$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f015a984-5da5-366c-8ba2-cf84571ad90e.roa File: f015a984-5da5-366c-8ba2-cf84571ad90e.roa (raw, json) Hash identifier: WghjqQ2ZENuWpCa6k+AkWYHsn+W8I6OkEBDdUp+ahIg= Subject key identifier: 3E:0E:98:39:3F:43:64:E7:E3:7F:9F:FB:F5:8B:1A:89:19:AE:FC:28 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848CB165DE51FC8EACC66F71800 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f015a984-5da5-366c-8ba2-cf84571ad90e.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 150.48.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:5d:e5:1f:c8:ea:cc:66:f7:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=6a228bc6-c360-4ca0-a72c-6995a456b893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:50:48:b6:27:00:b1:10:5d:17:e6:3b:c6:cc: 7f:ad:47:42:da:8f:72:c1:b7:a5:40:4c:48:ee:e0: d8:6c:5e:14:70:24:c3:00:62:97:8c:f5:ac:fd:4f: 5b:3d:9e:78:51:53:19:16:b8:01:5e:bc:70:02:1a: 53:b5:62:6f:c6:f6:09:de:c1:24:80:08:a0:61:97: fc:70:78:1e:39:24:91:65:8e:ab:20:03:92:ac:d7: 91:eb:84:45:a8:5f:73:b2:72:66:90:75:e8:89:1d: 1a:f7:13:a7:06:67:56:08:86:aa:8b:5a:e5:45:da: c2:ef:e8:fc:ec:20:b3:8f:73:13:39:b6:39:28:ea: 3d:91:d0:ae:90:41:21:a9:25:ef:f6:c4:14:ff:14: 8f:01:5f:1a:57:75:d7:91:b5:94:5e:f9:fd:2d:3b: 7d:bb:66:22:55:81:b9:25:d5:f3:85:7f:b4:59:ad: be:8a:5c:7a:73:a0:16:90:c4:a8:8d:55:db:18:93: fa:44:a4:db:42:37:7e:c8:f3:59:9a:3f:00:85:34: 72:71:d0:d1:b9:e0:51:3e:9c:44:9b:9a:fd:c8:cb: 15:2c:33:89:0b:a9:ac:ad:aa:52:93:86:94:e2:4a: 33:ab:24:ed:0d:64:d3:b7:96:72:e0:88:86:f5:8d: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0E:98:39:3F:43:64:E7:E3:7F:9F:FB:F5:8B:1A:89:19:AE:FC:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f015a984-5da5-366c-8ba2-cf84571ad90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1c:be:d8:5f:37:87:f3:5e:39:8b:65:ae:1f:ad:df:c0:74: 5a:76:09:21:33:e5:d8:48:58:42:5e:e6:bc:dc:0e:f0:6f:4e: 7f:d2:ed:39:88:a1:4b:a3:25:43:68:37:16:74:7a:8f:98:cc: 75:8a:9f:fb:af:72:a5:68:15:28:5e:61:6e:9a:a4:0d:43:a1: 01:43:d4:e2:05:a8:82:32:78:14:8e:09:7c:61:2f:83:d6:eb: 59:1f:9f:71:c0:94:ba:a1:bd:57:85:8d:37:98:ae:97:be:a1: 04:9e:47:2c:b1:a7:de:a0:5e:c1:9a:48:e7:38:fc:8e:7d:c0: 67:d4:9e:21:ec:3d:55:a0:04:92:6e:31:c6:e0:53:be:93:9a: cb:83:5b:b9:92:c2:7e:18:b1:e6:4c:cd:c4:f9:a3:4a:e6:b7: 58:8f:04:58:b9:1a:10:29:c7:cc:cf:25:ab:86:27:7b:90:f3: 58:d5:9f:f5:34:8f:3c:b0:95:96:bd:04:61:51:8c:98:c7:1b: 3a:8c:54:77:54:ca:ec:8f:51:3f:5d:c8:4e:b4:f1:56:f4:8e: 2c:21:ac:f1:2a:b3:11:e3:e7:17:12:c8:36:63:a9:b7:60:29: c2:a9:87:5b:97:29:f0:2d:e8:f3:85:95:f2:5f:b7:a8:31:6c: 1e:fe:51:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFl3lH8jqzGb3GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmEyMjhiYzYtYzM2MC00Y2EwLWE3MmMtNjk5NWE0NTZiODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFBIticAsRBdF+Y7xsx/rUdC2o9ywbelQExI 7uDYbF4UcCTDAGKXjPWs/U9bPZ54UVMZFrgBXrxwAhpTtWJvxvYJ3sEkgAigYZf8 cHgeOSSRZY6rIAOSrNeR64RFqF9zsnJmkHXoiR0a9xOnBmdWCIaqi1rlRdrC7+j8 7CCzj3MTObY5KOo9kdCukEEhqSXv9sQU/xSPAV8aV3XXkbWUXvn9LTt9u2YiVYG5 JdXzhX+0Wa2+ilx6c6AWkMSojVXbGJP6RKTbQjd+yPNZmj8AhTRycdDRueBRPpxE m5r9yMsVLDOJC6msrapSk4aU4kozqyTtDWTTt5Zy4IiG9Y2SywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4OmDk/Q2Tn43+f+/WLGokZrvwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjAxNWE5ODQtNWRhNS0z NjZjLThiYTItY2Y4NDU3MWFkOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEljCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQcvthfN4fzXjmLZa4frd/AdFp2CSEz5dhIWEJe5rzcDvBvTn/S7TmI oUujJUNoNxZ0eo+YzHWKn/uvcqVoFSheYW6apA1DoQFD1OIFqIIyeBSOCXxhL4PW 61kfn3HAlLqhvVeFjTeYrpe+oQSeRyyxp96gXsGaSOc4/I59wGfUniHsPVWgBJJu McbgU76TmsuDW7mSwn4YseZMzcT5o0rmt1iPBFi5GhApx8zPJauGJ3uQ81jVn/U0 jzywlZa9BGFRjJjHGzqMVHdUyuyPUT9dyE608Vb0jiwhrPEqsxHj5xcSyDZjqbdg KcKph1uXKfAt6POFlfJft6gxbB7+UaE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:55 2025 by rpki-client