$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf02e7f-386d-3783-bb15-de21f6887f66.roa File: bbf02e7f-386d-3783-bb15-de21f6887f66.roa (raw, json) Hash identifier: CTcjrxhzxN/7/k9mENslOUsPlOvrbTp4zlUCU89kXW4= Subject key identifier: 14:7E:82:09:48:A3:21:71:5A:8B:44:6E:E0:30:23:8C:FD:8C:26:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849676503F56EF13AE6F96CAE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf02e7f-386d-3783-bb15-de21f6887f66.roa Signing time: Thu 03 Apr 2025 13:45:37 +0000 ROA not before: Thu 03 Apr 2025 13:45:37 +0000 ROA not after: Wed 02 Jul 2025 13:45:37 +0000 asID: 19905 IP address blocks: 150.195.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:65:03:f5:6e:f1:3a:e6:f9:6c:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 3 13:45:37 2025 GMT Not After : Jul 2 13:45:37 2025 GMT Subject: CN=f5a0cfea-60bf-46be-ab10-e08905b7e177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b1:6d:b6:84:df:d3:2e:ea:82:3a:63:aa:db: a1:94:73:f6:b2:a2:8d:22:8f:5e:13:80:58:34:2d: 44:9a:35:6b:9a:52:22:d6:47:38:f2:56:00:c0:f7: 02:f8:a9:53:54:27:08:52:69:d5:19:cf:ed:69:44: ac:e6:7d:e5:4d:8e:a9:35:a9:13:0e:c9:52:1e:89: 9c:35:52:cf:d5:36:9d:e1:1c:85:b9:ab:68:8d:01: 83:20:6e:92:23:cb:f1:ac:51:49:d0:5a:20:4d:21: 23:58:57:c5:62:f6:1a:02:0f:ba:e6:02:6a:9b:da: 9b:77:c1:80:4a:24:ff:ec:9a:e6:d2:b1:2b:2e:d8: 2d:d7:5e:c2:06:38:58:6b:26:75:d0:cd:77:23:6e: 0f:2d:f3:ac:41:e2:2f:f3:6f:bd:be:49:f6:5b:b9: b5:ed:e2:f7:3e:0d:79:db:4d:90:19:54:c7:95:41: 46:80:4e:2e:91:c0:44:8e:b2:75:69:b9:53:70:25: bf:8c:93:04:97:da:a5:9e:f3:cc:67:3d:c9:46:fc: 62:5e:2f:f6:54:fc:73:6e:82:aa:99:68:e7:db:83: 05:d6:2e:40:b2:4b:8a:2f:9f:e9:4c:00:70:5d:81: c2:fb:0a:30:2a:13:d7:9b:a0:98:39:c6:2d:1e:17: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7E:82:09:48:A3:21:71:5A:8B:44:6E:E0:30:23:8C:FD:8C:26:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf02e7f-386d-3783-bb15-de21f6887f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7e:60:fd:2c:54:9d:3d:2b:f4:6a:2c:5a:cc:83:a6:83:de: 78:a1:6a:95:b5:e8:ff:49:0f:be:a9:97:6c:d7:e3:37:30:4e: 45:73:91:b9:e6:85:ca:05:5e:24:e8:3b:af:4e:da:41:b4:b2: ca:aa:c1:69:7b:89:43:25:28:f1:8b:44:6e:08:b8:53:90:89: fa:94:cd:73:cb:f6:40:a6:f0:d7:83:50:ed:91:c6:ab:41:d2: 68:c1:e1:28:89:45:64:cb:bb:b2:5d:5f:41:85:1f:df:fe:be: 6a:ab:2c:de:6a:05:ce:25:5d:cc:91:7f:89:44:ce:5e:3c:d5: 48:2b:37:bf:7e:c1:d7:43:42:2c:2e:58:95:f4:9e:14:9c:a5: 35:f2:82:48:f1:51:b2:1d:80:66:11:af:8f:21:f5:2c:83:b2: 8f:fb:1e:a5:1b:10:52:65:26:7e:b7:c1:87:84:6b:50:b1:8b: 67:43:aa:ae:a1:e9:0a:46:4e:77:cf:e6:cf:d4:8a:99:e5:33: c9:b0:3e:7e:8c:85:3c:bc:cd:84:dc:75:f4:75:87:32:f1:ca: 8b:6b:c7:2f:a7:1e:e7:26:05:99:7d:33:56:38:5d:6c:25:a3: 25:8d:e0:99:f5:b0:2d:6d:fc:f2:37:41:1e:8f:41:44:7a:7c: 4e:67:08:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnZQP1bvE65vlsroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQwMzEzNDUzN1oXDTI1MDcwMjEzNDUzN1owLzEtMCsGA1UEAxMk ZjVhMGNmZWEtNjBiZi00NmJlLWFiMTAtZTA4OTA1YjdlMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rFttoTf0y7qgjpjqtuhlHP2sqKNIo9eE4BY NC1EmjVrmlIi1kc48lYAwPcC+KlTVCcIUmnVGc/taUSs5n3lTY6pNakTDslSHomc NVLP1Tad4RyFuatojQGDIG6SI8vxrFFJ0FogTSEjWFfFYvYaAg+65gJqm9qbd8GA SiT/7Jrm0rErLtgt117CBjhYayZ10M13I24PLfOsQeIv82+9vkn2W7m17eL3Pg15 202QGVTHlUFGgE4ukcBEjrJ1ablTcCW/jJMEl9qlnvPMZz3JRvxiXi/2VPxzboKq mWjn24MF1i5AskuKL5/pTABwXYHC+wowKhPXm6CYOcYtHhedNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR+gglIoyFxWotEbuAwI4z9jCbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmJmMDJlN2YtMzg2ZC0z NzgzLWJiMTUtZGUyMWY2ODg3ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt+YP0sVJ09K/RqLFrMg6aD3nihapW16P9JD76pl2zX4zcwTkVzkbnm hcoFXiToO69O2kG0ssqqwWl7iUMlKPGLRG4IuFOQifqUzXPL9kCm8NeDUO2RxqtB 0mjB4SiJRWTLu7JdX0GFH9/+vmqrLN5qBc4lXcyRf4lEzl481UgrN79+wddDQiwu WJX0nhScpTXygkjxUbIdgGYRr48h9SyDso/7HqUbEFJlJn63wYeEa1Cxi2dDqq6h 6QpGTnfP5s/UipnlM8mwPn6MhTy8zYTcdfR1hzLxyotrxy+nHucmBZl9M1Y4XWwl oyWN4Jn1sC1t/PI3QR6PQUR6fE5nCIY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:47 2025 by rpki-client