$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/633ac317-5fd0-39ef-9d02-1ea5772b60dc.roa File: 633ac317-5fd0-39ef-9d02-1ea5772b60dc.roa (raw, json) Hash identifier: ARsYI6dJXxHrirDmKrE6FuI8PQT19odgevg805kuOEs= Subject key identifier: 06:D9:9B:45:AE:10:5F:AB:E1:50:9E:8F:35:B7:C5:CC:53:87:3F:83 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F7A1C8242B38FA927EF00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/633ac317-5fd0-39ef-9d02-1ea5772b60dc.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:7a:1c:82:42:b3:8f:a9:27:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=0f9d617a-a896-4374-8d38-076ba4524fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:67:06:84:0c:9b:90:ef:78:37:4d:f8:22: 74:fd:a9:a0:fd:f7:98:d7:81:08:7a:8e:38:d8:91: 7a:5d:3e:39:9e:af:1a:b6:94:a6:07:c9:a2:b7:d3: ac:6c:bc:02:a2:78:76:78:46:80:45:85:7c:b1:68: 9b:1f:62:89:22:39:7b:e4:b6:e0:7a:db:b2:75:4d: 54:fa:23:58:8b:77:e1:3d:e5:44:e5:f3:6c:45:ea: 11:b7:01:9f:db:81:27:d2:35:7f:61:9a:41:48:8c: 09:12:47:71:ac:e6:41:48:7d:4e:66:97:9d:63:a1: af:2a:2c:38:fb:ec:7f:a4:ba:14:77:66:27:95:ac: d8:36:ff:4f:07:29:ff:c5:87:00:4a:66:e0:f6:f7: 99:92:47:90:3f:4e:cd:6b:7f:7e:23:7a:71:ef:f6: c7:58:d3:8a:6c:2b:34:7e:72:f4:4b:3a:65:2b:c1: fd:0b:3b:e6:30:ef:5a:d0:76:ef:28:f8:da:9a:a3: cd:51:8e:bc:ff:d3:ed:fb:53:50:4d:ea:2d:7e:ad: d5:db:c5:02:10:89:73:b7:96:4d:54:e6:b0:12:d9: 7c:c5:a1:e6:8d:a9:2d:c8:be:6d:84:dc:54:ce:a7: 55:a3:05:1c:35:c6:b4:94:99:c2:96:15:6e:02:16: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D9:9B:45:AE:10:5F:AB:E1:50:9E:8F:35:B7:C5:CC:53:87:3F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/633ac317-5fd0-39ef-9d02-1ea5772b60dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:41:62:90:c7:6b:2f:10:77:fd:a3:42:6c:32:ac:4f:81:c5: 1b:cd:84:e5:75:7f:26:81:82:22:97:f5:18:43:ad:7c:04:0b: 2b:55:24:32:a9:81:14:53:8a:f2:6a:c5:fe:50:2d:3c:21:d2: c7:2f:64:d4:89:90:1f:a5:dd:59:07:c3:1c:85:d8:7f:37:8f: 43:38:a3:d0:fd:a9:38:5e:3c:db:6a:cb:30:28:3b:5a:ac:3f: 47:1a:c5:7c:91:88:92:42:68:59:c2:70:5a:e3:93:a3:22:12: 46:84:c3:ce:ef:e5:35:56:c1:7c:77:fe:1f:5f:58:45:8c:de: 02:ea:a8:90:19:b8:44:47:87:a8:3b:98:a8:87:9d:8d:bc:66: 03:29:9b:02:5b:96:db:57:8f:2e:52:6d:bf:46:b6:4c:e2:31: cc:c8:ee:38:67:cb:3a:ef:e2:a5:e1:b2:5f:a6:cc:a6:f3:96: 66:77:21:b0:aa:19:6c:df:7b:56:68:82:e5:7e:54:7a:b8:02: 0e:d2:90:0c:01:be:f5:be:2c:58:50:82:50:ce:26:82:1a:44: 08:7e:38:bc:7a:d6:87:b1:98:01:a4:66:ae:18:f1:c5:53:08: 2b:be:86:85:47:94:49:fe:04:4e:65:2f:d0:53:41:01:ac:22: 70:a5:e3:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3ocgkKzj6kn7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MGY5ZDYxN2EtYTg5Ni00Mzc0LThkMzgtMDc2YmE0NTI0ZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjetnBoQMm5DveDdN+CJ0/amg/feY14EIeo44 2JF6XT45nq8atpSmB8mit9OsbLwConh2eEaARYV8sWibH2KJIjl75LbgetuydU1U +iNYi3fhPeVE5fNsReoRtwGf24En0jV/YZpBSIwJEkdxrOZBSH1OZpedY6GvKiw4 ++x/pLoUd2YnlazYNv9PByn/xYcASmbg9veZkkeQP07Na39+I3px7/bHWNOKbCs0 fnL0SzplK8H9CzvmMO9a0HbvKPjamqPNUY68/9Pt+1NQTeotfq3V28UCEIlzt5ZN VOawEtl8xaHmjaktyL5thNxUzqdVowUcNca0lJnClhVuAhbQeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbZm0WuEF+r4VCejzW3xcxThz+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjMzYWMzMTctNWZkMC0z OWVmLTlkMDItMWVhNTc3MmI2MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpBYpDHay8Qd/2jQmwyrE+BxRvNhOV1fyaBgiKX9RhDrXwECytVJDKp gRRTivJqxf5QLTwh0scvZNSJkB+l3VkHwxyF2H83j0M4o9D9qThePNtqyzAoO1qs P0caxXyRiJJCaFnCcFrjk6MiEkaEw87v5TVWwXx3/h9fWEWM3gLqqJAZuERHh6g7 mKiHnY28ZgMpmwJblttXjy5Sbb9GtkziMczI7jhnyzrv4qXhsl+mzKbzlmZ3IbCq GWzfe1ZoguV+VHq4Ag7SkAwBvvW+LFhQglDOJoIaRAh+OLx61oexmAGkZq4Y8cVT CCu+hoVHlEn+BE5lL9BTQQGsInCl484= -----END CERTIFICATE-----Generated at Sat May 10 21:00:22 2025 by rpki-client