$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa File: 6c80e3d5-346d-3567-9003-79a6e213a98d.roa (raw, json) Hash identifier: Zyjj4Af4DlO/8GRglOt6AmxJ5EN2bdgf4DaqTRVK9X8= Subject key identifier: 66:3B:31:52:F0:28:BD:12:38:41:5B:F9:5F:D2:C1:79:DC:BA:DF:2B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F77E79B33E65A71681778 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:77:e7:9b:33:e6:5a:71:68:17:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=8ffe790f-2c49-46e4-9a22-ebd915ed0083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:72:e3:4e:fb:96:3d:c1:d5:40:cd:78:94: f0:f7:1c:93:71:34:eb:26:41:ce:8c:d1:6c:93:28: 1a:60:d9:6d:97:fe:67:67:e7:d6:26:84:b1:5d:9b: 1c:dd:b9:5d:b1:a0:57:2b:ce:9d:84:7e:4a:28:33: 10:eb:82:41:cf:2e:15:25:e7:ff:a9:ce:ca:d3:1b: de:5b:4f:dc:8d:db:01:cb:d4:c7:f8:2f:95:b3:87: fa:5c:b6:b7:dc:ac:e1:8f:80:7d:e1:06:84:ed:57: 54:6f:90:4d:f1:a8:9d:a0:4b:cc:6e:fc:bf:72:a8: 9f:ce:9e:cf:61:a9:32:3a:48:73:b9:ec:d2:4c:fd: 55:0d:08:44:b1:48:ad:22:1c:c8:8b:87:7f:3a:8e: 04:86:31:91:3b:52:58:2b:71:9d:a7:86:14:a3:27: 05:66:a0:c4:6e:49:a0:ae:63:8c:7e:c3:1d:8b:94: 80:35:2e:bb:37:dc:7e:99:a3:30:d2:23:bc:84:f9: 61:da:0e:5f:b2:f6:dd:90:f8:70:7b:92:0d:d3:95: ae:dc:05:67:45:45:e4:7d:1b:8a:a3:c5:0b:6d:a7: a3:2a:cf:c6:e4:c9:e8:db:9e:f1:88:45:6b:6c:4a: 7c:76:36:48:a7:62:e8:5f:ce:8e:fb:73:67:df:58: 09:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3B:31:52:F0:28:BD:12:38:41:5B:F9:5F:D2:C1:79:DC:BA:DF:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7b:7d:30:7d:72:a7:1a:b7:b0:f5:b0:74:10:24:ff:c6:d7: c6:a3:1a:df:e6:55:8d:94:4d:36:15:2d:a1:57:97:40:0d:0b: 45:e4:eb:3d:b2:90:12:ac:f1:b5:41:d9:cc:db:f0:7f:6c:69: d2:79:45:8a:d8:32:6f:fc:90:3a:e3:7a:90:15:a1:ab:38:5b: 6a:e8:e9:a2:ab:f4:e6:57:a1:66:cc:24:72:32:65:3c:84:83: cd:de:76:e4:c8:c8:ac:ba:95:e2:15:da:05:71:b9:50:1c:87: 55:d1:61:ec:94:e3:9d:16:5e:d6:30:d7:80:84:f2:28:26:67: 01:ef:95:c4:c7:64:3d:13:67:82:bd:38:71:a1:1d:ec:15:36: aa:76:6c:4f:15:29:06:f4:22:9d:2b:3f:25:69:1d:45:ac:c0: 19:f2:b3:a2:72:0a:74:77:f5:e3:50:99:55:1b:c4:50:89:31: 8b:b6:e7:92:56:aa:70:13:b9:e8:f9:cf:4f:06:51:3b:55:b2: 9c:73:fc:8b:25:06:b1:62:ca:a9:14:9b:ee:1b:f2:19:83:ee: 56:a7:83:65:87:88:a3:f4:73:aa:24:4a:2b:9d:b5:73:6f:01: f0:e2:48:3a:8e:6a:a5:8e:2a:a8:a3:33:8a:7e:91:d7:b8:f6: bd:08:03:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3fnmzPmWnFoF3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk OGZmZTc5MGYtMmM0OS00NmU0LTlhMjItZWJkOTE1ZWQwMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+dy4077lj3B1UDNeJTw9xyTcTTrJkHOjNFs kygaYNltl/5nZ+fWJoSxXZsc3bldsaBXK86dhH5KKDMQ64JBzy4VJef/qc7K0xve W0/cjdsBy9TH+C+Vs4f6XLa33Kzhj4B94QaE7VdUb5BN8aidoEvMbvy/cqifzp7P YakyOkhzuezSTP1VDQhEsUitIhzIi4d/Oo4EhjGRO1JYK3Gdp4YUoycFZqDEbkmg rmOMfsMdi5SANS67N9x+maMw0iO8hPlh2g5fsvbdkPhwe5IN05Wu3AVnRUXkfRuK o8ULbaejKs/G5Mno257xiEVrbEp8djZIp2LoX86O+3Nn31gJWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY7MVLwKL0SOEFb+V/SwXncut8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmM4MGUzZDUtMzQ2ZC0z NTY3LTkwMDMtNzlhNmUyMTNhOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF57fTB9cqcat7D1sHQQJP/G18ajGt/mVY2UTTYVLaFXl0ANC0Xk6z2y kBKs8bVB2czb8H9sadJ5RYrYMm/8kDrjepAVoas4W2ro6aKr9OZXoWbMJHIyZTyE g83eduTIyKy6leIV2gVxuVAch1XRYeyU450WXtYw14CE8igmZwHvlcTHZD0TZ4K9 OHGhHewVNqp2bE8VKQb0Ip0rPyVpHUWswBnys6JyCnR39eNQmVUbxFCJMYu255JW qnATuej5z08GUTtVspxz/IslBrFiyqkUm+4b8hmD7lang2WHiKP0c6okSiudtXNv AfDiSDqOaqWOKqijM4p+kde49r0IA9o= -----END CERTIFICATE-----Generated at Thu May 8 18:59:40 2025 by rpki-client