$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2cd07041-09c1-3e4f-bc99-15bde4ddbf07.roa File: 2cd07041-09c1-3e4f-bc99-15bde4ddbf07.roa (raw, json) Hash identifier: Pqk+fYsOnsW47GUinaaSfBC+CrRQlBlRk9M6JLzbWpg= Subject key identifier: 09:7C:0E:22:75:BC:BD:7A:68:E6:F4:78:A6:04:E9:70:41:01:CA:EC Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F74B95E32C153203A1C88 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2cd07041-09c1-3e4f-bc99-15bde4ddbf07.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:74:b9:5e:32:c1:53:20:3a:1c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=82ed365c-4e16-4524-b17d-2bb54b07b752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:d1:a6:53:6f:89:00:16:5d:20:13:16:61: 11:3a:3a:27:7f:9a:e1:77:a1:94:50:d9:c7:71:9b: e1:03:1b:51:42:f9:f9:83:33:ea:e2:c0:8e:95:39: b9:f1:5b:1c:7c:80:c0:8e:44:3a:8e:21:54:e2:c8: 51:f0:3c:6c:5d:23:cf:d7:38:af:8a:e7:44:ee:48: 70:80:53:ff:76:05:c0:93:25:1b:20:2f:e5:f2:3a: 1e:0b:b1:80:02:92:3c:a7:e9:66:72:51:6c:59:76: 4e:87:21:bf:f3:47:b2:d6:97:d2:95:b6:f9:43:c2: 82:01:bd:72:3a:da:bb:11:2a:d6:c2:74:2c:3c:a4: 48:20:3b:36:b1:dd:17:22:aa:0d:cf:b5:5b:df:d8: 8d:39:43:3b:b2:c7:29:03:eb:bd:56:4d:57:2c:51: 9a:73:f9:ed:14:be:bd:15:50:c5:6c:24:45:00:55: f8:e4:94:37:fd:d5:62:f9:25:0f:51:c2:fb:bf:89: 91:be:3b:c0:fc:fe:4b:49:76:ba:65:a5:c4:69:3c: 23:39:63:fb:02:1e:99:01:df:c3:3b:e5:3d:77:db: eb:ed:be:bf:57:88:1c:e1:55:1e:e1:48:65:a5:97: 9a:27:eb:03:1b:74:42:79:9f:ff:a9:21:12:c9:9e: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:0E:22:75:BC:BD:7A:68:E6:F4:78:A6:04:E9:70:41:01:CA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2cd07041-09c1-3e4f-bc99-15bde4ddbf07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ae:ca:67:41:4f:3b:60:3a:82:b5:18:15:1d:b6:c4:aa:b0: 3b:4d:8a:9e:c5:4f:ee:e4:e4:c4:15:8c:7e:ff:f0:9d:35:55: 16:0a:bd:80:cd:aa:91:f2:94:c1:d4:98:3b:64:c7:61:b2:7b: a9:e2:23:c6:3e:f6:da:bd:86:af:eb:95:50:21:02:e1:22:09: f4:e9:92:a4:bc:8a:01:72:db:a8:b4:56:d3:54:80:44:56:09: 45:06:67:48:ea:09:ee:62:10:31:e0:b6:5d:a3:d5:c0:ec:68: 20:dd:75:82:42:ab:d3:f4:f4:13:c5:42:1c:b3:2a:c1:1e:c8: 60:84:0a:31:a3:1b:0a:87:10:77:41:48:97:16:dc:16:7d:ef: 60:65:e4:23:94:9c:a8:b9:29:88:1b:64:e0:df:8d:2a:f9:05: 40:b4:f6:64:ed:5c:1f:fc:df:18:7c:c5:cd:71:46:71:19:4f: cc:38:ab:09:1e:cd:46:21:66:a9:ff:a4:a8:f5:66:54:41:45: 0f:79:e4:d8:fb:54:ec:a9:0b:d6:b0:7e:ec:db:eb:38:48:7a: 62:f3:c5:5c:a4:b5:b7:f8:31:80:7b:41:6d:52:7e:e8:bd:aa: b8:6b:e1:9c:63:b5:07:03:7e:5b:58:36:15:2e:e9:fd:e6:bc: fd:6a:d9:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3S5XjLBUyA6HIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ODJlZDM2NWMtNGUxNi00NTI0LWIxN2QtMmJiNTRiMDdiNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwfRplNviQAWXSATFmEROjonf5rhd6GUUNnH cZvhAxtRQvn5gzPq4sCOlTm58VscfIDAjkQ6jiFU4shR8DxsXSPP1ziviudE7khw gFP/dgXAkyUbIC/l8joeC7GAApI8p+lmclFsWXZOhyG/80ey1pfSlbb5Q8KCAb1y Otq7ESrWwnQsPKRIIDs2sd0XIqoNz7Vb39iNOUM7sscpA+u9Vk1XLFGac/ntFL69 FVDFbCRFAFX45JQ3/dVi+SUPUcL7v4mRvjvA/P5LSXa6ZaXEaTwjOWP7Ah6ZAd/D O+U9d9vr7b6/V4gc4VUe4UhlpZeaJ+sDG3RCeZ//qSESyZ55YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl8DiJ1vL16aOb0eKYE6XBBAcrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmNkMDcwNDEtMDljMS0z ZTRmLWJjOTktMTViZGU0ZGRiZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmuymdBTztgOoK1GBUdtsSqsDtNip7FT+7k5MQVjH7/8J01VRYKvYDN qpHylMHUmDtkx2Gye6niI8Y+9tq9hq/rlVAhAuEiCfTpkqS8igFy26i0VtNUgERW CUUGZ0jqCe5iEDHgtl2j1cDsaCDddYJCq9P09BPFQhyzKsEeyGCECjGjGwqHEHdB SJcW3BZ972Bl5COUnKi5KYgbZODfjSr5BUC09mTtXB/83xh8xc1xRnEZT8w4qwke zUYhZqn/pKj1ZlRBRQ955Nj7VOypC9awfuzb6zhIemLzxVyktbf4MYB7QW1Sfui9 qrhr4ZxjtQcDfltYNhUu6f3mvP1q2Us= -----END CERTIFICATE-----Generated at Mon Apr 28 20:47:12 2025 by rpki-client