$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8c973c8-3db8-32ff-958c-2ce5e573f783.roa File: b8c973c8-3db8-32ff-958c-2ce5e573f783.roa (raw, json) Hash identifier: aM3FPw2eBsgLQMpPCoeh55sCMLyRVepjLQcYD2RRNdI= Subject key identifier: 23:49:5A:EB:8D:B7:B4:47:D0:E9:D0:30:86:97:16:DA:F8:4E:03:6A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A66AB12EC3CEA03F65E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8c973c8-3db8-32ff-958c-2ce5e573f783.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:66:ab:12:ec:3c:ea:03:f6:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=afd9dbee-0ff2-4e9a-9b26-0017fa0f3ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:f2:8b:57:7c:25:d8:23:11:40:7c:a3:9c: b3:d5:a9:03:ec:a7:fc:77:40:0b:a8:df:38:4e:a3: 8c:4d:29:d5:44:4e:60:ba:e9:34:8a:98:9f:4b:e6: 68:9f:80:f4:e1:89:0b:6e:7e:5e:18:95:17:2e:fe: 8f:4b:f5:36:38:ab:f3:fe:90:50:4e:a4:ab:c9:63: 4c:5f:59:b0:56:3c:52:9d:09:13:04:4e:bb:2c:75: a5:fb:d0:dd:0d:48:02:18:a0:ab:90:a8:f2:d3:ca: 5a:33:0e:a9:7e:b4:20:f6:dd:15:cf:d3:42:ed:8b: 2d:90:4d:f1:75:9d:a8:58:d5:9e:b5:ed:a8:3a:b0: 8a:ed:5b:d2:a1:64:d6:dd:38:a4:30:e5:36:bf:b7: c2:ba:b7:e4:0f:65:c8:a4:17:37:9b:96:44:e3:a0: 2d:a3:c9:a6:13:d4:03:0f:9c:60:3c:6b:df:21:29: c0:e5:41:a9:33:6c:42:fc:ec:bd:b2:13:37:5f:31: d8:3c:2e:31:00:35:f4:26:e0:f0:cb:4a:0c:a3:c4: 5a:9b:40:c2:c4:1d:91:9f:68:e9:3a:1b:eb:5d:bc: e5:59:fc:6b:25:60:28:1f:e5:b8:57:01:25:97:73: 44:84:ae:bc:4c:e7:17:24:dd:f5:86:b9:ef:3a:f9: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:49:5A:EB:8D:B7:B4:47:D0:E9:D0:30:86:97:16:DA:F8:4E:03:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8c973c8-3db8-32ff-958c-2ce5e573f783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f1:ef:d2:b9:3d:da:4b:ee:8c:41:9e:1a:f6:ed:66:af:ab: f1:79:86:53:b1:e3:14:f7:78:57:01:fc:c8:11:ec:7c:ab:24: 44:3a:08:35:59:1e:db:2f:f3:7e:29:0c:17:44:04:4d:4d:a6: 16:a0:65:3f:5d:6d:49:b1:d8:46:d1:63:44:40:b6:00:a9:ea: f3:11:de:64:be:09:42:ee:e1:3c:d8:8d:c2:f8:84:49:a7:a5: b6:6c:cf:64:02:78:1a:bb:21:18:66:e9:86:37:31:1b:fd:88: 4a:4a:15:ef:22:43:8f:2e:3b:16:a0:bc:93:fc:a3:3d:88:8f: 11:5f:bd:13:80:66:02:44:c1:6d:d2:bf:5d:54:40:66:c6:3b: 05:a3:5e:84:d3:db:a4:65:d3:3c:61:24:5d:ac:7b:2f:73:47: 0a:5c:02:f9:19:01:2e:3c:93:a0:f8:b0:d8:ef:51:fd:64:9e: 6f:54:3a:83:85:67:73:11:b8:e7:8f:c3:bc:a5:20:79:1d:8c: 01:5b:57:b0:f0:62:b1:aa:a8:ef:7e:a8:ba:62:72:21:e3:e3: 03:cb:4a:1f:09:e6:de:84:15:2b:a6:46:44:4c:72:67:ba:80: 18:85:1b:42:21:05:f3:fa:e3:42:43:6c:eb:18:57:3e:28:f1: 72:e2:c9:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmarEuw86gP2XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk YWZkOWRiZWUtMGZmMi00ZTlhLTliMjYtMDAxN2ZhMGYzZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ7yi1d8JdgjEUB8o5yz1akD7Kf8d0ALqN84 TqOMTSnVRE5guuk0ipifS+Zon4D04YkLbn5eGJUXLv6PS/U2OKvz/pBQTqSryWNM X1mwVjxSnQkTBE67LHWl+9DdDUgCGKCrkKjy08paMw6pfrQg9t0Vz9NC7YstkE3x dZ2oWNWete2oOrCK7VvSoWTW3TikMOU2v7fCurfkD2XIpBc3m5ZE46Ato8mmE9QD D5xgPGvfISnA5UGpM2xC/Oy9shM3XzHYPC4xADX0JuDwy0oMo8Ram0DCxB2Rn2jp OhvrXbzlWfxrJWAoH+W4VwEll3NEhK68TOcXJN31hrnvOvlnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNJWuuNt7RH0OnQMIaXFtr4TgNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjhjOTczYzgtM2RiOC0z MmZmLTk1OGMtMmNlNWU1NzNmNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbx79K5PdpL7oxBnhr27Wavq/F5hlOx4xT3eFcB/MgR7HyrJEQ6CDVZ Htsv834pDBdEBE1NphagZT9dbUmx2EbRY0RAtgCp6vMR3mS+CULu4TzYjcL4hEmn pbZsz2QCeBq7IRhm6YY3MRv9iEpKFe8iQ48uOxagvJP8oz2IjxFfvROAZgJEwW3S v11UQGbGOwWjXoTT26Rl0zxhJF2sey9zRwpcAvkZAS48k6D4sNjvUf1knm9UOoOF Z3MRuOePw7ylIHkdjAFbV7DwYrGqqO9+qLpiciHj4wPLSh8J5t6EFSumRkRMcme6 gBiFG0IhBfP640JDbOsYVz4o8XLiyWQ= -----END CERTIFICATE-----Generated at Sun Jun 15 18:50:47 2025 by rpki-client