$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa File: 2721cc76-984d-3d59-b070-bc496caa0ffd.roa (raw, json) Hash identifier: cyYFs+fpJaos4ivCqIbA2pgQNVtT9powdrmRWg20q6Q= Subject key identifier: DD:58:02:11:50:25:79:DC:97:F9:9E:DF:A9:E1:1A:DF:85:EE:3E:04 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A6842B1A068417E26D940 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:68:42:b1:a0:68:41:7e:26:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=e0c6e038-b26b-4a77-86ee-4d8a61a157db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:a9:78:e7:fa:fd:d1:6f:17:0b:da:8e:80: 58:53:80:50:17:54:a9:dc:69:4f:72:1b:dc:d4:69: ab:ad:11:c1:e8:60:35:34:98:2a:82:d1:4b:6d:85: aa:fc:ff:d2:aa:5a:8e:a4:88:a3:e4:e6:67:b0:21: 36:64:b7:2c:dd:37:03:3b:64:b8:3a:f0:69:15:13: 30:42:08:8a:95:cb:6d:1d:aa:d1:4e:c5:d8:65:3f: c7:96:e6:e6:8b:4f:e2:b8:ad:c1:ea:22:2b:aa:eb: 47:71:c4:6b:a0:eb:30:49:aa:f8:b2:cb:87:3a:77: a4:c1:41:44:da:8a:af:c7:90:04:26:a9:be:58:41: eb:05:91:61:5f:0e:22:18:a9:b4:94:4f:ec:0f:32: 34:ad:79:25:96:b7:51:96:93:81:ae:7c:2b:e6:06: aa:54:92:58:f8:7b:42:2d:3a:3e:ae:cb:48:a6:31: ce:77:93:7d:10:1d:c9:43:f4:1d:0c:4f:79:a6:2c: 8d:ab:95:f1:24:6e:bc:ce:b9:6c:a9:f8:e9:88:fa: fc:62:aa:04:4c:b1:ff:fc:84:d9:0d:2b:cd:c7:1e: d4:4a:e4:bc:e2:11:2b:c7:99:e9:ec:cf:24:33:cc: c9:58:70:9e:37:0c:46:08:aa:a4:71:3c:85:95:9d: 94:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:58:02:11:50:25:79:DC:97:F9:9E:DF:A9:E1:1A:DF:85:EE:3E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:37:bc:26:04:b3:c8:e1:30:11:c3:20:98:d9:cd:c5:23:52: e0:5d:6c:42:6f:85:77:9b:b0:77:20:d5:90:b7:7b:d6:f7:79: ab:59:ad:9e:48:a8:49:02:d6:c3:6a:79:e3:3c:e4:49:24:89: 62:c2:c1:cc:ac:15:54:53:68:42:e6:7c:10:81:4e:14:b0:35: 92:e6:47:78:82:d3:f7:1a:4e:99:c1:89:0a:cd:fe:2c:a0:2c: f4:1a:91:26:90:b0:8a:c9:b3:98:38:a3:49:1a:fd:59:f4:f1: 3a:1e:0e:3a:b6:c3:c0:2c:66:af:f2:df:d1:88:b3:08:c7:e6: 88:05:b2:1c:86:8d:8c:56:00:63:9b:a8:ef:3a:92:a0:a0:56: 41:aa:c8:dc:fc:c0:db:c9:08:45:8c:eb:9e:27:76:75:4d:1d: 55:6d:eb:aa:53:55:55:c7:a7:bc:33:8d:f1:5b:2c:7d:85:95: 1f:c0:7b:c0:0d:aa:43:93:a2:7c:8a:38:c7:5c:89:5c:09:13: b4:c6:94:e4:04:82:4a:cf:73:8e:83:fb:57:23:7a:03:fb:83: 33:71:13:c3:0e:d5:7b:0b:6d:60:07:6a:dc:60:21:52:e8:d7: 5f:9c:e0:78:65:26:f6:f1:62:4c:9d:0c:86:53:4d:2d:bb:65: c4:64:94:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmhCsaBoQX4m2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ZTBjNmUwMzgtYjI2Yi00YTc3LTg2ZWUtNGQ4YTYxYTE1N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqWpeOf6/dFvFwvajoBYU4BQF1Sp3GlPchvc 1GmrrRHB6GA1NJgqgtFLbYWq/P/SqlqOpIij5OZnsCE2ZLcs3TcDO2S4OvBpFRMw QgiKlcttHarRTsXYZT/Hlubmi0/iuK3B6iIrqutHccRroOswSar4ssuHOnekwUFE 2oqvx5AEJqm+WEHrBZFhXw4iGKm0lE/sDzI0rXkllrdRlpOBrnwr5gaqVJJY+HtC LTo+rstIpjHOd5N9EB3JQ/QdDE95piyNq5XxJG68zrlsqfjpiPr8YqoETLH//ITZ DSvNxx7USuS84hErx5np7M8kM8zJWHCeNwxGCKqkcTyFlZ2UbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1YAhFQJXncl/me36nhGt+F7j4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjcyMWNjNzYtOTg0ZC0z ZDU5LWIwNzAtYmM0OTZjYWEwZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs3vCYEs8jhMBHDIJjZzcUjUuBdbEJvhXebsHcg1ZC3e9b3eatZrZ5I qEkC1sNqeeM85EkkiWLCwcysFVRTaELmfBCBThSwNZLmR3iC0/caTpnBiQrN/iyg LPQakSaQsIrJs5g4o0ka/Vn08ToeDjq2w8AsZq/y39GIswjH5ogFshyGjYxWAGOb qO86kqCgVkGqyNz8wNvJCEWM654ndnVNHVVt66pTVVXHp7wzjfFbLH2FlR/Ae8AN qkOTonyKOMdciVwJE7TGlOQEgkrPc46D+1cjegP7gzNxE8MO1XsLbWAHatxgIVLo 11+c4HhlJvbxYkydDIZTTS27ZcRklAQ= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:27 2025 by rpki-client