$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa File: 6978a815-9a53-3f80-abe8-e211e21209d4.roa (raw, json) Hash identifier: WFDa9SzQjhNCkKf4hlxeKR+yS4vfU5C58VI/RKeFXDk= Subject key identifier: 1F:DA:42:0D:5C:54:9A:0B:F8:E0:C5:D3:64:15:DF:F5:07:37:A4:EB Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858491511664396BB4A4331354740 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:66:43:96:bb:4a:43:31:35:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=a97ae6a1-d02c-4ecf-ae31-5eb14f7b3520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f4:e6:0d:8b:0b:b5:d7:e4:89:d9:f0:6d:6f: 00:a9:8d:4f:4a:14:0f:9f:25:2f:5c:eb:4d:9d:3c: 1c:48:00:1a:62:1b:03:2d:57:d1:16:83:0b:86:87: 8c:7c:81:3d:02:1b:3d:8d:21:a8:28:49:15:09:31: 82:23:91:74:23:8e:e0:90:0d:d7:a2:5d:82:32:e3: b2:8e:87:50:84:e6:4c:9d:23:94:3c:5d:fe:be:c4: 7e:a3:0a:79:bf:fd:0e:04:76:ba:7f:5b:8e:42:3c: fc:d8:19:25:c5:0b:87:f7:24:0b:4f:62:9b:b1:c7: be:8d:22:c2:13:d0:7c:75:ab:3a:83:c6:24:13:15: b3:fb:62:78:80:c5:9c:99:7f:89:f0:80:b4:90:a5: e6:72:dc:61:b3:9c:20:29:56:51:64:16:4a:62:c4: de:49:24:4f:5c:51:6e:d1:75:1a:a7:27:ba:c6:ec: da:2e:cc:d5:d4:77:a8:4e:09:7e:42:66:76:40:c8: 37:25:22:0b:34:1f:d6:9e:46:37:07:8b:f2:87:58: dc:07:cb:03:23:75:01:9a:42:b8:d1:a8:a7:2f:e2: 14:8b:ca:b9:b2:04:f2:c2:13:93:d3:90:fb:f0:85: 27:47:70:50:68:14:b5:45:38:6d:c0:ed:6a:0f:ee: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DA:42:0D:5C:54:9A:0B:F8:E0:C5:D3:64:15:DF:F5:07:37:A4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8e:c3:fa:21:7b:66:f8:85:7e:87:71:ee:f2:4f:54:de:a8: 71:83:ed:7c:1f:9c:a2:31:0a:83:8a:cd:5e:66:76:07:d3:51: 1a:de:8d:61:1b:8a:db:3c:5e:be:16:b3:51:a7:24:28:90:d8: dd:32:b2:da:34:d1:9d:7e:b3:4b:60:64:c6:1d:b4:e2:7e:61: 45:6b:ec:53:2e:f9:2c:79:74:c8:9b:ee:7f:f5:fc:54:68:1f: 2b:a4:82:86:95:be:96:9d:b2:3f:bd:05:e1:e0:a8:ca:a2:49: 5a:7f:f3:97:e7:7c:fb:2c:fc:7f:26:ed:b4:e4:33:e4:01:bf: 2a:e5:ae:13:67:d3:c3:ab:29:9d:ac:be:0e:eb:43:a9:30:c6: 8a:0d:a6:72:9a:60:1c:44:03:65:a7:9a:a6:3f:8c:39:37:71: 33:8d:cf:56:db:e4:6a:b3:43:02:50:34:db:64:e1:46:b4:69: 09:f8:6f:d4:d2:5f:b0:b8:fd:4a:3c:1a:b2:34:f2:d0:ad:5f: 52:ab:30:7f:0b:44:aa:1d:00:c3:1c:e5:87:52:15:a9:4d:09: 2f:1c:21:b4:9c:c2:87:6d:42:1c:fe:0f:04:9d:9e:20:2d:5f: 29:ef:ab:25:b5:df:56:3f:7a:88:64:78:a1:26:03:5a:b1:19: 0a:de:d8:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWZDlrtKQzE1R0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk YTk3YWU2YTEtZDAyYy00ZWNmLWFlMzEtNWViMTRmN2IzNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/TmDYsLtdfkidnwbW8AqY1PShQPnyUvXOtN nTwcSAAaYhsDLVfRFoMLhoeMfIE9Ahs9jSGoKEkVCTGCI5F0I47gkA3Xol2CMuOy jodQhOZMnSOUPF3+vsR+owp5v/0OBHa6f1uOQjz82BklxQuH9yQLT2Kbsce+jSLC E9B8das6g8YkExWz+2J4gMWcmX+J8IC0kKXmctxhs5wgKVZRZBZKYsTeSSRPXFFu 0XUapye6xuzaLszV1HeoTgl+QmZ2QMg3JSILNB/WnkY3B4vyh1jcB8sDI3UBmkK4 0ainL+IUi8q5sgTywhOT05D78IUnR3BQaBS1RThtwO1qD+6TNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/aQg1cVJoL+ODF02QV3/UHN6TrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjk3OGE4MTUtOWE1My0z ZjgwLWFiZTgtZTIxMWUyMTIwOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiOw/ohe2b4hX6Hce7yT1TeqHGD7XwfnKIxCoOKzV5mdgfTURrejWEb its8Xr4Ws1GnJCiQ2N0ysto00Z1+s0tgZMYdtOJ+YUVr7FMu+Sx5dMib7n/1/FRo HyukgoaVvpadsj+9BeHgqMqiSVp/85fnfPss/H8m7bTkM+QBvyrlrhNn08OrKZ2s vg7rQ6kwxooNpnKaYBxEA2WnmqY/jDk3cTONz1bb5GqzQwJQNNtk4Ua0aQn4b9TS X7C4/Uo8GrI08tCtX1KrMH8LRKodAMMc5YdSFalNCS8cIbScwodtQhz+DwSdniAt XynvqyW131Y/eohkeKEmA1qxGQre2Iw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:47 2025 by rpki-client