$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67ead5e5-34c1-3a20-8799-838410d09198.roa File: 67ead5e5-34c1-3a20-8799-838410d09198.roa (raw, json) Hash identifier: ebJrP34YZG0U66X0mTBzPSdlMEG/0K2LjmkInEoIcIk= Subject key identifier: 26:FA:77:B1:E4:C0:83:31:D1:C4:83:04:2D:79:86:8D:DF:58:99:12 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A6965D2490A96F6F5AEC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67ead5e5-34c1-3a20-8799-838410d09198.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:69:65:d2:49:0a:96:f6:f5:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=f0f620d1-b93d-402b-b17b-22402549f495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:fc:23:06:cd:d3:30:35:f1:55:90:65:39: e3:53:c9:c8:2d:15:5a:3f:ea:30:11:55:1d:44:74: 64:41:e8:d6:36:95:8a:0b:3b:8a:3f:53:d3:09:9c: eb:86:d1:c3:d6:ab:e0:1a:79:db:c3:58:f0:6b:39: 1a:db:75:bd:f2:fb:5f:7f:03:9c:fb:40:f9:78:0f: 80:c2:08:0c:98:f0:22:7d:64:dd:57:7f:e6:0f:90: 21:4f:9e:e8:71:10:72:63:46:a3:be:c0:48:dc:be: 86:86:5c:3b:10:a2:4f:e7:28:fb:15:29:f5:43:b9: 08:0d:5d:c8:ec:c6:f4:99:84:f7:5a:9e:07:cd:3c: c7:db:ed:fc:92:d8:80:23:32:51:4c:93:44:7b:b7: fe:cd:d0:ac:db:25:3e:a6:83:ea:b1:16:1d:73:1d: bd:5f:38:d0:8f:39:84:79:38:19:75:0e:94:19:ab: 45:9c:3e:31:54:17:94:e3:6e:41:32:3e:d9:93:87: e5:4c:9f:a1:ed:a1:e1:fd:33:3e:05:4b:93:83:08: fb:08:64:eb:b2:00:5f:2a:02:aa:74:3d:d8:13:0a: e7:66:71:ea:f5:17:d5:e2:14:2f:c7:f1:af:d4:31: 8d:85:c6:ed:f4:f7:15:57:fa:5b:58:35:50:c5:67: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FA:77:B1:E4:C0:83:31:D1:C4:83:04:2D:79:86:8D:DF:58:99:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67ead5e5-34c1-3a20-8799-838410d09198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:29:74:fd:ce:dd:c8:9e:c9:97:30:6e:bb:af:5f:6d:11:b4: c6:d7:d0:91:35:80:46:71:7b:7f:a0:91:26:68:4b:c3:49:a4: a8:e3:95:d7:0e:5c:24:d2:b4:2c:59:3c:8f:c0:54:97:bd:b5: 9c:24:3d:cd:a7:b1:af:68:7e:89:76:93:76:1b:71:6b:57:00: bd:41:c1:35:5b:54:6c:68:6b:97:17:85:22:44:d1:d0:95:3c: 29:8b:4b:e7:1c:0f:e2:30:38:2c:cf:d2:eb:d7:69:84:88:bd: 0a:c4:17:5a:6a:4c:46:91:cc:d0:31:e3:4d:39:90:37:ea:42: 46:3a:18:7c:02:2d:5c:0a:78:7c:1e:3e:b1:45:b6:a5:33:79: 4f:7d:d2:8a:cc:1d:8e:7b:e7:7d:bd:29:27:3a:00:1f:91:c1: 2d:aa:03:29:92:49:06:d6:47:03:ff:4d:b9:4d:24:39:91:e3: 23:89:4a:b0:24:29:68:cf:c0:85:8f:c1:c5:d9:dd:74:f7:84: cc:e7:20:e1:cf:f0:6b:d0:72:b7:88:75:b2:e0:4d:5c:21:84: 4e:89:ce:f2:8e:5a:7b:55:1d:e1:90:2d:fa:c2:4e:29:b0:5f: 87:f7:a5:e4:bd:62:a2:1b:1c:b3:1c:76:c4:54:cf:97:65:28: 60:0e:d7:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Smll0kkKlvb1rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ZjBmNjIwZDEtYjkzZC00MDJiLWIxN2ItMjI0MDI1NDlmNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7r8IwbN0zA18VWQZTnjU8nILRVaP+owEVUd RHRkQejWNpWKCzuKP1PTCZzrhtHD1qvgGnnbw1jwazka23W98vtffwOc+0D5eA+A wggMmPAifWTdV3/mD5AhT57ocRByY0ajvsBI3L6Ghlw7EKJP5yj7FSn1Q7kIDV3I 7Mb0mYT3Wp4HzTzH2+38ktiAIzJRTJNEe7f+zdCs2yU+poPqsRYdcx29XzjQjzmE eTgZdQ6UGatFnD4xVBeU425BMj7Zk4flTJ+h7aHh/TM+BUuTgwj7CGTrsgBfKgKq dD3YEwrnZnHq9RfV4hQvx/Gv1DGNhcbt9PcVV/pbWDVQxWcQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCb6d7HkwIMx0cSDBC15ho3fWJkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjdlYWQ1ZTUtMzRjMS0z YTIwLTg3OTktODM4NDEwZDA5MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAspdP3O3cieyZcwbruvX20RtMbX0JE1gEZxe3+gkSZoS8NJpKjjldcO XCTStCxZPI/AVJe9tZwkPc2nsa9ofol2k3YbcWtXAL1BwTVbVGxoa5cXhSJE0dCV PCmLS+ccD+IwOCzP0uvXaYSIvQrEF1pqTEaRzNAx4005kDfqQkY6GHwCLVwKeHwe PrFFtqUzeU990orMHY575329KSc6AB+RwS2qAymSSQbWRwP/TblNJDmR4yOJSrAk KWjPwIWPwcXZ3XT3hMznIOHP8GvQcreIdbLgTVwhhE6JzvKOWntVHeGQLfrCTimw X4f3peS9YqIbHLMcdsRUz5dlKGAO114= -----END CERTIFICATE-----Generated at Mon Jun 16 18:48:16 2025 by rpki-client