42:69:b9:9b: 3b:b2:32:26:76:7c:37:80:6e:cd:38:6d:52:fe:db: c4:24:36:4d:69:e3:43:16:93:13:d7:31:e3:1d:2d: 6e:5a:c2:49:07:4d:76:5d:e6:96:23:4b:8c:6a:27: e6:30:01:f4:e5:59:5b:67:60:14:cc:cc:2d:fc:b9: 8d:3e:5d:d3:7f:97:1b:60:ca:42:87:fc:3a:c5:e9: 19:a3:78:63:9a:53:5c:52:6e:10:a0:35:ac:e6:5c: 88:db:45:ab:c6:56:cd:ee:d5:45:e8:e9:29:b6:50: 15:14:ec:93:d0:02:f5:ee:6f:b5:d0:e3:c0:f4:21: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:63:6A:A3:A1:7B:4C:E8:E4:72:BF:ED:93:7E:21:0C:0D:57:26:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1065f2b1-5696-3c0c-b381-eec1becb046e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e3:4f:05:92:bb:54:5d:a6:d7:a1:fc:81:00:3e:c3:0f:0e: ca:92:23:92:55:06:a8:ba:7a:9d:4a:f2:c3:36:2b:c5:21:8b: 72:6b:3f:14:61:d3:b1:67:35:25:a0:fb:c2:d0:62:ee:e0:cc: 61:d5:0f:f9:91:d1:87:b0:1f:ed:4d:6d:a8:a8:a4:62:b8:24: d1:c0:3f:ac:d2:de:7e:36:a9:2c:e9:2d:0f:77:46:bf:5e:70: 8e:d6:c6:f2:b5:37:f2:ad:5b:61:a8:eb:d1:35:28:67:ec:3a: f4:50:9d:e7:44:fd:a7:98:93:53:cf:e6:99:28:c4:4a:24:8c: c4:76:47:66:37:d8:9a:d9:2a:f6:02:b5:42:b9:eb:37:ec:1b: 48:93:f8:f3:0e:b5:70:0c:d6:f5:be:b8:9e:63:67:0a:a0:18: 93:d6:ce:86:7f:ab:46:6d:74:3e:07:6c:77:81:e5:34:14:60: 25:58:13:f6:f6:f7:40:02:12:b5:53:ee:e4:88:53:f8:e8:e4: 75:25:1f:e4:ee:b8:fe:eb:16:2b:4c:d2:fa:d7:12:94:59:5d: 92:21:6e:06:fe:4a:35:4d:7b:eb:2e:ca:4c:28:30:5d:fc:ed: c9:63:ba:7d:a7:0a:39:34:59:11:55:d2:53:09:e7:c6:41:58: ab:c4:88:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3Xn5EE3JRvy3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MGI2NmI1MDYtNjAxNi00OGJjLTkwNzUtZTA1NDIzZjJiZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0/TG2XcV/igd5F3UexBdzKmQoVvoCGw/GLm Bh6yg9y36VImyn5ilFNoEYr6SyLhdmfX3Si/JGD+v0n/rs/UOvCAAWWxaN61OHxd ekRxjoK4+mSGHMu0FplFosrvNxnAG/z8PdvcCWbSMy3irsBC+EJxSicMBUpnVaz2 z9FxsWcZEUJpuZs7sjImdnw3gG7NOG1S/tvEJDZNaeNDFpMT1zHjHS1uWsJJB012 XeaWI0uMaifmMAH05VlbZ2AUzMwt/LmNPl3Tf5cbYMpCh/w6xekZo3hjmlNcUm4Q oDWs5lyI20WrxlbN7tVF6OkptlAVFOyT0AL17m+10OPA9CEQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNjaqOhe0zo5HK/7ZN+IQwNVyatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTA2NWYyYjEtNTY5Ni0z YzBjLWIzODEtZWVjMWJlY2IwNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrjTwWSu1Rdpteh/IEAPsMPDsqSI5JVBqi6ep1K8sM2K8Uhi3JrPxRh 07FnNSWg+8LQYu7gzGHVD/mR0YewH+1NbaiopGK4JNHAP6zS3n42qSzpLQ93Rr9e cI7WxvK1N/KtW2Go69E1KGfsOvRQnedE/aeYk1PP5pkoxEokjMR2R2Y32JrZKvYC tUK56zfsG0iT+PMOtXAM1vW+uJ5jZwqgGJPWzoZ/q0ZtdD4HbHeB5TQUYCVYE/b2 90ACErVT7uSIU/jo5HUlH+TuuP7rFitM0vrXEpRZXZIhbgb+SjVNe+suykwoMF38 7cljun2nCjk0WRFV0lMJ58ZBWKvEiMQ= -----END CERTIFICATE-----Generated at Thu May 8 12:02:54 2025 by rpki-client