$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/91c3a106-db7f-3246-83b9-fbc7e00777b5.roa File: 91c3a106-db7f-3246-83b9-fbc7e00777b5.roa (raw, json) Hash identifier: OcjS80XXnyDDvSL1x7est1mlZ9Hzwg/jjz006dm64ro= Subject key identifier: 63:15:19:11:0A:F9:27:B9:41:59:2E:7E:34:52:97:BF:59:94:5D:2A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848CB166129069A637B81828C00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/91c3a106-db7f-3246-83b9-fbc7e00777b5.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 150.48.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:61:29:06:9a:63:7b:81:82:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=bd0cf5ea-a9d6-4614-836a-4e305c81ee31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:66:29:35:4b:6f:38:34:1d:1f:3e:69:40: fb:31:6f:56:6a:c6:1e:c5:59:75:00:35:b1:7c:22: 76:3e:ac:56:a7:35:fc:10:5a:7c:d0:05:5e:60:e8: 84:f5:2e:00:d9:9f:02:a8:d4:98:ec:78:5d:22:0b: 7e:72:10:dd:bd:3a:e2:ab:d8:ed:b1:a9:b7:40:a1: 97:75:fe:ed:8b:d6:9e:cc:d5:37:fb:84:a1:16:4b: d6:23:d3:f0:a1:7c:01:78:c4:a4:09:4c:c1:ee:dd: 58:31:96:f8:56:22:4a:0d:9e:f4:e1:ff:73:8a:eb: 60:0b:7f:a6:91:07:2c:e1:05:e6:b3:b2:e8:44:49: d0:3d:32:46:46:df:38:bc:b9:2d:ea:f3:f0:0e:54: 7d:f0:a8:2d:79:f4:0d:64:ce:01:fa:f5:1f:07:ef: 2b:83:e5:f6:1f:01:a3:31:35:d1:a9:cc:9c:3d:00: 95:e4:9f:39:91:0c:e2:a3:9a:4f:cd:3b:ad:ed:dc: e0:1e:8e:f3:37:6f:78:a8:c8:a6:b8:25:69:52:79: 35:73:4c:58:81:69:51:8b:14:b8:ab:5b:02:73:73: a1:65:d0:03:c9:f5:2f:db:cb:37:cc:a7:4b:cd:c6: e9:eb:8c:1d:55:88:8b:53:c5:ac:f3:bc:81:cc:03: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:15:19:11:0A:F9:27:B9:41:59:2E:7E:34:52:97:BF:59:94:5D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/91c3a106-db7f-3246-83b9-fbc7e00777b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1b:1f:f4:4d:a1:ff:2c:72:d0:ad:fd:e9:b6:40:db:34:76: f0:cf:7e:db:07:3e:af:a0:a5:34:6c:dc:5b:73:58:0b:d1:f2: bf:63:57:fd:24:71:2e:bd:6b:25:57:05:58:61:6f:50:cf:39: ee:e5:14:91:de:56:f0:73:c5:e3:bb:1b:eb:0e:47:1e:9e:b9: 58:4d:c8:64:09:aa:a6:05:1a:73:3c:22:03:f6:c5:3d:fc:f3: 1a:54:8c:c2:52:1e:49:2a:8a:cd:e9:45:ec:53:73:14:0f:d7: 07:93:4f:a9:28:97:a8:d4:27:79:06:5d:24:d9:0a:b9:7b:c1: be:fe:90:f3:40:d8:12:fe:54:08:b2:d5:a7:62:df:27:fa:8c: 54:f7:06:25:cb:c2:ad:a4:c1:02:92:98:df:23:8e:10:0b:6e: 27:d9:04:8d:a1:6b:20:7f:a7:57:d5:2e:99:69:2a:a9:d0:5d: 34:1a:a3:b9:8f:1f:9b:b9:46:2d:d6:11:61:b1:33:50:c7:85: a7:ef:0b:56:a0:1c:38:60:e2:20:20:46:02:ea:8b:61:4a:fd: b2:03:46:22:93:52:47:87:7d:50:28:ba:90:ea:28:55:fa:b7: dc:44:64:23:97:92:7e:d4:ab:19:98:33:26:90:24:88:b7:4e: a5:e6:56:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFmEpBppje4GCjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk YmQwY2Y1ZWEtYTlkNi00NjE0LTgzNmEtNGUzMDVjODFlZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYVmKTVLbzg0HR8+aUD7MW9WasYexVl1ADWx fCJ2PqxWpzX8EFp80AVeYOiE9S4A2Z8CqNSY7HhdIgt+chDdvTriq9jtsam3QKGX df7ti9aezNU3+4ShFkvWI9PwoXwBeMSkCUzB7t1YMZb4ViJKDZ704f9ziutgC3+m kQcs4QXms7LoREnQPTJGRt84vLkt6vPwDlR98KgtefQNZM4B+vUfB+8rg+X2HwGj MTXRqcycPQCV5J85kQzio5pPzTut7dzgHo7zN294qMimuCVpUnk1c0xYgWlRixS4 q1sCc3OhZdADyfUv28s3zKdLzcbp64wdVYiLU8Ws87yBzAOTJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMVGREK+Se5QVkufjRSl79ZlF0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTFjM2ExMDYtZGI3Zi0z MjQ2LTgzYjktZmJjN2UwMDc3N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYbH/RNof8sctCt/em2QNs0dvDPftsHPq+gpTRs3FtzWAvR8r9jV/0k cS69ayVXBVhhb1DPOe7lFJHeVvBzxeO7G+sORx6euVhNyGQJqqYFGnM8IgP2xT38 8xpUjMJSHkkqis3pRexTcxQP1weTT6kol6jUJ3kGXSTZCrl7wb7+kPNA2BL+VAiy 1adi3yf6jFT3BiXLwq2kwQKSmN8jjhALbifZBI2hayB/p1fVLplpKqnQXTQao7mP H5u5Ri3WEWGxM1DHhafvC1agHDhg4iAgRgLqi2FK/bIDRiKTUkeHfVAoupDqKFX6 t9xEZCOXkn7UqxmYMyaQJIi3TqXmVjE= -----END CERTIFICATE-----Generated at Fri Mar 14 13:18:24 2025 by rpki-client