$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/590f2b04-ef15-3f29-a12d-9bf6fac7f216.roa File: 590f2b04-ef15-3f29-a12d-9bf6fac7f216.roa (raw, json) Hash identifier: Ol3wIZa57T7ouIhxAkFe0bQy2RKI/t+4J4qardRBQeg= Subject key identifier: 1A:A0:F3:39:F2:31:36:0C:73:5F:A7:0C:0B:C2:82:E2:2C:7B:B2:53 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848CB16617ADFF650D5AD467B00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/590f2b04-ef15-3f29-a12d-9bf6fac7f216.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 150.48.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:61:7a:df:f6:50:d5:ad:46:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=36fdbad0-8a3b-49fa-9407-80b8d3b2ac4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:31:e4:e1:d6:b8:a9:83:b6:6d:d2:d2:f1: 75:a9:bc:20:0d:d1:2f:48:57:b1:1a:4f:4b:c9:db: 5f:9e:74:7d:40:5a:b2:9c:aa:9a:ba:0a:47:2f:5b: 0d:78:20:62:b8:94:15:90:d6:d1:2a:f4:3e:27:12: 9a:91:ea:27:26:92:1a:00:50:8d:d6:85:46:a2:d8: e3:45:e0:5f:bd:4b:7c:74:e6:e0:9f:62:3f:63:94: 42:39:88:06:b6:d8:d8:75:a7:75:0b:a7:41:85:a6: 1a:fe:b5:92:90:c0:91:34:b2:95:90:ea:d0:54:84: 0a:ce:ed:b6:f9:9c:db:8e:f8:dd:11:e6:88:83:7d: 1a:2a:ed:e3:91:fe:e9:9f:bd:a3:92:01:2d:3c:c7: 73:42:49:4a:f6:b2:e8:4f:02:8e:9f:c3:25:8e:33: 59:e7:aa:0f:9d:09:0b:cc:1a:07:30:cd:37:ae:cb: e0:16:de:68:ac:ad:77:63:0c:74:cd:88:f7:c3:11: 1b:7a:e0:a6:ef:8b:ab:da:75:d9:3c:65:15:c4:14: d9:6d:35:86:d8:88:a6:d3:6e:d0:78:c9:39:4e:0a: 1f:58:da:25:44:57:00:ba:01:3a:68:7c:48:4f:56: 13:d1:0d:9c:5b:61:b3:c5:df:8e:67:68:ec:90:81: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A0:F3:39:F2:31:36:0C:73:5F:A7:0C:0B:C2:82:E2:2C:7B:B2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/590f2b04-ef15-3f29-a12d-9bf6fac7f216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f3:b2:06:94:87:b9:5a:d3:3a:b7:7e:a1:d9:e8:ef:92:ab: 85:77:92:a3:69:21:04:95:6a:71:15:9b:dc:7b:37:9e:29:56: 2b:e6:eb:d5:88:d0:5c:51:61:53:a6:d8:fd:4a:d7:1e:8d:b2: cd:8d:35:e4:0f:53:cf:9c:48:a0:d7:7f:b4:db:4d:a9:66:06: 3b:35:62:f4:dc:f9:20:96:98:21:2b:2c:e5:70:41:e7:c2:e5: 18:5a:07:96:97:8f:51:f1:63:c8:53:b3:51:90:53:1d:52:35: b1:2f:e7:4c:c0:5d:cd:38:8f:1c:d0:f1:48:4b:ba:f2:05:3c: ab:7e:93:0a:d8:13:79:a8:53:a8:2d:b7:5e:d5:bb:07:87:4d: 10:9a:a8:83:21:19:66:50:a7:b0:bb:63:98:b1:85:26:20:65: ec:8f:ed:c7:86:1d:d8:3f:9c:7b:e9:0e:61:be:8b:57:0c:4e: 22:66:d8:5b:ee:9b:d2:d4:48:25:00:0a:89:c7:7c:37:98:34: 7b:3f:e9:c0:88:e5:e9:0b:2f:45:73:c5:6c:f0:d6:a3:03:1d: 5b:a5:3c:f2:03:60:62:96:2a:fb:d5:5b:9e:fa:68:0b:75:45: 28:55:1b:3a:fd:62:75:88:69:27:5c:3a:df:b2:a9:8f:e6:54: 6a:88:cf:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFmF63/ZQ1a1GewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MzZmZGJhZDAtOGEzYi00OWZhLTk0MDctODBiOGQzYjJhYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlocx5OHWuKmDtm3S0vF1qbwgDdEvSFexGk9L ydtfnnR9QFqynKqaugpHL1sNeCBiuJQVkNbRKvQ+JxKakeonJpIaAFCN1oVGotjj ReBfvUt8dObgn2I/Y5RCOYgGttjYdad1C6dBhaYa/rWSkMCRNLKVkOrQVIQKzu22 +ZzbjvjdEeaIg30aKu3jkf7pn72jkgEtPMdzQklK9rLoTwKOn8MljjNZ56oPnQkL zBoHMM03rsvgFt5orK13Ywx0zYj3wxEbeuCm74ur2nXZPGUVxBTZbTWG2Iim027Q eMk5TgofWNolRFcAugE6aHxIT1YT0Q2cW2Gzxd+OZ2jskIFGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqg8znyMTYMc1+nDAvCguIse7JTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTkwZjJiMDQtZWYxNS0z ZjI5LWExMmQtOWJmNmZhYzdmMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCljCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETzsgaUh7la0zq3fqHZ6O+Sq4V3kqNpIQSVanEVm9x7N54pVivm69WI 0FxRYVOm2P1K1x6Nss2NNeQPU8+cSKDXf7TbTalmBjs1YvTc+SCWmCErLOVwQefC 5RhaB5aXj1HxY8hTs1GQUx1SNbEv50zAXc04jxzQ8UhLuvIFPKt+kwrYE3moU6gt t17VuweHTRCaqIMhGWZQp7C7Y5ixhSYgZeyP7ceGHdg/nHvpDmG+i1cMTiJm2Fvu m9LUSCUAConHfDeYNHs/6cCI5ekLL0VzxWzw1qMDHVulPPIDYGKWKvvVW576aAt1 RShVGzr9YnWIaSdcOt+yqY/mVGqIzwo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:38 2025 by rpki-client