$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d7e380d-3081-3320-9fb6-97da825791d1.roa File: 2d7e380d-3081-3320-9fb6-97da825791d1.roa (raw, json) Hash identifier: 99BEikTS4yiuHk8AYmN/WiRCFPzOvGZEm7NW9wJlAoM= Subject key identifier: 11:4A:59:36:2D:6F:EA:31:6C:25:88:EB:D0:CE:CB:AD:E5:9E:98:21 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A677B35CD984923B551C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d7e380d-3081-3320-9fb6-97da825791d1.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:67:7b:35:cd:98:49:23:b5:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=280cf9fb-ed22-422f-b362-04c428ea2a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:17:df:00:d8:d4:34:d3:52:2c:ac:a5:53: f1:55:af:c3:d4:75:f5:2d:ac:6b:80:51:83:75:21: d4:8c:08:1b:8f:5f:63:b8:bf:52:a8:3b:41:0f:06: 61:33:8c:8d:67:ca:d4:e0:4e:68:4e:0a:34:79:b3: 11:cf:55:3f:67:5e:9b:6c:94:03:aa:a3:16:b8:40: 08:93:d1:5c:9d:f4:7f:be:36:f7:5e:42:37:cc:5a: a8:08:f6:60:67:b2:0a:45:6f:a4:49:c6:bc:17:4b: 0d:14:51:a4:e0:1b:89:ed:d7:54:80:18:6a:b8:84: 29:f5:67:03:a7:c9:61:ce:cc:38:1f:05:d1:23:26: 4c:d4:e5:04:01:b0:10:2f:1a:1f:64:eb:0a:47:f0: f8:ac:11:7d:27:2e:f5:12:c7:cb:13:a0:9e:7d:db: 59:dc:b8:07:4c:6a:b8:ad:54:c2:3a:92:49:66:f4: 48:bd:d6:04:69:7c:e7:b9:f1:ce:b2:4e:f0:eb:00: 2a:76:75:d0:47:fc:8b:f5:42:75:db:19:45:d9:d7: 12:37:ad:2d:68:bd:33:5b:41:b6:1c:3f:be:3d:9a: 9b:04:86:e9:24:0a:19:9b:5c:60:83:86:2a:db:76: 86:ee:ad:1b:06:33:26:53:58:f5:79:e7:82:22:46: cf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4A:59:36:2D:6F:EA:31:6C:25:88:EB:D0:CE:CB:AD:E5:9E:98:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d7e380d-3081-3320-9fb6-97da825791d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:35:93:17:f6:cc:de:83:8d:33:ef:ba:96:78:4d:9c:69:8b: 51:88:77:cf:e2:86:f5:95:8e:6a:15:38:b6:ba:ed:7d:89:6b: f7:fa:e2:9c:04:8f:87:57:ee:fe:cf:ba:26:64:dd:82:4f:ff: 66:d1:58:3f:25:5e:e3:9d:4b:ad:b0:20:be:5d:b1:ec:67:05: 2b:7d:b2:b4:8c:80:c5:7f:ae:4b:92:f8:9f:75:d5:a5:cb:55: 65:ae:81:2b:88:a2:ba:9b:e1:e8:ea:a1:f1:48:ef:9d:cf:9f: 25:e4:67:4a:b6:29:f3:38:a8:5b:06:39:0f:c3:36:a5:dc:10: 3d:04:ce:50:27:84:b3:f9:54:1b:7d:3e:76:b8:14:43:ee:d3: 93:c6:5b:1b:f9:a0:8b:48:fb:83:76:46:f7:14:d0:6e:d9:b7: 12:0c:f0:d4:dd:98:7a:8e:bc:37:e4:6f:b9:33:18:b8:c7:9d: 36:4c:d4:17:d1:cd:f7:34:32:3c:6a:cb:d4:d0:18:0a:ad:23: 7e:7c:0a:9d:24:40:82:90:56:1e:ea:96:26:1f:46:d8:7b:44: be:0b:eb:75:17:7d:a2:33:e8:33:5c:57:3b:79:2e:9f:ca:41: 04:26:0d:6d:97:c7:0c:50:2b:3d:5d:96:47:11:c5:21:b9:04: 87:bd:ff:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Smd7Nc2YSSO1UcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk MjgwY2Y5ZmItZWQyMi00MjJmLWIzNjItMDRjNDI4ZWEyYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IUX3wDY1DTTUiyspVPxVa/D1HX1LaxrgFGD dSHUjAgbj19juL9SqDtBDwZhM4yNZ8rU4E5oTgo0ebMRz1U/Z16bbJQDqqMWuEAI k9FcnfR/vjb3XkI3zFqoCPZgZ7IKRW+kSca8F0sNFFGk4BuJ7ddUgBhquIQp9WcD p8lhzsw4HwXRIyZM1OUEAbAQLxofZOsKR/D4rBF9Jy71EsfLE6CefdtZ3LgHTGq4 rVTCOpJJZvRIvdYEaXznufHOsk7w6wAqdnXQR/yL9UJ12xlF2dcSN60taL0zW0G2 HD++PZqbBIbpJAoZm1xgg4Yq23aG7q0bBjMmU1j1eeeCIkbPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFKWTYtb+oxbCWI69DOy63lnpghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQ3ZTM4MGQtMzA4MS0z MzIwLTlmYjYtOTdkYTgyNTc5MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI1kxf2zN6DjTPvupZ4TZxpi1GId8/ihvWVjmoVOLa67X2Ja/f64pwE j4dX7v7PuiZk3YJP/2bRWD8lXuOdS62wIL5dsexnBSt9srSMgMV/rkuS+J911aXL VWWugSuIorqb4ejqofFI753PnyXkZ0q2KfM4qFsGOQ/DNqXcED0EzlAnhLP5VBt9 Pna4FEPu05PGWxv5oItI+4N2RvcU0G7ZtxIM8NTdmHqOvDfkb7kzGLjHnTZM1BfR zfc0Mjxqy9TQGAqtI358Cp0kQIKQVh7qliYfRth7RL4L63UXfaIz6DNcVzt5Lp/K QQQmDW2XxwxQKz1dlkcRxSG5BIe9/2Q= -----END CERTIFICATE-----Generated at Sun Jun 15 13:23:04 2025 by rpki-client