$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3764176d-cadc-3b0d-917d-968845eee2cd.roa File: 3764176d-cadc-3b0d-917d-968845eee2cd.roa (raw, json) Hash identifier: tx1R2zX4pEJ7QVpH2VdIjbXduWHfPM2oTIE2TUwXkCs= Subject key identifier: CE:B4:77:0A:FC:8B:44:CD:FB:CB:1D:34:A4:F6:12:A2:E7:1D:1F:59 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848CB1661C0D13ECC396A392980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3764176d-cadc-3b0d-917d-968845eee2cd.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 150.48.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:61:c0:d1:3e:cc:39:6a:39:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=8ccdb7c3-e655-4a7d-aadb-4d7001cc922a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b6:05:e6:7a:54:b7:05:5a:c8:34:3f:03:87: c8:86:fa:1f:2e:40:77:b1:1c:00:8b:86:56:6d:23: 1a:00:b7:e4:e7:2d:d9:01:d2:82:2a:6b:2e:8a:13: c1:fe:cd:a0:95:75:a3:63:e7:7a:9c:fe:d1:b1:f4: 50:87:ec:4d:b6:0e:b5:14:4d:b0:92:53:b4:c1:c7: cc:b0:0d:79:3f:42:25:85:bb:b4:ff:ab:07:67:2c: c9:a7:d3:d6:37:17:85:b2:b1:5e:44:0f:84:cc:d7: 77:41:db:01:7b:a0:24:52:cc:c2:94:f0:ac:94:2d: 17:ce:d5:1d:ff:89:ef:2a:82:19:f9:56:83:7c:e7: 3c:5a:34:1c:54:92:fd:8d:5e:a6:5a:6e:96:11:ed: bc:6f:1d:a0:75:f1:bf:aa:b1:47:79:6c:3f:f1:fb: d9:8b:2e:62:cf:e8:96:86:fd:6c:5b:77:03:9f:4b: 60:9f:bd:e8:1f:68:3a:55:cd:9a:5d:8e:6e:27:19: 16:3a:2b:58:53:24:70:6f:03:19:93:16:58:6c:89: a3:aa:73:5d:c8:fc:75:5c:05:5b:1d:cf:be:ef:91: 64:87:cf:f2:c9:d4:fc:95:e2:6a:91:31:67:36:72: 05:c1:9d:fb:21:d3:ec:10:2d:cb:34:04:ee:53:55: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B4:77:0A:FC:8B:44:CD:FB:CB:1D:34:A4:F6:12:A2:E7:1D:1F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3764176d-cadc-3b0d-917d-968845eee2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:52:27:eb:37:f1:f0:8c:cf:bb:87:fc:e9:66:78:80:6a:02: 6f:7d:10:6c:39:a5:99:37:03:d3:00:12:81:47:f3:1c:b1:63: ad:de:59:8a:64:2d:21:db:9c:5e:bd:fd:5b:96:9c:28:c9:f7: 04:0d:f7:c3:33:85:2d:59:ca:29:dc:6a:00:a1:46:a6:57:28: 00:61:03:32:2b:7c:98:5a:a7:cc:5f:e1:50:de:0c:8d:01:14: 29:98:f8:47:c2:5d:f1:2f:2d:7e:15:05:2d:b9:2b:a5:32:be: a0:8e:2a:03:fb:37:bb:6f:68:a8:81:2f:c1:26:a5:25:68:15: a6:13:a4:49:c8:4e:12:d3:bc:6c:c6:9e:4c:a9:74:68:f2:a2: 1b:a2:8e:f3:b8:bf:a1:86:a9:c3:f0:7a:b0:0f:cf:d9:ce:ae: 00:4c:f1:eb:1b:cf:ad:95:09:a4:04:97:bc:28:a6:71:a4:a1: 33:e3:18:9e:a9:fe:0f:51:77:3e:9a:08:d3:38:ab:33:88:77: a0:a2:e6:57:ec:5c:5c:c0:a6:c1:96:6e:63:66:f5:39:ad:f1: 81:94:d5:7a:fb:f7:8e:e2:96:00:69:88:5c:5b:44:0b:73:83: a2:0a:c1:e8:ec:43:79:c0:24:e1:11:37:79:25:6c:00:63:b0: ae:7e:37:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFmHA0T7MOWo5KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk OGNjZGI3YzMtZTY1NS00YTdkLWFhZGItNGQ3MDAxY2M5MjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbYF5npUtwVayDQ/A4fIhvofLkB3sRwAi4ZW bSMaALfk5y3ZAdKCKmsuihPB/s2glXWjY+d6nP7RsfRQh+xNtg61FE2wklO0wcfM sA15P0Ilhbu0/6sHZyzJp9PWNxeFsrFeRA+EzNd3QdsBe6AkUszClPCslC0XztUd /4nvKoIZ+VaDfOc8WjQcVJL9jV6mWm6WEe28bx2gdfG/qrFHeWw/8fvZiy5iz+iW hv1sW3cDn0tgn73oH2g6Vc2aXY5uJxkWOitYUyRwbwMZkxZYbImjqnNdyPx1XAVb Hc++75Fkh8/yydT8leJqkTFnNnIFwZ37IdPsEC3LNATuU1UJCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM60dwr8i0TN+8sdNKT2EqLnHR9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzc2NDE3NmQtY2FkYy0z YjBkLTkxN2QtOTY4ODQ1ZWVlMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFSJ+s38fCMz7uH/OlmeIBqAm99EGw5pZk3A9MAEoFH8xyxY63eWYpk LSHbnF69/VuWnCjJ9wQN98MzhS1ZyincagChRqZXKABhAzIrfJhap8xf4VDeDI0B FCmY+EfCXfEvLX4VBS25K6UyvqCOKgP7N7tvaKiBL8EmpSVoFaYTpEnIThLTvGzG nkypdGjyohuijvO4v6GGqcPwerAPz9nOrgBM8esbz62VCaQEl7wopnGkoTPjGJ6p /g9Rdz6aCNM4qzOId6Ci5lfsXFzApsGWbmNm9Tmt8YGU1Xr7947ilgBpiFxbRAtz g6IKwejsQ3nAJOERN3klbABjsK5+N/k= -----END CERTIFICATE-----Generated at Fri Apr 4 19:02:03 2025 by rpki-client