$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa File: a815da88-cfa8-3af3-ada0-55a72b6309b2.roa (raw, json) Hash identifier: yMac8D8SFUwutIiKOpwk7K9lUD/m6viOwBRg0ngmfSM= Subject key identifier: 02:DA:1F:D4:7B:A7:7E:FB:71:52:F4:8D:C9:55:FA:5B:89:BA:2A:22 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A669D7EDD893631359A80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:66:9d:7e:dd:89:36:31:35:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=27c0414f-5cb1-4c07-9302-68b911e8a091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:37:6d:18:03:f2:b4:87:f3:97:62:e0:c8:ac: 13:c0:37:e8:10:21:a2:df:c3:e9:7f:9a:2c:c7:28: 69:e7:80:37:7a:b0:9b:a6:aa:c8:8d:31:f9:a1:87: dc:32:fc:98:f6:ac:ae:e0:11:0a:5d:b0:66:c4:44: 0e:8c:97:ed:95:4d:5b:97:68:b8:51:6a:8e:b0:35: ae:0c:7c:95:59:a0:fa:cd:14:d8:5b:7c:a1:45:e3: 20:51:4f:cd:a9:e3:9d:2e:bc:ba:35:a8:9e:5b:50: ce:8a:f5:73:fb:37:96:fa:66:f3:fd:79:97:89:f6: 37:bb:00:60:d2:ad:65:53:27:6b:10:1c:93:63:63: 9d:52:54:b6:84:78:9d:eb:90:c3:aa:10:8e:c3:af: c6:20:1c:94:04:5e:89:37:c9:c9:e7:7e:47:dd:59: a5:fd:93:68:ec:aa:50:8e:4e:39:53:49:98:c0:4d: 4f:12:44:a4:8f:c8:22:aa:25:90:9a:69:45:5d:b2: ba:9b:f0:15:2b:99:9d:ca:b7:0b:c3:cb:a8:3c:c6: d9:9c:35:ab:83:fa:82:48:98:54:6b:f6:2b:d9:2a: de:0e:28:4a:2c:15:be:0f:50:08:5c:0e:98:ec:a9: 07:c6:95:3a:5f:9e:78:6d:6c:4f:a0:4f:0e:1a:d6: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:1F:D4:7B:A7:7E:FB:71:52:F4:8D:C9:55:FA:5B:89:BA:2A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:57:5b:83:df:ab:c7:cb:71:4e:64:d4:fe:0c:04:25:29:a4: 27:4d:b7:82:3a:bf:ed:e6:bb:bf:e2:97:c1:6a:c6:53:72:2b: 87:02:a4:9d:8f:8f:c2:f4:16:50:c8:d6:b3:f9:52:cd:47:75: 53:7c:26:9f:16:df:7e:6d:df:57:dd:d9:fe:60:b2:5c:1d:37: 3b:81:60:2f:a9:fd:0b:cb:75:83:c4:42:5c:a2:cc:97:5b:f4: 2d:14:39:6f:59:83:11:61:c3:26:41:b5:d5:d5:83:96:06:f1: 13:94:46:99:2d:db:19:4e:bf:15:44:a6:ad:38:2e:19:cc:71: 53:4a:c7:06:60:01:06:3e:95:ac:94:1f:ef:34:86:c1:f9:c5: 80:05:b7:94:e9:62:05:31:b7:cc:9d:47:39:ce:7e:41:98:51: ce:36:0d:b3:e1:1e:c5:f7:6f:01:57:ef:42:e1:fd:6c:fb:68: 20:dc:90:c4:c2:46:d2:30:c9:a2:50:0a:f1:e0:d8:9b:7d:36: 67:69:dc:36:04:fa:81:5e:06:7c:db:2d:e0:2a:6a:57:69:fc: b4:8a:4c:23:4d:85:d4:59:8a:d0:4b:43:cd:8d:28:d1:60:6b: 7b:c0:63:7c:70:d7:f4:c5:0a:54:6c:d4:c2:1b:b1:63:83:4c: 6a:a9:a0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Smadft2JNjE1moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk MjdjMDQxNGYtNWNiMS00YzA3LTkzMDItNjhiOTExZThhMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjdtGAPytIfzl2LgyKwTwDfoECGi38Ppf5os xyhp54A3erCbpqrIjTH5oYfcMvyY9qyu4BEKXbBmxEQOjJftlU1bl2i4UWqOsDWu DHyVWaD6zRTYW3yhReMgUU/NqeOdLry6NaieW1DOivVz+zeW+mbz/XmXifY3uwBg 0q1lUydrEByTY2OdUlS2hHid65DDqhCOw6/GIByUBF6JN8nJ535H3Vml/ZNo7KpQ jk45U0mYwE1PEkSkj8giqiWQmmlFXbK6m/AVK5mdyrcLw8uoPMbZnDWrg/qCSJhU a/Yr2SreDihKLBW+D1AIXA6Y7KkHxpU6X554bWxPoE8OGtZ01wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALaH9R7p377cVL0jclV+luJuioiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTgxNWRhODgtY2ZhOC0z YWYzLWFkYTAtNTVhNzJiNjMwOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5XW4Pfq8fLcU5k1P4MBCUppCdNt4I6v+3mu7/il8FqxlNyK4cCpJ2P j8L0FlDI1rP5Us1HdVN8Jp8W335t31fd2f5gslwdNzuBYC+p/QvLdYPEQlyizJdb 9C0UOW9ZgxFhwyZBtdXVg5YG8ROURpkt2xlOvxVEpq04LhnMcVNKxwZgAQY+layU H+80hsH5xYAFt5TpYgUxt8ydRznOfkGYUc42DbPhHsX3bwFX70Lh/Wz7aCDckMTC RtIwyaJQCvHg2Jt9Nmdp3DYE+oFeBnzbLeAqaldp/LSKTCNNhdRZitBLQ82NKNFg a3vAY3xw1/TFClRs1MIbsWODTGqpoOU= -----END CERTIFICATE-----Generated at Sun Jun 15 11:23:37 2025 by rpki-client