$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68ccd104-83c1-30ed-ba92-df713566a706.roa File: 68ccd104-83c1-30ed-ba92-df713566a706.roa (raw, json) Hash identifier: mrRRkNJqwrlRwsatcGq5zS4oiq+xSZsepeNQasno1oI= Subject key identifier: F8:20:21:99:A3:00:04:F9:52:1A:9D:83:61:DE:E5:C6:CA:0A:AD:9D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F7430C880B5B69C6438C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68ccd104-83c1-30ed-ba92-df713566a706.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:74:30:c8:80:b5:b6:9c:64:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=59adf80f-6cd3-4920-b976-8a1b2e79e07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:ab:44:0a:30:47:5a:8f:e9:76:09:75:cf: 09:dc:aa:2c:f1:f3:a9:39:41:c8:33:a3:d1:b1:35: 3d:de:9c:fc:84:01:76:69:7c:b8:3d:3d:f9:41:e6: 55:6c:07:be:d0:98:0a:a0:d1:48:ae:ab:75:80:3f: f8:f8:e7:61:a2:12:81:72:a2:b5:ed:34:6a:97:f7: fd:c3:17:5a:3f:49:f3:4b:dc:b1:21:e6:7e:76:8d: 15:60:42:58:87:96:3a:42:52:6c:58:40:d3:48:f9: 64:2e:da:8e:d9:bd:c1:bf:66:c5:f1:de:9a:13:71: cf:cc:b3:4f:9a:87:53:42:23:67:70:8b:99:37:02: ed:a3:f2:ac:c3:86:f3:19:6a:04:34:43:42:7c:4c: b5:3b:e4:74:d9:a5:e4:f0:4e:18:d5:fe:a8:88:b0: 17:29:9c:a7:e7:b3:3b:4c:7d:5d:8e:69:6a:74:e8: db:f5:29:ec:cf:87:5d:b8:67:f2:17:af:c2:d9:17: 57:4a:83:0e:79:a4:42:a8:ce:56:f5:cf:57:c2:af: 7a:eb:da:86:de:c0:86:3a:7c:e4:c3:18:a1:5a:a8: b7:89:0e:fa:56:98:c3:86:18:41:64:50:ea:d0:53: 4c:0a:5e:27:96:27:a2:a9:b3:1f:0b:d4:b7:38:26: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:20:21:99:A3:00:04:F9:52:1A:9D:83:61:DE:E5:C6:CA:0A:AD:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/68ccd104-83c1-30ed-ba92-df713566a706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bb:dd:8f:10:f7:b8:d2:89:d3:aa:f1:bc:c5:38:7e:26:56: 0d:e5:fc:f2:79:db:d7:c0:d7:98:4e:fd:50:ad:95:05:93:30: 10:d0:a5:ce:6a:68:90:49:8d:58:2c:9f:3d:8c:e9:85:30:f0: d5:74:6a:34:0c:41:3c:c4:ba:fd:b6:12:8b:d5:ed:48:d4:e9: 7c:36:e7:95:65:bc:17:0d:25:a2:af:b2:50:55:07:03:9c:4a: e8:f2:3f:3d:58:43:17:ea:0b:f7:24:64:76:3d:3e:d2:c6:7c: 48:12:8a:03:53:80:3c:be:6e:ee:2b:2c:45:32:e6:65:4c:91: ec:31:ef:06:bd:e5:7c:ff:56:2e:60:c3:11:e2:a5:53:09:9d: a6:3a:bf:19:44:b6:41:a9:96:cc:06:21:f0:55:ab:1b:1c:c3: 24:b1:41:21:81:5c:3d:cd:75:c8:a2:5f:82:0b:bb:b2:f7:62: ba:98:17:c5:0f:80:4c:68:82:36:23:02:8e:85:88:cb:7f:6c: ef:8d:9a:ba:67:25:c1:ff:64:b7:6f:5b:2c:04:49:aa:51:fa: 26:b3:8d:47:ab:10:62:36:1a:ad:d3:4d:3a:23:63:37:17:54: 6b:ec:4d:55:84:61:66:e8:ff:90:35:67:cf:8d:53:3f:ce:6a: 02:2f:0d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3QwyIC1tpxkOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NTlhZGY4MGYtNmNkMy00OTIwLWI5NzYtOGExYjJlNzllMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUOrRAowR1qP6XYJdc8J3Kos8fOpOUHIM6PR sTU93pz8hAF2aXy4PT35QeZVbAe+0JgKoNFIrqt1gD/4+OdhohKBcqK17TRql/f9 wxdaP0nzS9yxIeZ+do0VYEJYh5Y6QlJsWEDTSPlkLtqO2b3Bv2bF8d6aE3HPzLNP modTQiNncIuZNwLto/Ksw4bzGWoENENCfEy1O+R02aXk8E4Y1f6oiLAXKZyn57M7 TH1djmlqdOjb9Snsz4dduGfyF6/C2RdXSoMOeaRCqM5W9c9Xwq9669qG3sCGOnzk wxihWqi3iQ76VpjDhhhBZFDq0FNMCl4nlieiqbMfC9S3OCbsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPggIZmjAAT5Uhqdg2He5cbKCq2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjhjY2QxMDQtODNjMS0z MGVkLWJhOTItZGY3MTM1NjZhNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEljCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy73Y8Q97jSidOq8bzFOH4mVg3l/PJ529fA15hO/VCtlQWTMBDQpc5q aJBJjVgsnz2M6YUw8NV0ajQMQTzEuv22EovV7UjU6Xw255VlvBcNJaKvslBVBwOc SujyPz1YQxfqC/ckZHY9PtLGfEgSigNTgDy+bu4rLEUy5mVMkewx7wa95Xz/Vi5g wxHipVMJnaY6vxlEtkGplswGIfBVqxscwySxQSGBXD3NdciiX4ILu7L3YrqYF8UP gExogjYjAo6FiMt/bO+NmrpnJcH/ZLdvWywESapR+iazjUerEGI2Gq3TTTojYzcX VGvsTVWEYWbo/5A1Z8+NUz/OagIvDQk= -----END CERTIFICATE-----Generated at Sun Jun 29 21:10:43 2025 by rpki-client