$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa File: a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa (raw, json) Hash identifier: bbdImjCSkTGLb1o9vT+3Q8U6HTX5IgrDEPTccWkhAWY= Subject key identifier: 06:A6:AA:D1:30:68:9F:A0:9E:E1:39:F4:FF:BD:36:26:35:FA:81:04 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849AA4F771E84BA13CDC6863180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 150.48.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:77:1e:84:ba:13:cd:c6:86:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=56f3a52d-86db-436a-be08-b5555ba930af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c3:4c:de:0d:bf:35:1a:c4:59:f4:a0:40:f9: df:16:70:3d:e0:6c:8c:27:0e:f0:9f:33:c1:f4:2d: 2c:37:f2:86:60:36:92:7b:1c:68:16:56:53:17:a7: 5d:52:05:08:81:7d:3d:75:99:af:42:be:2d:f3:58: 38:5b:ed:2d:ff:cb:d4:b9:86:cb:af:fa:c9:ee:cf: ec:61:bf:a3:76:29:48:60:3c:8f:7d:eb:67:3e:d2: 47:6d:b9:88:3c:02:90:d9:26:76:65:e2:08:5c:25: 21:bb:5e:15:6f:64:68:1b:3d:11:df:a9:0a:79:60: 40:03:63:c6:2e:b3:0d:c2:9a:c6:dc:c0:87:d4:3d: b6:99:ee:62:b8:6f:88:32:dc:81:ff:3d:79:18:74: 23:19:1f:ef:3e:89:65:02:6b:be:d5:27:c9:d6:ed: 0d:b1:2a:83:f7:ac:e1:e7:58:b2:8c:90:dc:c1:f8: 6d:21:5e:fe:28:8a:5f:d5:18:6f:40:67:7e:54:33: 19:d6:27:42:72:26:c2:c1:9b:73:96:b0:0d:f4:9f: 64:98:5b:c8:36:9a:2f:48:69:56:de:2b:36:69:4c: 82:23:bb:1b:c9:4d:04:1a:9a:83:64:18:7e:91:27: 94:fa:16:c0:fb:ce:2a:e3:2f:e0:57:99:08:00:96: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A6:AA:D1:30:68:9F:A0:9E:E1:39:F4:FF:BD:36:26:35:FA:81:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:99:ae:da:4f:bd:8d:0b:4a:2c:dc:81:84:54:9e:8b:10:04: 73:04:3f:ad:06:38:bc:67:35:57:5a:3c:90:ea:79:f8:74:9e: 22:ae:25:8e:09:ee:31:bb:15:94:f7:ec:1a:b8:33:1b:11:ca: 9a:31:3b:7d:e9:92:42:47:b4:93:83:1e:aa:04:42:35:5d:81: a3:46:3f:52:c9:b9:34:82:72:1b:a3:52:da:8d:ee:4b:4d:06: 97:47:56:1b:a6:65:a2:a7:95:a9:30:bd:ea:ee:e7:47:62:ae: 7b:6c:5b:04:da:25:95:71:22:9c:bd:ab:c4:f4:1b:23:4d:ea: 26:68:73:6c:79:dc:c2:4d:59:5e:42:18:85:f6:ca:76:52:86: 35:89:1d:86:90:41:11:68:d3:43:11:32:e8:e1:ae:08:0f:f4: ae:23:21:c5:6d:96:28:b3:2c:20:3d:13:c9:30:7b:01:48:ab: 68:29:40:d1:ab:27:79:66:c5:69:8a:4e:38:17:94:70:f2:e6: 13:bd:09:76:05:78:d3:22:65:24:38:f8:44:6a:07:6c:f4:67: a5:69:a0:b6:5a:99:e5:cb:73:91:3e:c8:2f:12:7b:dc:4f:c2: 3b:ef:67:31:9f:4e:0e:f9:ed:16:55:a2:33:6f:f8:e5:1c:f0: a2:8a:00:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3cehLoTzcaGMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NTZmM2E1MmQtODZkYi00MzZhLWJlMDgtYjU1NTViYTkzMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMNM3g2/NRrEWfSgQPnfFnA94GyMJw7wnzPB 9C0sN/KGYDaSexxoFlZTF6ddUgUIgX09dZmvQr4t81g4W+0t/8vUuYbLr/rJ7s/s Yb+jdilIYDyPfetnPtJHbbmIPAKQ2SZ2ZeIIXCUhu14Vb2RoGz0R36kKeWBAA2PG LrMNwprG3MCH1D22me5iuG+IMtyB/z15GHQjGR/vPollAmu+1SfJ1u0NsSqD96zh 51iyjJDcwfhtIV7+KIpf1RhvQGd+VDMZ1idCcibCwZtzlrAN9J9kmFvINpovSGlW 3is2aUyCI7sbyU0EGpqDZBh+kSeU+hbA+84q4y/gV5kIAJaoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAamqtEwaJ+gnuE59P+9NiY1+oEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTZmZjBmZGQtMjg1ZC0z MWYxLTlhYTgtMmNiMjY4ZGZkNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGZrtpPvY0LSizcgYRUnosQBHMEP60GOLxnNVdaPJDqefh0niKuJY4J 7jG7FZT37Bq4MxsRypoxO33pkkJHtJODHqoEQjVdgaNGP1LJuTSCchujUtqN7ktN BpdHVhumZaKnlakwveru50dirntsWwTaJZVxIpy9q8T0GyNN6iZoc2x53MJNWV5C GIX2ynZShjWJHYaQQRFo00MRMujhrggP9K4jIcVtliizLCA9E8kwewFIq2gpQNGr J3lmxWmKTjgXlHDy5hO9CXYFeNMiZSQ4+ERqB2z0Z6VpoLZameXLc5E+yC8Se9xP wjvvZzGfTg757RZVojNv+OUc8KKKALc= -----END CERTIFICATE-----Generated at Sun Jun 15 11:43:20 2025 by rpki-client