$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa File: 8ba705ac-13c1-316e-9514-c187d25271b5.roa (raw, json) Hash identifier: qJlKEYq5U5Df6L5fx5ZsCG/hPMEvWE2iC0LbmP64q3g= Subject key identifier: 48:37:27:57:B7:19:81:FC:45:7C:0A:27:11:96:CE:06:A7:D2:43:76 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F43285848AC60D1E3FA022AF32A84AB00 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 150.9.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d1:e3:fa:02:2a:f3:2a:84:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=86b4ec86-3eac-4227-b90e-ac3f0eebb0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:89:7a:ab:a9:c5:08:6a:36:80:5c:71:d0: 74:d2:8d:5d:00:74:1b:0b:03:de:15:03:de:57:61: d0:e8:1c:96:24:ca:e5:05:86:fc:4e:48:ce:7d:94: df:df:31:d1:4d:1e:cc:c3:27:4b:33:8c:7f:4e:c2: 3f:ed:72:7c:27:30:0f:c8:9a:6b:83:08:92:e7:5a: 59:f0:86:45:02:81:c9:69:f6:26:74:7f:13:62:2a: 9f:19:2c:d7:7f:1f:f1:15:2e:e6:18:9f:47:9b:41: de:cb:8f:85:b0:c9:0e:5a:4b:14:2c:f4:32:8e:00: 57:96:bf:9f:84:ac:fc:29:c1:c7:d5:f5:61:1f:5d: 30:f9:ae:3a:ef:44:50:3f:88:1d:6c:27:9e:00:19: 90:2f:6a:ed:94:02:2d:62:79:7f:51:f6:c3:95:85: 87:85:e6:a7:5a:62:29:1e:b7:d2:24:cd:f1:6e:84: b4:2a:9f:c5:17:89:9c:62:23:81:b0:32:af:84:b3: 01:b0:66:b8:e0:d5:c6:fe:28:57:15:eb:79:fa:b7: 54:47:20:dd:b8:de:42:61:e1:5c:a1:37:b6:53:cc: 9f:8b:f8:96:10:12:56:13:89:54:27:11:ca:22:09: 87:75:df:53:0d:41:5b:a1:b5:43:a9:e5:29:c7:6a: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:27:57:B7:19:81:FC:45:7C:0A:27:11:96:CE:06:A7:D2:43:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:15:f8:75:4a:46:e1:ea:c4:50:85:3b:e5:4f:ac:ac:1c:2f: d3:da:38:0f:f1:4d:ed:dc:83:11:5a:80:63:78:19:e9:92:94: 9e:68:dc:58:7c:2f:d8:48:23:85:30:8a:86:fa:25:a9:89:3c: 87:73:7b:f0:a7:f9:ac:45:99:05:56:dc:55:47:cc:15:b0:a9: af:d3:eb:4e:33:16:bf:0f:87:6c:bf:a9:0f:c0:e6:0a:ca:60: 29:0a:30:b4:73:f6:64:ad:ba:9e:b8:67:80:44:5f:c5:5e:b9: 38:ed:6c:39:05:88:4c:28:c0:ba:8f:7e:aa:00:09:89:22:c3: 15:aa:a8:05:54:53:2f:e8:36:de:e6:31:3a:36:28:d2:a9:97: 4d:3f:23:7d:3e:d7:65:c3:b0:bd:17:34:fb:68:a0:ad:f7:29: 54:b6:b0:1d:3f:94:88:29:60:3e:fe:3c:d5:f3:66:10:32:18: d7:ba:02:9e:7c:96:30:b2:9e:79:f6:1e:1c:92:de:3e:6d:b6: e1:43:c5:3d:34:93:6b:4d:23:e5:bf:46:26:64:58:8c:6f:0f: 71:ca:52:97:6a:90:c4:d8:e0:fd:01:d2:20:72:ce:ca:b4:9e: 86:45:c8:35:87:6a:ab:a2:8a:21:59:a5:1c:98:b4:3a:87:d4: df:93:40:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNHj+gIq8yqEqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk ODZiNGVjODYtM2VhYy00MjI3LWI5MGUtYWMzZjBlZWJiMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IuJequpxQhqNoBccdB00o1dAHQbCwPeFQPe V2HQ6ByWJMrlBYb8TkjOfZTf3zHRTR7MwydLM4x/TsI/7XJ8JzAPyJprgwiS51pZ 8IZFAoHJafYmdH8TYiqfGSzXfx/xFS7mGJ9Hm0Hey4+FsMkOWksULPQyjgBXlr+f hKz8KcHH1fVhH10w+a4670RQP4gdbCeeABmQL2rtlAItYnl/UfbDlYWHheanWmIp HrfSJM3xboS0Kp/FF4mcYiOBsDKvhLMBsGa44NXG/ihXFet5+rdURyDduN5CYeFc oTe2U8yfi/iWEBJWE4lUJxHKIgmHdd9TDUFbobVDqeUpx2pjQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg3J1e3GYH8RXwKJxGWzgan0kN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvOGJhNzA1YWMtMTNjMS0z MTZlLTk1MTQtYzE4N2QyNTI3MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAV+HVKRuHqxFCFO+VPrKwcL9PaOA/xTe3cgxFagGN4GemSlJ5o3Fh8 L9hII4Uwiob6JamJPIdze/Cn+axFmQVW3FVHzBWwqa/T604zFr8Ph2y/qQ/A5grK YCkKMLRz9mStup64Z4BEX8VeuTjtbDkFiEwowLqPfqoACYkiwxWqqAVUUy/oNt7m MTo2KNKpl00/I30+12XDsL0XNPtooK33KVS2sB0/lIgpYD7+PNXzZhAyGNe6Ap58 ljCynnn2HhyS3j5ttuFDxT00k2tNI+W/RiZkWIxvD3HKUpdqkMTY4P0B0iByzsq0 noZFyDWHaquiiiFZpRyYtDqH1N+TQJI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:32 2025 by rpki-client