$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa File: aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa (raw, json) Hash identifier: /doTYdtXiOeEjL6hSrWB5gIzDZkN1sikrLKw3C//ctk= Subject key identifier: 90:B6:CC:D3:75:BF:63:F8:E8:65:8C:7B:37:72:09:06:CE:3A:64:AB Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584965E9773332A7FE16A9D52300 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 11955 IP address blocks: 150.224.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:77:33:32:a7:fe:16:a9:d5:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=89686cf3-4d4e-4da1-b6b5-513f39d5bace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:c5:66:c4:c3:77:b3:4f:69:30:ea:9d:b0: 59:bb:99:84:d7:00:de:77:7a:4a:8c:73:cc:66:10: da:19:0f:ab:9d:72:6f:2e:69:59:d6:35:c8:d3:3d: 1d:52:d1:7e:06:28:03:60:fa:4b:c0:fb:d2:0f:68: a9:19:06:0a:a9:6a:24:77:0f:cf:76:3a:92:21:b8: fe:18:ce:34:27:ba:9d:61:a5:86:da:33:a3:35:f6: e4:78:62:dd:b1:96:e6:9c:ca:70:26:21:e1:78:8e: cb:12:d0:c1:b9:4a:4b:67:60:31:e5:ed:0e:bf:03: d0:6a:ab:72:d3:d0:cb:7c:59:a2:ff:42:7c:bb:97: c5:85:7a:7f:06:ff:9b:26:f7:d8:e0:af:91:42:06: 9b:9c:55:fc:5d:10:fc:d3:91:26:a8:3d:7f:ab:45: 82:2b:ef:b4:5d:a3:46:2b:89:6c:4c:de:b6:a2:12: 38:61:1c:78:61:39:2b:0a:60:46:d2:79:1f:9d:f6: 38:65:15:fd:9a:28:61:e4:30:8a:06:f8:ca:71:a9: 07:17:b6:9b:41:e2:b4:53:92:8f:81:42:3b:c3:35: 51:e1:5e:68:40:79:c8:a1:74:6c:e9:b1:62:38:ec: 8e:49:71:98:d3:9a:40:c4:4f:bc:09:ce:16:9b:97: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B6:CC:D3:75:BF:63:F8:E8:65:8C:7B:37:72:09:06:CE:3A:64:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 150.224.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:23:06:e7:fd:b9:49:00:8c:dc:81:7e:b2:c6:fc:fa:46:64: 64:43:a1:8b:3c:e0:98:d2:c0:f5:af:7e:bb:91:a3:31:f9:76: ac:21:29:94:0f:b3:85:62:eb:79:2e:9c:62:1d:e1:be:ca:bd: 3c:75:3c:b9:0b:9a:b2:bb:89:b7:a5:c2:ae:40:0e:a0:d7:75: f8:14:a8:22:36:b3:5d:dc:07:59:4a:e7:ba:4b:7d:78:a5:1a: 27:dc:a8:21:81:f3:12:72:07:7b:79:0f:3d:55:a4:9f:7f:1d: 6d:af:8b:af:0c:ab:75:d1:85:5b:97:6c:26:94:7e:ae:b6:cc: 65:11:fa:4f:55:47:28:54:c5:48:ec:8b:01:16:57:21:f0:a0: 34:d4:ad:7a:6e:a2:51:a7:d8:34:b8:b8:48:2d:91:3c:46:2d: 6a:f4:f8:1b:3e:d7:35:7a:e0:3f:af:88:09:41:35:60:8c:fd: 56:ec:74:0e:53:0a:ea:25:f8:50:9d:a7:4a:af:38:14:ed:64: 5e:0d:51:fb:c4:27:83:72:49:09:13:ed:4a:8f:25:be:50:ad: c2:a4:b0:72:86:50:48:d4:09:8a:a9:91:9c:02:46:e5:93:ea: fb:4c:7f:80:e7:15:44:7a:b1:76:41:e4:3d:f0:18:a0:9b:72: 56:ae:f4:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XczMqf+FqnVIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ODk2ODZjZjMtNGQ0ZS00ZGExLWI2YjUtNTEzZjM5ZDViYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKfFZsTDd7NPaTDqnbBZu5mE1wDed3pKjHPM ZhDaGQ+rnXJvLmlZ1jXI0z0dUtF+BigDYPpLwPvSD2ipGQYKqWokdw/PdjqSIbj+ GM40J7qdYaWG2jOjNfbkeGLdsZbmnMpwJiHheI7LEtDBuUpLZ2Ax5e0OvwPQaqty 09DLfFmi/0J8u5fFhXp/Bv+bJvfY4K+RQgabnFX8XRD805EmqD1/q0WCK++0XaNG K4lsTN62ohI4YRx4YTkrCmBG0nkfnfY4ZRX9mihh5DCKBvjKcakHF7abQeK0U5KP gUI7wzVR4V5oQHnIoXRs6bFiOOyOSXGY05pAxE+8Cc4Wm5eWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC2zNN1v2P46GWMezdyCQbOOmSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWFjYzBkZWYtZDkwMS0z NDI4LWFmN2QtMDRjZjhjYTNmNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAluD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIjBuf9uUkAjNyBfrLG/PpGZGRDoYs84JjSwPWvfruRozH5dqwhKZQP s4Vi63kunGId4b7KvTx1PLkLmrK7ibelwq5ADqDXdfgUqCI2s13cB1lK57pLfXil GifcqCGB8xJyB3t5Dz1VpJ9/HW2vi68Mq3XRhVuXbCaUfq62zGUR+k9VRyhUxUjs iwEWVyHwoDTUrXpuolGn2DS4uEgtkTxGLWr0+Bs+1zV64D+viAlBNWCM/VbsdA5T Cuol+FCdp0qvOBTtZF4NUfvEJ4NySQkT7UqPJb5QrcKksHKGUEjUCYqpkZwCRuWT 6vtMf4DnFUR6sXZB5D3wGKCbclau9LM= -----END CERTIFICATE-----Generated at Sun Apr 6 07:10:19 2025 by rpki-client