$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/590b17a4-65ed-366b-8c15-c6e88b56934e.roa File: 590b17a4-65ed-366b-8c15-c6e88b56934e.roa (raw, json) Hash identifier: vyG5dl0ahb52HGjjRcXKl7DUtIGvCL8NNxTs7a7P4qk= Subject key identifier: BE:36:04:54:1E:9F:2C:BC:74:8A:99:09:50:C0:3D:E3:35:1E:08:0A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F7858E98057FC5B0318C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/590b17a4-65ed-366b-8c15-c6e88b56934e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:78:58:e9:80:57:fc:5b:03:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=f0eaf6d2-9510-49f7-bd50-79e2ecb70e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:f0:32:1e:0d:e7:02:c2:1f:b0:23:71:6a: cc:f3:10:36:f9:d8:53:ed:82:dd:19:c0:8d:89:55: 82:44:4d:65:40:7a:aa:5e:f1:09:5a:52:cf:48:dc: 43:1e:d8:1c:a5:40:a5:9e:9c:7f:64:0c:5a:6b:5a: 29:8f:7f:e7:3c:84:e6:32:80:b9:26:5a:e9:a7:05: 41:b9:8a:69:4c:ab:f7:ab:b7:21:61:17:31:db:16: 25:85:a2:48:84:cb:f3:fc:1c:a0:0a:0f:62:18:55: 9f:77:7c:02:1c:14:fc:9b:42:07:80:34:ea:f7:d8: 80:da:60:e8:c8:fb:70:0c:b0:4b:d8:5a:a5:bc:3f: 3a:76:c4:de:7e:3e:a3:d6:aa:60:74:40:cc:77:df: d4:0a:d0:dc:a5:9e:97:3c:e3:dc:8c:52:66:5f:e6: fe:06:c2:f4:4b:44:7b:ca:f5:77:06:59:8f:77:5c: ff:98:81:c0:ca:32:cb:6a:ce:54:a6:c7:49:3c:83: 9c:59:98:f3:9d:48:6d:a9:19:f4:2c:33:99:d1:f2: 90:25:eb:44:1d:23:92:c2:22:5f:16:7c:57:27:a6: 76:49:53:a8:31:27:22:75:e9:ff:77:ee:a9:8b:f2: 30:f6:9f:b9:e0:3e:1a:4d:39:6a:51:22:9d:24:65: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:36:04:54:1E:9F:2C:BC:74:8A:99:09:50:C0:3D:E3:35:1E:08:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/590b17a4-65ed-366b-8c15-c6e88b56934e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d3:17:c8:55:0d:0e:d5:7e:d7:60:00:ca:8c:1d:07:3a:ab: 4d:50:59:fc:46:c9:0d:9c:45:b2:c6:29:26:97:84:c5:86:1f: 41:cc:27:a8:f3:e6:e5:23:3d:7b:22:09:df:46:03:b6:6d:07: 08:28:62:e6:03:07:78:29:fe:20:0c:30:9e:bb:9b:95:54:91: b3:cc:c9:a7:2a:84:78:7f:71:d5:d8:e1:6c:b3:f2:39:e2:ce: 43:1f:23:4f:10:1e:3c:ad:31:62:48:d3:46:7e:2f:af:f2:8d: 6b:f2:ed:f6:0b:ce:42:13:8c:14:6f:0b:4d:0d:84:bd:45:57: 26:ea:82:7f:dd:c4:ba:76:09:5f:b1:90:b8:a0:a2:af:18:ff: d0:b4:1f:9e:37:d8:56:cf:68:e9:7c:7f:7e:dc:e5:a6:1c:93: 9d:6f:f6:4b:88:34:8e:c2:99:ce:08:e2:47:23:f2:33:31:4f: 6d:b9:c3:f4:22:82:7c:b1:d5:b8:4f:e6:ef:55:f3:99:1d:fd: b7:43:5d:2a:26:49:75:4c:0d:25:75:32:f7:e5:44:fe:ef:ec: 68:d2:43:13:1a:07:dd:c2:2b:53:0f:68:33:63:36:34:80:e1: c5:4c:6f:09:79:16:d3:57:09:55:d9:c3:52:2f:98:72:51:12: 81:59:00:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3hY6YBX/FsDGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZjBlYWY2ZDItOTUxMC00OWY3LWJkNTAtNzllMmVjYjcwZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1HwMh4N5wLCH7AjcWrM8xA2+dhT7YLdGcCN iVWCRE1lQHqqXvEJWlLPSNxDHtgcpUClnpx/ZAxaa1opj3/nPITmMoC5JlrppwVB uYppTKv3q7chYRcx2xYlhaJIhMvz/BygCg9iGFWfd3wCHBT8m0IHgDTq99iA2mDo yPtwDLBL2FqlvD86dsTefj6j1qpgdEDMd9/UCtDcpZ6XPOPcjFJmX+b+BsL0S0R7 yvV3BlmPd1z/mIHAyjLLas5UpsdJPIOcWZjznUhtqRn0LDOZ0fKQJetEHSOSwiJf FnxXJ6Z2SVOoMSciden/d+6pi/Iw9p+54D4aTTlqUSKdJGXAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL42BFQenyy8dIqZCVDAPeM1HggKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTkwYjE3YTQtNjVlZC0z NjZiLThjMTUtYzZlODhiNTY5MzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/TF8hVDQ7VftdgAMqMHQc6q01QWfxGyQ2cRbLGKSaXhMWGH0HMJ6jz 5uUjPXsiCd9GA7ZtBwgoYuYDB3gp/iAMMJ67m5VUkbPMyacqhHh/cdXY4Wyz8jni zkMfI08QHjytMWJI00Z+L6/yjWvy7fYLzkITjBRvC00NhL1FVybqgn/dxLp2CV+x kLigoq8Y/9C0H5432FbPaOl8f37c5aYck51v9kuINI7Cmc4I4kcj8jMxT225w/Qi gnyx1bhP5u9V85kd/bdDXSomSXVMDSV1MvflRP7v7GjSQxMaB93CK1MPaDNjNjSA 4cVMbwl5FtNXCVXZw1IvmHJREoFZAFU= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:01 2025 by rpki-client