$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa File: d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa (raw, json) Hash identifier: FXmrecfxenGIm0txZYXTQ9Br6CIHhrtOnpSXiPRMHa0= Subject key identifier: 49:10:58:6A:0B:B9:92:56:34:C7:C2:55:F7:AC:6B:01:C4:05:F3:49 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A6484D458D04A45C39880 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:64:84:d4:58:d0:4a:45:c3:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=d7e5bb37-cd82-414c-b6eb-1ceee0797b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:c7:de:69:40:a5:11:5a:ec:c3:8e:46:e8: 29:40:53:13:b5:f1:e6:dd:2a:89:1c:bd:5a:f7:29: c5:e5:a2:e7:71:ea:69:c7:32:61:b3:71:4f:23:83: 24:7d:ed:c2:c2:b9:4a:96:f6:0d:9b:5b:c2:e4:c5: 2d:50:af:48:7f:d1:e2:cf:de:5d:aa:8a:3a:63:e7: 13:90:71:cb:d1:d2:af:09:d6:d1:f0:dc:92:99:a3: ba:37:7f:92:b6:f7:e0:70:fe:ec:dc:0c:a5:18:a0: fd:3a:79:2b:cf:63:d9:9c:5e:cf:e2:32:d1:dd:e5: c6:8f:6d:d3:89:70:6c:d7:f9:79:02:f1:b0:f0:d4: 13:5b:41:4b:af:4e:b1:05:af:4f:66:2c:b0:32:9c: b5:bf:ba:7d:a0:b4:b1:b6:dd:c2:c6:ca:c6:66:9d: bb:3a:b6:ff:48:9a:25:6f:7e:fc:ca:5b:e8:d6:82: 9b:b5:96:f3:44:4d:21:b2:d2:db:ee:7a:9c:b6:65: cc:7f:80:8b:55:19:84:7c:69:c8:39:27:59:e3:af: 72:c5:17:f5:de:7c:a4:74:66:23:6f:4c:4f:b1:70: e0:30:15:6e:aa:96:ca:95:13:46:7d:b3:45:02:1c: a4:ff:7f:7a:d0:b2:d7:02:66:b5:89:12:eb:17:8c: 07:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:10:58:6A:0B:B9:92:56:34:C7:C2:55:F7:AC:6B:01:C4:05:F3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:59:0f:73:db:dd:4f:61:94:8c:cf:d7:ca:85:0b:a2:47:2c: e4:ca:68:f5:14:b4:39:05:a0:9f:d2:6e:61:fe:71:fe:a5:99: f1:fa:57:06:37:e8:08:fd:34:1a:26:a8:b5:ac:0f:f2:03:f4: 5a:e6:40:c0:f2:5d:db:20:89:9a:52:5b:8d:30:63:a2:7c:76: 64:78:62:4b:67:a5:57:25:06:3b:bd:96:68:ff:bc:e0:b3:48: 07:01:9d:fa:af:be:42:85:3e:c0:d0:e6:5f:3a:d2:fb:b8:c5: 03:de:ff:d1:b3:00:85:3f:06:f6:d1:87:30:aa:48:69:b2:db: f3:48:ad:f7:3f:0b:a0:4a:4e:7e:7f:6d:49:7f:85:14:74:b3: 5d:2b:58:9f:4d:51:92:09:74:ee:dd:eb:c2:12:84:62:be:6c: 06:fe:a2:ef:c8:d9:22:9d:63:ed:3e:e4:c2:a6:05:1c:fc:ef: 20:00:fa:c2:e5:32:49:4a:dc:2e:7e:bf:35:0b:cf:27:62:26: 1a:09:f2:94:09:a3:cd:19:2b:27:f1:88:cb:38:a3:f7:e2:8b: 73:37:02:c6:e8:dc:ca:d1:3e:bc:15:df:55:7e:1d:f2:64:56: 04:5e:5f:d4:dc:73:9b:5a:ae:e3:96:e8:f2:c3:ca:5b:cf:8c: c7:45:b7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmSE1FjQSkXDmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ZDdlNWJiMzctY2Q4Mi00MTRjLWI2ZWItMWNlZWUwNzk3YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vH3mlApRFa7MOORugpQFMTtfHm3SqJHL1a 9ynF5aLnceppxzJhs3FPI4Mkfe3CwrlKlvYNm1vC5MUtUK9If9Hiz95dqoo6Y+cT kHHL0dKvCdbR8NySmaO6N3+StvfgcP7s3AylGKD9Onkrz2PZnF7P4jLR3eXGj23T iXBs1/l5AvGw8NQTW0FLr06xBa9PZiywMpy1v7p9oLSxtt3CxsrGZp27Orb/SJol b378ylvo1oKbtZbzRE0hstLb7nqctmXMf4CLVRmEfGnIOSdZ469yxRf13nykdGYj b0xPsXDgMBVuqpbKlRNGfbNFAhyk/3960LLXAma1iRLrF4wHPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkQWGoLuZJWNMfCVfesawHEBfNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDllOTJkZjMtMzJmZS0z NWNiLWFkN2QtZWVmZmViODdkZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtZD3Pb3U9hlIzP18qFC6JHLOTKaPUUtDkFoJ/SbmH+cf6lmfH6VwY3 6Aj9NBomqLWsD/ID9FrmQMDyXdsgiZpSW40wY6J8dmR4YktnpVclBju9lmj/vOCz SAcBnfqvvkKFPsDQ5l860vu4xQPe/9GzAIU/BvbRhzCqSGmy2/NIrfc/C6BKTn5/ bUl/hRR0s10rWJ9NUZIJdO7d68IShGK+bAb+ou/I2SKdY+0+5MKmBRz87yAA+sLl MklK3C5+vzULzydiJhoJ8pQJo80ZKyfxiMs4o/fii3M3Asbo3MrRPrwV31V+HfJk VgReX9Tcc5taruOW6PLDylvPjMdFt1A= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:01 2025 by rpki-client