$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa File: a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa (raw, json) Hash identifier: wwJXRle9jMQzsmKtaJ24Sp93OL7kjLcL3W1fnrdOHN8= Subject key identifier: EC:21:17:BB:90:C4:71:28:D9:38:48:8D:3C:AB:B4:69:CB:EE:90:60 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F7B284DDCB2284DB56100 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:7b:28:4d:dc:b2:28:4d:b5:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=fb53f6ce-b9b6-4bae-97f9-02f4002f7bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:ae:31:f7:49:0b:f4:bd:cb:51:f1:a3:4b: d0:26:96:a5:0b:83:fe:98:e1:73:b7:1e:5f:d7:c6: 02:de:d7:07:3e:87:61:95:89:43:e7:cf:44:80:ad: 97:59:24:32:a1:64:04:3d:fc:9b:77:92:85:9c:9c: 42:90:1e:e5:37:b5:97:30:a8:b1:56:ef:fe:8f:62: c1:9c:81:3b:a3:52:1b:ac:15:f5:ec:17:31:e5:52: 12:27:e5:35:86:f0:df:21:9e:28:71:95:43:cf:b9: 99:8a:7a:e0:02:c7:9f:91:94:0a:0d:74:d0:3a:c3: 18:32:a6:07:b5:c3:f9:bb:fd:f5:c8:b6:7a:fa:29: 17:c3:17:9c:27:5b:a2:77:54:ad:d1:d0:ee:9b:f9: 0a:cd:65:7d:56:3b:6e:08:ee:9e:57:27:24:65:9f: 4c:4c:55:9b:30:cd:04:6b:5f:6e:5d:10:db:ae:88: 01:c2:db:55:41:63:43:2b:65:90:0c:26:76:02:ea: b4:8e:2b:83:e6:c8:59:4d:a4:25:b4:2c:ea:15:34: 5b:1e:a5:c9:fe:7a:16:e1:46:b5:64:da:09:e0:b3: 98:d3:d8:7b:d4:f3:c3:09:24:e9:da:fd:1f:d4:29: 9b:2c:a1:cf:66:4e:2e:4a:82:b4:6e:28:bf:3e:56: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:21:17:BB:90:C4:71:28:D9:38:48:8D:3C:AB:B4:69:CB:EE:90:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7c:04:ca:75:86:eb:9d:50:38:ea:ec:f6:72:b2:00:0c:ed: f3:36:7b:2b:a8:06:ba:12:9a:1a:3c:53:ad:74:73:02:24:45: fa:bb:2d:db:f3:2f:84:79:8b:42:42:5a:ab:b0:dc:50:78:fc: 19:1c:d6:e5:8a:f0:53:5e:3b:56:d3:74:c5:bc:df:ae:84:65: d3:63:b2:f0:b8:44:08:60:57:d5:92:5b:53:ea:a4:d8:dd:1d: 67:69:4a:eb:1d:68:9a:5b:e0:82:8d:3c:f6:17:dc:f2:f7:a2: d0:a2:8f:61:c9:0e:18:3d:bb:93:6a:86:6a:eb:01:9d:46:f0: f7:9b:2d:e3:57:ab:0c:7f:d2:82:44:f8:cb:e0:03:b4:ce:0c: fe:f8:28:e6:7c:fd:51:10:b1:14:44:1b:e0:9a:d3:54:0e:20: cb:74:bd:90:a2:e0:dd:78:1f:b4:d3:aa:67:b2:a0:8f:48:16: 95:97:e3:6f:65:a4:31:f3:26:c5:ad:e3:7d:4d:3f:89:70:f1: 8c:39:92:68:e4:29:77:66:c3:63:0e:39:fd:8d:2b:db:74:51: 0c:88:38:a1:a2:c2:7c:6a:43:92:8f:c3:ee:4b:eb:dc:59:73: d6:d1:ef:6e:c4:1a:74:fc:ca:cd:45:aa:36:82:d2:d5:c8:e8: e6:b4:bf:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3soTdyyKE21YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZmI1M2Y2Y2UtYjliNi00YmFlLTk3ZjktMDJmNDAwMmY3YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FauMfdJC/S9y1Hxo0vQJpalC4P+mOFztx5f 18YC3tcHPodhlYlD589EgK2XWSQyoWQEPfybd5KFnJxCkB7lN7WXMKixVu/+j2LB nIE7o1IbrBX17Bcx5VISJ+U1hvDfIZ4ocZVDz7mZinrgAsefkZQKDXTQOsMYMqYH tcP5u/31yLZ6+ikXwxecJ1uid1St0dDum/kKzWV9VjtuCO6eVyckZZ9MTFWbMM0E a19uXRDbrogBwttVQWNDK2WQDCZ2Auq0jiuD5shZTaQltCzqFTRbHqXJ/noW4Ua1 ZNoJ4LOY09h71PPDCSTp2v0f1CmbLKHPZk4uSoK0bii/PlbVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwhF7uQxHEo2ThIjTyrtGnL7pBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTE2NGYzZjgtZGUwOC0z ODkyLTk1YjktZjhmYTI2YjUwZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId8BMp1huudUDjq7PZysgAM7fM2eyuoBroSmho8U610cwIkRfq7Ldvz L4R5i0JCWquw3FB4/Bkc1uWK8FNeO1bTdMW8366EZdNjsvC4RAhgV9WSW1PqpNjd HWdpSusdaJpb4IKNPPYX3PL3otCij2HJDhg9u5NqhmrrAZ1G8PebLeNXqwx/0oJE +MvgA7TODP74KOZ8/VEQsRREG+Ca01QOIMt0vZCi4N14H7TTqmeyoI9IFpWX429l pDHzJsWt431NP4lw8Yw5kmjkKXdmw2MOOf2NK9t0UQyIOKGiwnxqQ5KPw+5L69xZ c9bR727EGnT8ys1FqjaC0tXI6Oa0v6k= -----END CERTIFICATE-----Generated at Wed May 7 14:14:55 2025 by rpki-client