$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa File: 5d294aa1-589d-36a0-863c-3f219e30b6f5.roa (raw, json) Hash identifier: IqAna8GV8cIzVv7PVNE/E8pMir3D94CyVoVV2Rflsgs= Subject key identifier: 1A:10:B0:CE:8C:BB:24:FA:BC:12:A5:9B:55:7F:E1:B8:38:81:6D:52 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A64268466422C1B047200 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:64:26:84:66:42:2c:1b:04:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=1a64f07b-64bd-418e-a45b-9b1e0772551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:ff:fe:de:d5:3f:1e:45:6f:12:6e:09:60: 55:ec:2c:40:4b:20:64:3f:c8:1a:a8:ea:3f:cf:fa: 16:91:12:9e:50:36:d4:bc:ff:06:3b:65:5b:e6:00: 97:de:07:d7:58:ad:ba:72:ab:9b:f8:22:11:64:f7: 6d:a5:f0:77:dc:59:ec:38:05:80:cf:f1:01:48:c6: 2e:4e:d3:62:53:67:94:c6:0d:37:8b:09:1e:57:12: 32:27:01:e1:20:bb:61:14:9d:cf:82:ef:09:39:30: 70:8a:31:6a:7c:f0:ca:c1:17:10:0f:b9:df:cb:ef: f0:a4:19:61:42:9d:61:99:b2:78:cf:22:92:ea:b3: b8:ff:54:81:e1:d8:44:6c:97:ec:1c:fa:99:0e:d6: eb:5b:61:79:5e:48:4c:9d:71:a2:5f:f6:a6:48:11: 74:84:f7:07:6d:fc:4a:40:d5:83:30:15:0d:7a:21: 7a:2e:b5:fd:be:e7:5b:f6:ed:a0:eb:fd:08:37:92: 50:db:80:39:70:67:f7:cf:b7:ad:17:11:1b:0d:41: 2f:b7:5b:85:5d:78:b3:5e:1c:87:a7:3b:a2:75:e9: e4:27:89:8b:d7:75:bd:35:64:38:16:58:59:cd:00: 8e:5d:d8:b1:3a:47:8f:3c:41:75:3d:83:90:5f:be: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:B0:CE:8C:BB:24:FA:BC:12:A5:9B:55:7F:E1:B8:38:81:6D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:89:5f:fb:62:de:06:2f:cf:14:3b:d2:a1:38:4d:c5:76:31: f0:5f:4f:a1:2a:a2:77:d8:60:67:c4:2e:d9:78:d5:55:8d:45: 87:1d:2f:d1:da:58:f7:11:17:bc:5b:2c:79:a0:b8:80:a3:55: d1:f2:4c:0a:b5:6b:0d:b7:bf:62:8d:b6:24:10:b7:82:8a:6e: 53:26:e6:02:4f:8d:06:1a:46:77:82:47:37:d6:84:17:55:24: f1:93:30:09:ba:f7:8b:2d:52:24:ec:ba:73:8b:7b:79:15:7a: 00:79:57:40:b2:2a:12:6c:ce:9a:9f:98:c7:a9:87:c1:fe:88: d0:69:77:89:fd:aa:d4:5d:e0:87:27:b8:fa:49:5d:26:14:7d: ff:fc:19:28:cc:ce:1e:d8:bd:b3:3b:a9:74:09:06:77:5f:8d: 00:24:6c:67:cd:ac:a3:d6:0e:77:b9:b9:a4:b4:01:f7:f5:fb: 15:4d:4a:76:61:cf:92:79:ec:c6:af:8a:c1:83:9e:46:0d:bd: 60:8f:c8:c0:0e:3c:12:5c:01:ec:05:b9:d4:55:ab:27:0e:53: 14:c0:34:18:1c:30:5b:3e:e5:bd:de:c1:ff:15:e2:f9:8f:06: 27:95:92:db:8f:97:70:27:73:f6:68:20:cf:4d:c3:80:51:9b: b8:0c:12:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmQmhGZCLBsEcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk MWE2NGYwN2ItNjRiZC00MThlLWE0NWItOWIxZTA3NzI1NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpr//t7VPx5FbxJuCWBV7CxASyBkP8gaqOo/ z/oWkRKeUDbUvP8GO2Vb5gCX3gfXWK26cqub+CIRZPdtpfB33FnsOAWAz/EBSMYu TtNiU2eUxg03iwkeVxIyJwHhILthFJ3Pgu8JOTBwijFqfPDKwRcQD7nfy+/wpBlh Qp1hmbJ4zyKS6rO4/1SB4dhEbJfsHPqZDtbrW2F5XkhMnXGiX/amSBF0hPcHbfxK QNWDMBUNeiF6LrX9vudb9u2g6/0IN5JQ24A5cGf3z7etFxEbDUEvt1uFXXizXhyH pzuidenkJ4mL13W9NWQ4FlhZzQCOXdixOkePPEF1PYOQX74IiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoQsM6MuyT6vBKlm1V/4bg4gW1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWQyOTRhYTEtNTg5ZC0z NmEwLTg2M2MtM2YyMTllMzBiNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSJX/ti3gYvzxQ70qE4TcV2MfBfT6EqonfYYGfELtl41VWNRYcdL9Ha WPcRF7xbLHmguICjVdHyTAq1aw23v2KNtiQQt4KKblMm5gJPjQYaRneCRzfWhBdV JPGTMAm694stUiTsunOLe3kVegB5V0CyKhJszpqfmMeph8H+iNBpd4n9qtRd4Icn uPpJXSYUff/8GSjMzh7YvbM7qXQJBndfjQAkbGfNrKPWDne5uaS0Aff1+xVNSnZh z5J57MavisGDnkYNvWCPyMAOPBJcAewFudRVqycOUxTANBgcMFs+5b3ewf8V4vmP BieVktuPl3Anc/ZoIM9Nw4BRm7gMEpY= -----END CERTIFICATE-----Generated at Sun Jun 15 11:41:01 2025 by rpki-client