$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3e28f2c-2884-35db-9311-41f992dabd4c.roa File: e3e28f2c-2884-35db-9311-41f992dabd4c.roa (raw, json) Hash identifier: GsMHJhBitKsrhv4DYHagtUeobk6hAhPBE1G9HidiMOg= Subject key identifier: 2A:39:7C:F0:5E:C5:64:27:14:8D:5B:16:57:A7:7C:97:46:06:C8:FA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F7BA0A9E1E907B42AD080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3e28f2c-2884-35db-9311-41f992dabd4c.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:7b:a0:a9:e1:e9:07:b4:2a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=b809c716-18f9-4fdf-96dc-7f2679a467ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:58:e9:2f:6e:10:a4:2a:91:ea:e2:a9:cd: 89:ac:e9:4d:86:25:ac:cc:d8:b9:ee:ec:c8:bf:ae: 2b:ca:e1:72:ac:0a:db:2f:25:e3:4b:5d:9e:6e:6d: cb:f1:cd:16:a0:a0:ca:dd:a8:7f:53:f8:2d:e8:2f: 2b:7d:69:39:ad:fa:c7:d9:e1:d9:53:94:d7:5b:2d: d3:93:6d:9c:a1:97:e9:1b:0f:24:04:be:6b:f2:9f: d6:c3:d3:68:3c:42:52:14:65:30:9b:2a:14:d9:9b: bb:40:9c:92:d0:eb:43:43:cb:e7:09:41:69:aa:da: 6b:cd:01:98:bd:db:ac:bb:68:a4:c4:fa:9c:d6:ee: e3:3d:87:86:b7:2e:2d:40:48:2c:90:8d:96:4c:ba: 94:65:fc:5b:b3:66:0b:5d:1d:e3:68:2b:6d:de:93: 81:73:bb:1e:de:3d:27:f4:41:52:15:1f:22:78:dd: c2:25:b4:51:f1:3a:0a:97:ee:de:52:ac:29:af:1c: 49:d4:b4:7b:09:6f:3e:66:dc:82:f6:8f:14:0c:25: f4:ae:f0:07:42:57:1c:dc:72:27:51:0f:a9:a9:75: 0e:c9:df:bd:43:87:bf:50:2e:6c:88:f5:d1:48:d5: 1d:c3:7d:bc:2a:ff:51:81:36:f2:9b:2b:49:ef:89: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:7C:F0:5E:C5:64:27:14:8D:5B:16:57:A7:7C:97:46:06:C8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3e28f2c-2884-35db-9311-41f992dabd4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0c:eb:3c:01:78:ee:5c:61:4f:69:5c:c6:a4:f5:6f:22:c0: 9d:5f:86:57:e2:8e:9a:7b:12:37:f9:33:79:75:b9:65:84:fd: e4:0f:01:5b:d5:e6:e9:65:d7:17:2b:ce:c1:59:8b:df:12:82: 3d:3e:2a:a3:14:9d:98:77:44:2c:8d:57:b3:08:e5:98:42:89: c1:aa:d5:7b:07:22:41:aa:55:db:5a:56:9d:55:a6:5c:c3:88: 97:18:38:1b:05:3c:aa:f5:b6:df:3b:b8:1d:d9:de:26:b2:f5: 13:80:48:0f:da:b8:fb:31:c3:6f:a8:b8:22:63:85:14:43:9b: 3d:94:a7:93:8f:87:5b:5c:c6:50:95:c2:a9:15:9b:86:f9:90: b1:79:a8:c4:15:c8:19:c2:c4:cd:13:fe:67:5b:79:51:45:84: d5:ec:2c:b3:99:11:9d:ce:14:55:11:eb:3a:70:87:a4:de:2b: 3b:d6:3a:b5:bf:de:3c:cd:99:ff:ac:93:6e:71:e9:05:76:41: 27:fa:c9:84:e5:b3:38:d6:c8:c4:69:41:8b:8e:4b:86:7b:af: 5e:7f:77:46:54:3c:a9:b0:43:fc:a7:35:29:f0:95:60:7d:56: e1:ec:d0:0d:c5:ad:39:a9:84:a0:89:82:1b:fc:36:c1:1d:a4: 54:0c:6c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3ugqeHpB7Qq0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YjgwOWM3MTYtMThmOS00ZmRmLTk2ZGMtN2YyNjc5YTQ2N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg5Y6S9uEKQqkeriqc2JrOlNhiWszNi57uzI v64ryuFyrArbLyXjS12ebm3L8c0WoKDK3ah/U/gt6C8rfWk5rfrH2eHZU5TXWy3T k22coZfpGw8kBL5r8p/Ww9NoPEJSFGUwmyoU2Zu7QJyS0OtDQ8vnCUFpqtprzQGY vdusu2ikxPqc1u7jPYeGty4tQEgskI2WTLqUZfxbs2YLXR3jaCtt3pOBc7se3j0n 9EFSFR8ieN3CJbRR8ToKl+7eUqwprxxJ1LR7CW8+ZtyC9o8UDCX0rvAHQlcc3HIn UQ+pqXUOyd+9Q4e/UC5siPXRSNUdw328Kv9RgTbymytJ74n3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo5fPBexWQnFI1bFlenfJdGBsj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTNlMjhmMmMtMjg4NC0z NWRiLTkzMTEtNDFmOTkyZGFiZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAM6zwBeO5cYU9pXMak9W8iwJ1fhlfijpp7Ejf5M3l1uWWE/eQPAVvV 5ull1xcrzsFZi98Sgj0+KqMUnZh3RCyNV7MI5ZhCicGq1XsHIkGqVdtaVp1VplzD iJcYOBsFPKr1tt87uB3Z3iay9ROASA/auPsxw2+ouCJjhRRDmz2Up5OPh1tcxlCV wqkVm4b5kLF5qMQVyBnCxM0T/mdbeVFFhNXsLLOZEZ3OFFUR6zpwh6TeKzvWOrW/ 3jzNmf+sk25x6QV2QSf6yYTlszjWyMRpQYuOS4Z7r15/d0ZUPKmwQ/ynNSnwlWB9 VuHs0A3FrTmphKCJghv8NsEdpFQMbCs= -----END CERTIFICATE-----Generated at Tue May 6 15:01:37 2025 by rpki-client