$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f015a984-5da5-366c-8ba2-cf84571ad90e.roa File: f015a984-5da5-366c-8ba2-cf84571ad90e.roa (raw, json) Hash identifier: UrnGzk8VbVTG1+s0VI+rPyUKo2pmhZWI18sb0v9jA2c= Subject key identifier: 69:21:E7:0C:21:A9:83:E2:C5:0A:51:D8:C3:3A:60:0D:E1:90:20:E7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F76F9A89FECAAB03B0600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f015a984-5da5-366c-8ba2-cf84571ad90e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:76:f9:a8:9f:ec:aa:b0:3b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=a36d9a83-343a-4572-af5e-854beec5189e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:94:a2:f6:23:0a:d9:a8:59:d6:52:28:ff:d0: 20:51:53:d5:f8:82:a8:e1:9c:3c:25:77:4f:1a:bd: 30:7e:5e:47:34:b6:53:f7:a7:63:0f:15:c0:b4:f0: ee:4d:57:e2:f2:9a:66:6f:99:d0:6e:ed:18:7c:90: 8b:aa:98:c5:89:c0:89:c6:cd:64:5b:9f:6c:c0:45: 87:c0:a2:44:48:b3:da:ff:ba:b3:81:b7:ae:57:fd: 12:93:70:91:cb:72:f5:ad:61:0a:44:f1:bd:59:b8: 31:9c:a7:d6:86:1e:44:92:c0:b6:82:14:9e:73:f9: 85:f2:e2:81:0d:8f:bd:de:82:be:11:d6:a7:11:13: 20:8f:63:7d:14:e5:b8:4e:b1:45:e4:92:8b:50:90: a4:65:84:11:97:02:a7:fc:d1:8c:e0:8e:81:bb:c4: b3:26:44:64:b0:f9:51:60:55:63:e6:0a:81:aa:a5: 44:44:7f:b9:43:1b:4c:57:6c:ea:14:c8:a9:05:3e: cd:87:57:a7:24:d4:23:ac:59:b1:d1:33:fe:27:83: 81:ab:4b:d8:22:30:99:5a:13:e3:13:1e:0c:ef:b6: ec:84:b6:ad:43:0b:45:e1:fd:f7:7b:0b:50:f4:28: 41:47:cc:25:a8:77:d0:e7:ca:52:14:6f:5c:c7:73: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:21:E7:0C:21:A9:83:E2:C5:0A:51:D8:C3:3A:60:0D:E1:90:20:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f015a984-5da5-366c-8ba2-cf84571ad90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d7:a7:01:1c:f4:0e:2f:28:7e:26:6c:76:cb:eb:89:70:c7: 7c:06:ce:90:ae:f6:90:b5:8f:31:01:44:09:3b:37:75:1f:20: 51:e2:16:52:7b:c2:a6:b3:06:4d:5f:e2:01:4f:19:b3:c8:8e: b9:b9:ed:34:1f:a3:f5:6b:e6:13:c7:56:ca:52:f0:a8:b2:0c: cd:6f:bd:3e:e6:21:21:39:71:7c:33:cd:9c:df:db:2c:f0:d3: 45:bc:5b:16:f8:49:7f:f7:3b:d5:b7:73:57:79:d3:c0:d2:b2: 82:f3:83:97:e5:6d:e2:33:8e:33:39:94:d8:85:13:49:de:e0: 24:8b:13:94:c2:53:45:7c:97:12:17:5f:99:7f:fc:8a:a4:61: 7f:1b:27:a8:67:bc:0f:33:47:5b:af:99:25:6f:14:90:d9:1a: df:7f:09:2c:af:7f:10:8a:8e:36:90:d9:37:52:ff:30:24:cd: ee:d2:e5:06:52:27:f3:d5:be:15:cd:ab:66:ee:89:0a:87:d2: a2:6d:7a:26:4f:b3:f3:03:c1:f4:16:22:93:5d:c9:33:23:e9: 6b:31:35:45:59:e4:14:16:9f:3c:2d:b4:17:b3:85:85:af:5e: e6:85:2b:66:8d:d8:e2:b5:43:79:bf:b6:ae:82:eb:ba:9c:f4: 8f:21:62:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3b5qJ/sqrA7BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YTM2ZDlhODMtMzQzYS00NTcyLWFmNWUtODU0YmVlYzUxODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Si9iMK2ahZ1lIo/9AgUVPV+IKo4Zw8JXdP Gr0wfl5HNLZT96djDxXAtPDuTVfi8ppmb5nQbu0YfJCLqpjFicCJxs1kW59swEWH wKJESLPa/7qzgbeuV/0Sk3CRy3L1rWEKRPG9WbgxnKfWhh5EksC2ghSec/mF8uKB DY+93oK+EdanERMgj2N9FOW4TrFF5JKLUJCkZYQRlwKn/NGM4I6Bu8SzJkRksPlR YFVj5gqBqqVERH+5QxtMV2zqFMipBT7Nh1enJNQjrFmx0TP+J4OBq0vYIjCZWhPj Ex4M77bshLatQwtF4f33ewtQ9ChBR8wlqHfQ58pSFG9cx3N3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkh5wwhqYPixQpR2MM6YA3hkCDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjAxNWE5ODQtNWRhNS0z NjZjLThiYTItY2Y4NDU3MWFkOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEljCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzXpwEc9A4vKH4mbHbL64lwx3wGzpCu9pC1jzEBRAk7N3UfIFHiFlJ7 wqazBk1f4gFPGbPIjrm57TQfo/Vr5hPHVspS8KiyDM1vvT7mISE5cXwzzZzf2yzw 00W8Wxb4SX/3O9W3c1d508DSsoLzg5flbeIzjjM5lNiFE0ne4CSLE5TCU0V8lxIX X5l//IqkYX8bJ6hnvA8zR1uvmSVvFJDZGt9/CSyvfxCKjjaQ2TdS/zAkze7S5QZS J/PVvhXNq2buiQqH0qJteiZPs/MDwfQWIpNdyTMj6WsxNUVZ5BQWnzwttBezhYWv XuaFK2aN2OK1Q3m/tq6C67qc9I8hYs8= -----END CERTIFICATE-----Generated at Wed May 7 11:21:03 2025 by rpki-client