$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6168b718-cd92-382a-abdb-30a8d8cfe64b.roa File: 6168b718-cd92-382a-abdb-30a8d8cfe64b.roa (raw, json) Hash identifier: OkauzFuwYbviZ1LbBtRqWb0OPbVSjo7zl/jVrQrB+RM= Subject key identifier: BC:50:DB:16:82:56:D7:A1:84:E5:2E:16:C5:17:A4:0D:BB:3E:C2:19 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F78EDFC981CD81E0C7DE0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6168b718-cd92-382a-abdb-30a8d8cfe64b.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:78:ed:fc:98:1c:d8:1e:0c:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=844a29bc-75ad-4bba-9a8f-8c19f07f8b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:9b:94:b1:72:b6:c7:e8:68:50:8d:53:dc: 48:87:44:e4:62:6a:5b:9c:89:2e:ca:96:be:6b:2d: 0e:a2:40:c9:a1:1f:3e:95:7d:43:c5:77:6d:e8:bc: 5c:3b:a1:6a:17:5f:70:a1:ef:75:33:57:33:f6:98: 6f:2e:3a:3b:6a:88:5a:24:d8:6f:3f:64:85:18:9b: 19:df:ea:c0:f1:1d:bb:d9:10:ea:36:0f:f6:b8:32: 12:7a:49:c8:ee:d3:f2:7e:df:a6:af:d2:f3:78:ed: eb:4d:24:5d:12:7f:20:25:67:32:0c:27:49:5c:69: a4:64:26:6e:8b:96:0b:a9:b8:66:07:df:a4:b5:4e: e3:cb:f0:f3:db:42:12:8b:fb:5e:be:60:04:4d:62: e0:1b:55:48:ce:c5:20:6a:ec:89:38:c1:05:fb:06: f8:81:60:a0:6b:fd:a0:32:a1:0e:2a:14:cf:36:66: 00:9f:bb:1a:3f:be:36:f4:4a:a9:13:18:87:e7:08: 91:ec:e6:7b:dd:eb:75:c4:1f:23:62:57:6e:82:c0: 2b:23:ef:8b:71:ec:98:04:72:97:b4:62:f7:c4:2e: 6f:5b:67:6e:17:20:e6:69:7e:64:b3:1e:f4:01:e8: 39:a2:89:10:62:ad:a9:d7:8b:61:33:28:08:b9:cf: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:50:DB:16:82:56:D7:A1:84:E5:2E:16:C5:17:A4:0D:BB:3E:C2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6168b718-cd92-382a-abdb-30a8d8cfe64b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:62:2c:9b:b4:75:b6:27:bf:92:4d:c7:bd:57:86:07:c0:f8: 0c:1e:db:71:a8:5e:8f:bc:8e:07:f0:9b:c6:d7:80:d2:27:7f: fc:e2:de:e4:85:ac:c0:2a:f7:43:1f:c2:7c:5e:60:de:11:f0: 15:d5:9f:89:b5:80:56:0e:2f:24:c7:8b:6b:de:3b:fd:a8:ff: 6c:b3:7f:da:06:fd:9b:cd:59:36:db:cd:94:15:fd:c4:45:c6: e4:87:ef:65:89:08:94:8b:27:2d:ce:12:5b:10:7d:96:67:8c: f0:11:0e:fc:5c:92:54:b7:4a:00:80:67:81:cb:ff:01:d2:b5: 1c:9c:b8:8c:e3:ae:30:25:b7:33:7d:be:db:61:fd:3c:28:d6: 0f:99:03:1d:56:36:28:48:12:9e:82:75:01:e5:0f:0d:b8:1a: fd:d5:9a:59:23:f1:fc:ed:a3:38:55:f9:e2:9f:93:ba:53:ba: 14:9a:1f:18:28:d6:e0:19:68:19:53:9e:a4:ca:cc:8c:24:b0: cf:96:7e:58:d4:4f:5d:51:20:81:a2:49:ed:1e:71:53:28:20: 0f:3f:1d:8d:8a:5b:90:91:e3:03:57:7d:c6:7d:6e:d3:c5:15: af:5f:57:2f:64:4c:b0:c8:fb:a4:19:43:6f:cd:ce:87:8d:1d: b2:82:89:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3jt/Jgc2B4MfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ODQ0YTI5YmMtNzVhZC00YmJhLTlhOGYtOGMxOWYwN2Y4YjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPablLFytsfoaFCNU9xIh0TkYmpbnIkuypa+ ay0OokDJoR8+lX1DxXdt6LxcO6FqF19woe91M1cz9phvLjo7aohaJNhvP2SFGJsZ 3+rA8R272RDqNg/2uDISeknI7tPyft+mr9LzeO3rTSRdEn8gJWcyDCdJXGmkZCZu i5YLqbhmB9+ktU7jy/Dz20ISi/tevmAETWLgG1VIzsUgauyJOMEF+wb4gWCga/2g MqEOKhTPNmYAn7saP7429EqpExiH5wiR7OZ73et1xB8jYldugsArI++LceyYBHKX tGL3xC5vW2duFyDmaX5ksx70Aeg5ookQYq2p14thMygIuc8GewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxQ2xaCVtehhOUuFsUXpA27PsIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjE2OGI3MTgtY2Q5Mi0z ODJhLWFiZGItMzBhOGQ4Y2ZlNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRiLJu0dbYnv5JNx71XhgfA+Awe23GoXo+8jgfwm8bXgNInf/zi3uSF rMAq90MfwnxeYN4R8BXVn4m1gFYOLyTHi2veO/2o/2yzf9oG/ZvNWTbbzZQV/cRF xuSH72WJCJSLJy3OElsQfZZnjPARDvxcklS3SgCAZ4HL/wHStRycuIzjrjAltzN9 vtth/Two1g+ZAx1WNihIEp6CdQHlDw24Gv3Vmlkj8fztozhV+eKfk7pTuhSaHxgo 1uAZaBlTnqTKzIwksM+WfljUT11RIIGiSe0ecVMoIA8/HY2KW5CR4wNXfcZ9btPF Fa9fVy9kTLDI+6QZQ2/NzoeNHbKCiYk= -----END CERTIFICATE-----Generated at Tue May 6 07:21:38 2025 by rpki-client