$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a8adad2-e6d1-35b6-864b-0cec3dff9f46.roa File: 9a8adad2-e6d1-35b6-864b-0cec3dff9f46.roa (raw, json) Hash identifier: qAcNJw+8F5p0QBu/uUyGD7/JCfVp4WXtm3Eltx3FfrY= Subject key identifier: 5F:FD:36:63:87:3A:0C:8A:03:F9:9C:71:60:E2:24:BD:AA:27:0E:C5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F773B3C551C3748A1BCC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a8adad2-e6d1-35b6-864b-0cec3dff9f46.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:77:3b:3c:55:1c:37:48:a1:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=372a1aeb-c9f8-48bc-b3a3-6991f691f8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:07:6e:01:e9:4b:73:8e:e3:42:60:64:a1:ac: 2c:df:54:24:70:23:f7:b2:4d:83:a6:b5:6d:f6:94: 45:f5:f6:64:b6:3f:5d:2a:4c:60:31:cb:75:1d:6f: e3:11:49:b6:cd:e2:5d:01:ac:a0:60:d4:a7:ef:12: 3e:36:e1:be:a0:04:6c:36:26:4b:0f:2c:ed:56:89: 21:ba:ac:f8:59:3e:4b:35:15:8c:86:9e:46:e0:92: cf:ac:a7:7e:b0:d5:8f:1b:ef:70:cb:8c:d0:d1:9a: b2:83:ab:35:59:1a:bc:1b:f4:ac:92:9e:13:30:63: 1a:40:82:3c:0a:79:d8:44:ad:cd:58:99:e0:95:6c: 54:02:7d:8b:74:39:38:df:5f:30:7a:21:5d:2a:74: 24:56:a7:90:76:88:a1:1f:04:ef:28:2a:dd:21:27: c9:bd:09:87:61:d1:4b:b4:22:f9:d4:22:94:77:3e: 19:42:c2:b7:a7:58:f0:b1:d6:c5:2e:93:d2:12:14: bd:92:24:06:24:7c:7c:64:b1:98:67:0d:5d:1a:36: 35:8b:42:85:24:e5:f3:e1:82:ff:74:f9:fd:8e:96: 63:07:33:64:19:54:64:7e:85:0d:b6:e8:f0:be:dc: 2c:3e:d6:07:90:1e:dc:66:69:5b:94:1a:20:e4:85: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FD:36:63:87:3A:0C:8A:03:F9:9C:71:60:E2:24:BD:AA:27:0E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9a8adad2-e6d1-35b6-864b-0cec3dff9f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cb:3b:f3:cc:47:da:ea:48:91:06:de:4e:5a:ca:2d:74:a3: f5:3c:be:fd:a1:47:70:4a:ae:fd:d0:f2:f7:57:c3:53:b0:16: b1:59:9e:23:41:26:6c:dd:56:80:5f:4d:e2:5b:e5:2f:ea:1a: 4b:c3:cd:8a:0a:eb:fe:32:0d:d0:14:87:09:e3:09:a7:b2:7c: 6f:19:79:5c:8c:ed:be:b8:60:a0:5d:f5:90:4a:e9:34:4f:e0: 5d:7c:9f:27:dc:23:4e:9a:20:67:9a:c3:1d:7f:1e:d2:74:34: f1:30:52:4f:c1:eb:6a:87:e4:1e:8d:04:b1:a9:97:31:1e:99: d5:7c:c2:2e:4b:65:48:38:b0:0d:3c:40:00:3b:5e:ee:d7:7e: b3:f4:26:1e:c6:91:d2:55:31:75:af:20:85:f3:b3:43:23:3e: c1:fc:e2:69:3e:a3:1e:22:30:40:db:bc:c7:36:12:f5:12:d1: 2e:f2:e1:01:fc:8b:78:8e:95:90:fb:7e:a6:a1:62:0f:46:25: 9e:bd:83:44:0e:0e:9e:f7:f9:d6:78:46:01:66:58:b9:74:ae: 50:b2:fe:41:e9:68:76:33:8a:a2:79:ab:4f:7e:07:0a:41:6f: 0c:90:5c:3d:df:c9:e0:3e:b0:dc:95:7c:77:d3:1c:37:5f:2a: cb:57:3f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3c7PFUcN0ihvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MzcyYTFhZWItYzlmOC00OGJjLWIzYTMtNjk5MWY2OTFmOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAduAelLc47jQmBkoaws31QkcCP3sk2DprVt 9pRF9fZktj9dKkxgMct1HW/jEUm2zeJdAaygYNSn7xI+NuG+oARsNiZLDyztVokh uqz4WT5LNRWMhp5G4JLPrKd+sNWPG+9wy4zQ0Zqyg6s1WRq8G/Sskp4TMGMaQII8 CnnYRK3NWJnglWxUAn2LdDk4318weiFdKnQkVqeQdoihHwTvKCrdISfJvQmHYdFL tCL51CKUdz4ZQsK3p1jwsdbFLpPSEhS9kiQGJHx8ZLGYZw1dGjY1i0KFJOXz4YL/ dPn9jpZjBzNkGVRkfoUNtujwvtwsPtYHkB7cZmlblBog5IUGmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/9NmOHOgyKA/mccWDiJL2qJw7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWE4YWRhZDItZTZkMS0z NWI2LTg2NGItMGNlYzNkZmY5ZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfLO/PMR9rqSJEG3k5ayi10o/U8vv2hR3BKrv3Q8vdXw1OwFrFZniNB JmzdVoBfTeJb5S/qGkvDzYoK6/4yDdAUhwnjCaeyfG8ZeVyM7b64YKBd9ZBK6TRP 4F18nyfcI06aIGeawx1/HtJ0NPEwUk/B62qH5B6NBLGplzEemdV8wi5LZUg4sA08 QAA7Xu7XfrP0Jh7GkdJVMXWvIIXzs0MjPsH84mk+ox4iMEDbvMc2EvUS0S7y4QH8 i3iOlZD7fqahYg9GJZ69g0QODp73+dZ4RgFmWLl0rlCy/kHpaHYziqJ5q09+BwpB bwyQXD3fyeA+sNyVfHfTHDdfKstXP5c= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:26 2025 by rpki-client