$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0ccb59bd-63b8-3e31-be93-67c47a31a715.roa File: 0ccb59bd-63b8-3e31-be93-67c47a31a715.roa (raw, json) Hash identifier: o2H4eVzniCW9/ISVu2GwqMjQdJxvxfWqUnsRwaV+WWg= Subject key identifier: 1E:C8:7E:D0:4D:68:9F:BA:60:56:E4:85:35:F6:DA:47:48:F0:07:67 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F432858498B99C8E84D8D528ECD865480 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0ccb59bd-63b8-3e31-be93-67c47a31a715.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 150.9.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:c8:e8:4d:8d:52:8e:cd:86:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=df69cc6d-7f8c-4991-a2d9-b3234adb78e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:0f:78:f4:5e:23:29:c4:e1:52:49:37:83: 5d:fc:79:8e:a4:15:c3:9d:ef:1b:75:ef:4d:9e:10: 07:17:19:f2:3b:f6:0b:ff:53:3a:dc:90:6f:b9:e2: cb:b2:bb:1f:39:36:24:f3:5e:7d:75:53:63:91:08: 3e:b5:c6:ff:e4:8c:91:2c:f3:4b:1a:ea:41:91:15: 8d:eb:e3:47:32:57:8d:8e:f7:95:7e:b9:67:2b:29: 0d:d2:c0:66:25:1e:c1:ea:2f:4b:79:8e:c2:8e:c8: 63:08:d7:4c:3f:02:e9:25:9a:9e:c7:0c:77:de:b6: 4c:2d:9b:d0:31:5e:eb:18:54:8f:77:12:80:11:9d: 40:e1:7f:04:5f:7a:68:4c:44:d3:74:14:0b:8d:39: c4:4a:29:e4:87:7f:72:b6:13:90:7e:9b:83:75:02: fc:33:c7:70:76:cf:8f:c9:50:46:a8:df:f3:a3:c4: d1:b6:87:02:a1:b2:ee:e6:f1:25:63:38:f2:86:0e: f1:a3:4f:50:8f:b4:ca:ba:98:43:40:33:8e:77:79: 62:07:64:55:9e:d3:8c:51:7c:59:c1:b8:b4:ec:8a: 08:36:97:1e:85:a7:3e:dd:71:3b:7a:0f:5e:5a:d5: 81:19:cb:df:9b:52:b7:fb:d3:e3:b6:c0:09:01:d9: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C8:7E:D0:4D:68:9F:BA:60:56:E4:85:35:F6:DA:47:48:F0:07:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0ccb59bd-63b8-3e31-be93-67c47a31a715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7c:60:d1:3c:b6:d9:ac:b3:87:fb:ea:21:c3:f5:bf:76:f8: 71:0c:d0:7c:2a:95:cd:7e:86:9e:71:3f:77:ca:5f:3a:e9:eb: 39:4c:c8:c1:5a:5b:41:a0:0b:39:29:27:48:ee:7a:24:2a:c8: ea:cf:1c:60:22:cb:e2:28:91:e4:e8:1b:2a:2e:ae:21:c9:97: ae:5e:a5:ea:94:cb:62:f4:fc:5f:7e:a8:ca:45:87:19:55:8e: 4b:0d:da:71:da:7e:5b:64:ec:9b:e6:61:7f:57:d6:17:29:94: 7b:63:68:68:24:08:0e:14:22:f3:21:5b:03:72:5d:fb:72:1e: 47:e5:be:01:7b:20:c4:15:d5:4a:b4:6f:aa:3c:b6:09:74:40: ad:f3:f8:73:c7:0c:44:2f:a9:6d:87:83:f1:36:57:4c:5f:2d: 15:10:4e:41:af:98:8b:69:85:c5:31:5e:57:f0:f3:35:e6:6d: a7:0e:f4:ba:3b:f7:7a:23:6f:66:8a:91:f8:e5:08:c2:fb:e0: fb:4c:47:85:ed:35:69:bb:8b:f5:d7:b6:cf:3a:c9:43:db:f3: 3e:83:46:ee:cc:20:71:09:db:e8:f1:43:49:28:ba:8e:06:40: 32:90:0f:ee:f4:df:c7:ee:ab:fa:01:1a:6b:2f:1a:6b:bb:92: 56:de:4f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmcjoTY1Sjs2GVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGY2OWNjNmQtN2Y4Yy00OTkxLWEyZDktYjMyMzRhZGI3OGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMkPePReIynE4VJJN4Nd/HmOpBXDne8bde9N nhAHFxnyO/YL/1M63JBvueLLsrsfOTYk8159dVNjkQg+tcb/5IyRLPNLGupBkRWN 6+NHMleNjveVfrlnKykN0sBmJR7B6i9LeY7CjshjCNdMPwLpJZqexwx33rZMLZvQ MV7rGFSPdxKAEZ1A4X8EX3poTETTdBQLjTnESinkh39ythOQfpuDdQL8M8dwds+P yVBGqN/zo8TRtocCobLu5vElYzjyhg7xo09Qj7TKuphDQDOOd3liB2RVntOMUXxZ wbi07IoINpcehac+3XE7eg9eWtWBGcvfm1K3+9PjtsAJAdngaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7IftBNaJ+6YFbkhTX22kdI8AdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvMGNjYjU5YmQtNjNiOC0z ZTMxLWJlOTMtNjdjNDdhMzFhNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN8YNE8ttmss4f76iHD9b92+HEM0Hwqlc1+hp5xP3fKXzrp6zlMyMFa W0GgCzkpJ0jueiQqyOrPHGAiy+IokeToGyouriHJl65epeqUy2L0/F9+qMpFhxlV jksN2nHafltk7JvmYX9X1hcplHtjaGgkCA4UIvMhWwNyXftyHkflvgF7IMQV1Uq0 b6o8tgl0QK3z+HPHDEQvqW2Hg/E2V0xfLRUQTkGvmItphcUxXlfw8zXmbacO9Lo7 93ojb2aKkfjlCML74PtMR4XtNWm7i/XXts86yUPb8z6DRu7MIHEJ2+jxQ0kouo4G QDKQD+7038fuq/oBGmsvGmu7klbeTwk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:03 2025 by rpki-client