$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa File: a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa (raw, json) Hash identifier: lY7Jh0XLwNURqAzhIN/GdSQ2ycT875GHun6CxELQuLs= Subject key identifier: 8B:ED:87:CC:D5:AA:FD:56:20:27:3E:44:C5:30:25:2E:C5:FD:D4:BC Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A631F9633B67983FA8D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:63:1f:96:33:b6:79:83:fa:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=de6bc757-98de-4353-8012-86520ff2dba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:57:97:b8:8e:9e:79:12:8e:cd:66:26:2c: 6f:a9:e5:8a:1c:8e:aa:90:7c:1e:dc:c1:fa:ec:59: 97:cb:03:a2:78:1f:82:0b:c0:36:9b:31:ce:c6:5a: 24:65:92:0b:26:92:45:09:9a:4b:69:10:f3:c9:da: b2:ed:0b:5b:68:a9:83:6a:02:19:7e:6e:78:ed:86: bb:85:2c:be:1a:93:48:05:4d:a6:d2:c4:cd:11:ff: 22:c1:9f:8f:bc:f5:a4:2d:23:ef:11:50:55:79:ee: d0:59:6d:89:78:0a:d7:aa:1f:32:0d:cb:39:0a:4a: 36:f1:66:8b:86:07:45:dc:12:b4:d5:25:2a:0d:f4: 55:69:e4:80:ad:55:7c:fa:a0:9d:8d:29:d9:d6:73: 28:f2:e8:a4:7e:a2:81:83:02:ac:ae:13:05:1b:e2: 5b:50:78:27:d0:d9:a9:ab:41:93:e7:13:4c:a0:d3: 19:49:22:07:a4:52:9e:0a:a0:6d:5f:cd:85:b4:6e: d8:61:fa:c0:35:2d:1e:ba:40:07:c6:ca:bf:46:d0: d3:83:ab:cc:c9:52:17:b0:10:8a:09:ba:fd:2b:47: 73:21:09:5c:71:78:8f:cb:6a:95:bb:6f:81:92:7e: a7:84:f4:89:ca:5f:0e:95:5d:cd:e0:a3:4b:a3:2d: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:ED:87:CC:D5:AA:FD:56:20:27:3E:44:C5:30:25:2E:C5:FD:D4:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:40:a6:d9:34:f1:97:5d:6f:8f:6b:0a:50:94:aa:f6:96:ff: 2f:8a:90:8d:76:e9:3e:de:4d:c6:42:e0:bf:c6:34:3d:1f:49: 83:ad:67:0d:5e:7f:35:f3:8d:00:a1:dc:cf:19:60:86:65:66: 83:8a:7f:59:31:30:c3:c5:98:9d:2d:2c:b2:47:ad:9f:a0:0f: 03:6e:f9:e6:76:f7:d6:49:c2:ef:3d:30:ad:77:f4:fa:5e:bf: a2:42:96:ec:6c:c9:fe:e4:e5:cf:a5:38:48:ac:fe:45:f6:60: 7e:43:c9:94:ea:20:6e:1b:b0:0b:66:f4:c4:32:9b:dd:0e:52: 69:8f:e3:c4:30:ca:2a:32:2e:76:b2:68:bf:fd:c9:56:bf:bf: 01:62:cf:55:cf:08:2b:d0:9a:98:17:a0:cd:3b:44:83:a4:95: 66:0f:d7:a0:07:fb:ae:c0:e9:60:1f:d3:cc:60:df:6c:96:c8: b2:65:f9:9d:96:43:5e:ca:7c:15:21:99:37:34:94:b9:3f:e1: 0c:0f:e6:3b:a2:45:3c:b7:92:18:95:db:7f:f6:75:db:a4:e1: 08:96:6a:41:f7:6a:10:60:e3:ca:98:67:5d:5e:ac:69:96:48: 06:8d:37:c6:28:cf:7d:cd:cc:dd:0c:42:5c:65:df:b5:b1:c5: ee:ac:8a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmMfljO2eYP6jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ZGU2YmM3NTctOThkZS00MzUzLTgwMTItODY1MjBmZjJkYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMhXl7iOnnkSjs1mJixvqeWKHI6qkHwe3MH6 7FmXywOieB+CC8A2mzHOxlokZZILJpJFCZpLaRDzydqy7QtbaKmDagIZfm547Ya7 hSy+GpNIBU2m0sTNEf8iwZ+PvPWkLSPvEVBVee7QWW2JeArXqh8yDcs5Cko28WaL hgdF3BK01SUqDfRVaeSArVV8+qCdjSnZ1nMo8uikfqKBgwKsrhMFG+JbUHgn0Nmp q0GT5xNMoNMZSSIHpFKeCqBtX82FtG7YYfrANS0eukAHxsq/RtDTg6vMyVIXsBCK Cbr9K0dzIQlccXiPy2qVu2+Bkn6nhPSJyl8OlV3N4KNLoy13sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvth8zVqv1WICc+RMUwJS7F/dS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTdhZTk0M2EtN2YwZC0z MDQ0LThmOTUtZmI4OGEzZGQ2ZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZAptk08Zddb49rClCUqvaW/y+KkI126T7eTcZC4L/GND0fSYOtZw1e fzXzjQCh3M8ZYIZlZoOKf1kxMMPFmJ0tLLJHrZ+gDwNu+eZ299ZJwu89MK139Ppe v6JCluxsyf7k5c+lOEis/kX2YH5DyZTqIG4bsAtm9MQym90OUmmP48QwyioyLnay aL/9yVa/vwFiz1XPCCvQmpgXoM07RIOklWYP16AH+67A6WAf08xg32yWyLJl+Z2W Q17KfBUhmTc0lLk/4QwP5juiRTy3khiV23/2dduk4QiWakH3ahBg48qYZ11erGmW SAaNN8Yoz33NzN0MQlxl37Wxxe6siqE= -----END CERTIFICATE-----Generated at Sun Jun 15 11:49:00 2025 by rpki-client