$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fdaf960b-7588-3d3e-a098-f4a2091ad060.roa File: fdaf960b-7588-3d3e-a098-f4a2091ad060.roa (raw, json) Hash identifier: TUFDBYVxtIb2PaYynZPEsNIVwZaG0v+Sb8dw7cT/fY0= Subject key identifier: AF:08:20:F9:80:A2:25:60:35:CD:7D:64:C7:93:E7:A1:8D:29:7B:96 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F43285848AC60D15AD37F953F7F1C5D00 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fdaf960b-7588-3d3e-a098-f4a2091ad060.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 150.9.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d1:5a:d3:7f:95:3f:7f:1c:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=dc270cb4-2c8d-4aa1-9104-a2c504bafc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:c8:a7:6f:3a:26:67:2e:3b:35:79:7d:d9: b8:94:6c:1b:86:4e:20:54:d9:2d:03:45:6a:1f:09: 1c:43:84:8a:40:d8:19:4b:21:d4:a7:a2:a9:70:29: f3:d8:09:e8:e4:31:5c:d7:80:44:11:fc:14:7d:83: 77:0f:c3:ed:0b:4f:dc:51:1b:80:9c:47:16:b0:e9: 26:10:b1:b2:54:c0:c2:c7:96:57:a6:93:93:1d:2c: 3c:32:89:fe:3e:e1:0a:d5:d7:27:41:1f:04:99:ca: 95:ec:13:2d:49:96:21:06:aa:5f:06:f2:67:75:db: 66:8b:7a:26:b2:d3:e2:9f:18:f7:4a:d9:e8:d7:59: f0:cb:f3:34:a1:46:5f:d5:ba:bb:37:d7:79:4b:4f: 4a:41:35:70:06:a7:2a:a6:d9:22:32:4b:b0:08:b4: 6a:40:33:9b:70:c8:e5:06:27:68:2b:76:20:fa:ea: 65:5d:17:91:4a:8b:13:91:48:4d:73:fe:a8:ec:74: 4f:23:1e:6b:e5:1d:db:1f:9a:7c:30:c5:15:6e:86: b3:85:79:1f:ae:97:af:33:ec:c6:60:a7:c0:fa:dd: 18:84:0d:e7:4e:e9:f2:4c:86:cd:4e:8e:00:22:d2: 5d:2a:a8:6e:21:83:d1:ae:40:85:d6:58:16:3f:a2: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:08:20:F9:80:A2:25:60:35:CD:7D:64:C7:93:E7:A1:8D:29:7B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fdaf960b-7588-3d3e-a098-f4a2091ad060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:77:ef:6e:cd:29:32:12:5f:4f:6e:56:5e:f3:a8:6a:5b:3d: b6:2e:be:a1:e7:86:35:2d:94:0c:89:bd:96:3a:97:28:37:22: 2b:5d:6a:a9:68:10:ee:08:91:fe:a0:23:d0:e0:fc:70:0b:ba: b6:4c:3d:e0:99:1b:bd:f3:03:a1:df:a9:1f:ab:fa:9b:d1:52: 93:db:02:cb:1c:c2:9b:ae:99:b8:5c:ec:52:eb:d3:a0:dc:97: c4:b7:0a:37:c1:cd:f6:af:14:8e:67:4f:06:30:ea:83:58:a7: 3b:16:d8:c6:11:a8:e1:74:0c:1e:93:37:a1:68:39:06:15:16: df:5c:5b:56:8e:c5:f5:ed:e8:f0:34:ec:8b:69:82:15:fb:e9: 26:53:9e:de:7b:7f:c5:3f:6b:36:1c:7e:69:42:5c:e1:60:99: e3:4a:df:f3:43:16:a6:55:75:3d:5b:94:45:ff:f1:77:df:88: 77:56:63:4b:80:82:59:56:a5:fa:b7:fa:ef:cc:29:43:05:31: a9:9b:c1:de:e9:d4:ff:c2:a1:ea:7c:3a:b0:0b:a3:62:eb:10: 94:ef:7f:a1:e7:16:b3:2b:ca:6a:f2:1a:1d:a2:50:e5:e7:1f: d4:e8:43:98:ba:ee:20:10:94:12:b1:b7:e0:b4:9c:7b:fd:aa: 67:42:5e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNFa03+VP38cXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZGMyNzBjYjQtMmM4ZC00YWExLTkxMDQtYTJjNTA0YmFmYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfPIp286JmcuOzV5fdm4lGwbhk4gVNktA0Vq HwkcQ4SKQNgZSyHUp6KpcCnz2Ano5DFc14BEEfwUfYN3D8PtC0/cURuAnEcWsOkm ELGyVMDCx5ZXppOTHSw8Mon+PuEK1dcnQR8EmcqV7BMtSZYhBqpfBvJnddtmi3om stPinxj3Stno11nwy/M0oUZf1bq7N9d5S09KQTVwBqcqptkiMkuwCLRqQDObcMjl BidoK3Yg+uplXReRSosTkUhNc/6o7HRPIx5r5R3bH5p8MMUVboazhXkfrpevM+zG YKfA+t0YhA3nTunyTIbNTo4AItJdKqhuIYPRrkCF1lgWP6KibQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8IIPmAoiVgNc19ZMeT56GNKXuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvZmRhZjk2MGItNzU4OC0z ZDNlLWEwOTgtZjRhMjA5MWFkMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN3727NKTISX09uVl7zqGpbPbYuvqHnhjUtlAyJvZY6lyg3Iitdaqlo EO4Ikf6gI9Dg/HALurZMPeCZG73zA6HfqR+r+pvRUpPbAsscwpuumbhc7FLr06Dc l8S3CjfBzfavFI5nTwYw6oNYpzsW2MYRqOF0DB6TN6FoOQYVFt9cW1aOxfXt6PA0 7ItpghX76SZTnt57f8U/azYcfmlCXOFgmeNK3/NDFqZVdT1blEX/8XffiHdWY0uA gllWpfq3+u/MKUMFMambwd7p1P/Coep8OrALo2LrEJTvf6HnFrMrymryGh2iUOXn H9ToQ5i67iAQlBKxt+C0nHv9qmdCXoQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:31 2025 by rpki-client