$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa File: bdd55083-6ce6-3837-add9-5ff3851a5c95.roa (raw, json) Hash identifier: mM+fJ2bDNaWQn1WsIGYH4vFAsHLrnjBOneHS981WwLQ= Subject key identifier: B3:02:75:D9:CA:48:80:5E:EA:15:18:7C:8B:C8:49:83:82:75:0D:F6 Certificate issuer: /CN=150b2426-c419-4e4b-b73d-c495cce8cfdd Certificate serial: 010D0C9F43285848D64117C3EA28D04DE468B280 Authority key identifier: 7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 16668 IP address blocks: 192.41.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:17:c3:ea:28:d0:4d:e4:68:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=150b2426-c419-4e4b-b73d-c495cce8cfdd Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=633bcd37-0b4c-4094-b8a7-4f536e4f96a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:71:2f:b0:4d:3c:1a:9c:a0:4a:0d:67:3f: b4:2a:80:be:30:3a:df:ab:8a:86:85:ae:68:9e:98: b3:e0:3c:b1:58:8b:4d:c3:d6:31:1b:9f:cf:0b:c7: 79:48:78:43:8f:84:56:9c:72:c7:23:a6:80:68:82: 74:5c:b7:83:ce:2c:32:7d:63:54:c5:78:a1:0c:ee: ef:a4:1b:9c:9a:9d:e9:c2:b2:a6:54:09:b0:8a:44: f7:36:20:ce:77:40:7f:7d:b4:21:0c:ee:5b:8f:f4: 96:bb:9a:30:21:6e:e0:ee:15:c9:0b:6b:3c:18:09: 16:94:cc:8e:f5:ef:f9:55:30:5d:d5:07:ac:a8:26: 72:bb:bd:06:4e:dc:0c:cf:f6:d0:9a:82:77:4b:dd: fc:9d:eb:28:8a:aa:87:0b:e1:da:ee:3b:25:52:77: 0f:f1:06:d3:74:a1:26:07:a4:48:6e:e1:86:70:e8: c6:d6:2e:b1:11:ce:f3:a5:67:79:e5:74:71:a1:56: ac:31:93:b2:93:ed:79:a6:8e:ea:03:ce:ba:68:4d: 52:41:96:fe:4d:7d:c1:68:0d:3d:6d:13:85:3b:e3: 83:41:a0:3c:93:b7:bf:eb:07:a3:49:e3:d5:14:f8: 27:49:6d:89:fb:5d:dc:35:fc:51:05:1a:0c:b5:78: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:02:75:D9:CA:48:80:5E:EA:15:18:7C:8B:C8:49:83:82:75:0D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl X509v3 Authority Key Identifier: keyid:7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer sbgp-ipAddrBlock: critical IPv4: 192.41.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9e:73:74:37:33:8c:99:d7:51:06:4d:54:e9:1b:aa:59:c1: 4d:07:e2:f6:b1:3a:a3:37:f2:20:22:55:7f:df:3e:b2:4a:a0: 64:27:1d:23:4d:cf:f8:a9:c8:f8:4c:58:65:d1:26:37:2a:38: de:6d:a1:d8:2e:7f:e3:06:b6:72:b9:1f:8d:df:8c:fa:ae:aa: 51:5a:21:90:2b:7b:e9:ac:bf:e2:53:90:85:3a:1d:92:e3:33: 2b:69:05:0a:5b:df:21:88:a4:50:2e:b8:c0:bb:ef:57:ac:08: b3:e4:c8:ab:a4:62:18:53:b8:2c:9e:f7:3f:24:51:9c:36:39: e4:2a:3a:a4:b4:88:02:97:7c:40:53:e3:29:aa:a9:08:2d:95: 23:fb:69:61:87:d4:e9:bf:52:13:a1:85:3d:a5:8f:1f:89:69: 58:bf:86:89:15:a0:13:ab:0d:f7:54:26:71:db:38:8a:4b:62: 00:2a:0f:4d:ed:fe:ad:15:5d:4e:1e:89:08:2b:17:b9:f3:04: 5c:a0:aa:63:60:b6:d9:c0:48:38:3b:c4:47:b3:71:6e:0c:57: de:c5:9e:9a:97:a3:d7:e6:8e:0b:92:81:fa:ad:5d:2e:9d:c1: 96:f1:f7:a5:e8:16:7d:42:37:ac:00:c0:05:55:b2:4b:e3:fc: da:e1:29:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRfD6ijQTeRosoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUwYjI0MjYtYzQxOS00ZTRiLWI3M2QtYzQ5NWNjZThj ZmRkMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjMzYmNkMzctMGI0Yy00MDk0LWI4YTctNGY1MzZlNGY5NmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRJxL7BNPBqcoEoNZz+0KoC+MDrfq4qGha5o npiz4DyxWItNw9YxG5/PC8d5SHhDj4RWnHLHI6aAaIJ0XLeDziwyfWNUxXihDO7v pBucmp3pwrKmVAmwikT3NiDOd0B/fbQhDO5bj/SWu5owIW7g7hXJC2s8GAkWlMyO 9e/5VTBd1QesqCZyu70GTtwMz/bQmoJ3S938nesoiqqHC+Ha7jslUncP8QbTdKEm B6RIbuGGcOjG1i6xEc7zpWd55XRxoVasMZOyk+15po7qA866aE1SQZb+TX3BaA09 bROFO+ODQaA8k7e/6wejSePVFPgnSW2J+13cNfxRBRoMtXjQGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMCddnKSIBe6hUYfIvISYOCdQ32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNTBi MjQyNi1jNDE5LTRlNGItYjczZC1jNDk1Y2NlOGNmZGQvYmRkNTUwODMtNmNlNi0z ODM3LWFkZDktNWZmMzg1MWE1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTUwYjI0MjYtYzQxOS00ZTRiLWI3 M2QtYzQ5NWNjZThjZmRkLzE1MGIyNDI2LWM0MTktNGU0Yi1iNzNkLWM0OTVjY2U4 Y2ZkZC5jcmwwHwYDVR0jBBgwFoAUe7De+Nhz0jxiZZw0GP+rGSMsJsEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNTBiMjQyNi1jNDE5LTRlNGItYjczZC1jNDk1 Y2NlOGNmZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSec3Q3M4yZ11EGTVTpG6pZwU0H4vaxOqM38iAiVX/fPrJKoGQnHSNN z/ipyPhMWGXRJjcqON5todguf+MGtnK5H43fjPquqlFaIZAre+msv+JTkIU6HZLj MytpBQpb3yGIpFAuuMC771esCLPkyKukYhhTuCye9z8kUZw2OeQqOqS0iAKXfEBT 4ymqqQgtlSP7aWGH1Om/UhOhhT2ljx+JaVi/hokVoBOrDfdUJnHbOIpLYgAqD03t /q0VXU4eiQgrF7nzBFygqmNgttnASDg7xEezcW4MV97FnpqXo9fmjguSgfqtXS6d wZbx96XoFn1CN6wAwAVVskvj/NrhKQI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:25:54 2025 by rpki-client