$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa File: ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa (raw, json) Hash identifier: B2O3nmZy7JDrP3n1CTwSqGNHBgERg0c9ovE/pYLAh3w= Subject key identifier: 45:A3:F1:E1:13:B1:85:76:D9:12:8B:29:33:4B:BC:54:FD:3F:38:A1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A667E10E89D0589119200 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:66:7e:10:e8:9d:05:89:11:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=814bf188-cc87-4634-8269-a1c5c55ce531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:ac:ab:76:f3:5b:83:cc:ef:16:2b:f5:e6: dc:1d:44:ba:02:ed:fc:86:d8:59:2a:bb:de:2e:37: 03:e5:fa:b5:06:97:79:c5:ed:9c:f4:e0:87:de:f0: d9:bf:4d:69:70:70:e4:2e:da:7d:4b:b5:22:ad:3e: ba:56:00:99:1d:4a:d6:b7:f5:bb:ab:0c:2c:38:68: 6d:1c:b0:39:e7:57:f8:11:56:5c:00:c6:aa:be:3b: b9:75:74:a9:fa:bc:97:58:65:e6:e4:e2:9e:4b:9f: 6e:19:c6:fa:aa:af:ad:a5:74:97:b7:a9:f7:8e:eb: b8:d1:7c:02:7f:76:99:20:72:5b:ae:6a:c3:b8:2e: a0:11:02:9d:bb:5d:e0:35:9e:f5:ce:8a:69:7c:5c: 9b:0a:26:c6:a7:b0:c6:f7:b5:96:01:aa:42:b0:25: 27:d8:37:d6:a4:26:8b:61:06:c6:10:96:36:44:39: 25:07:44:55:53:89:c3:e2:66:48:05:a8:b0:2f:8d: 39:cf:5b:b8:41:15:33:d5:21:ed:0e:e2:a8:ea:26: af:6c:66:75:af:fd:ed:0a:88:5d:91:a4:d4:6e:99: 62:d8:2a:18:c9:61:ae:3b:8a:69:c7:20:e9:69:e0: c0:44:fe:d0:d5:16:a7:0a:27:5f:69:89:65:51:83: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A3:F1:E1:13:B1:85:76:D9:12:8B:29:33:4B:BC:54:FD:3F:38:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:94:79:84:3d:b7:6c:61:d1:32:8a:f3:2d:64:3e:47:b9:ed: ec:9a:a0:35:cf:83:51:88:9c:8d:06:4e:5a:4d:d9:26:66:e2: 41:b2:68:d0:d1:c6:9e:9f:2f:57:34:eb:ed:6c:30:c5:f8:ad: fe:6c:e3:c3:32:44:ba:ba:bb:52:cd:64:36:65:82:4f:3b:b5: 15:d8:98:bf:10:f9:7d:25:86:3f:1f:77:07:d6:c0:55:4e:e8: 90:54:b5:d7:d7:46:9b:22:56:d0:e6:d4:05:88:ff:f2:7e:40: 13:00:8f:83:4a:a0:35:24:35:19:a6:ac:fd:2d:e3:65:6c:ce: a3:9f:d8:77:6a:dd:a4:51:1d:c6:e2:65:23:5d:d3:18:81:0f: a7:22:6a:f4:0f:db:0c:68:de:2e:2e:38:ef:86:28:96:fd:30: 19:17:ef:8c:1f:b9:d2:b7:40:e9:20:b9:3e:2b:5b:4a:32:a6: d6:e9:40:b2:2a:ec:7a:cd:c6:2a:57:f7:ed:eb:97:ff:7b:2b: 23:41:e4:64:3c:f9:8e:f2:8c:dd:ce:93:40:fc:63:4c:12:00: 30:f3:cd:03:49:59:7b:bc:e1:21:71:8a:e5:ef:f4:8a:c8:77: 86:f7:a5:26:5a:b5:25:d3:2a:1d:44:4e:3d:b9:59:12:63:bc: 1b:71:e0:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmZ+EOidBYkRkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ODE0YmYxODgtY2M4Ny00NjM0LTgyNjktYTFjNWM1NWNlNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo6sq3bzW4PM7xYr9ebcHUS6Au38hthZKrve LjcD5fq1Bpd5xe2c9OCH3vDZv01pcHDkLtp9S7UirT66VgCZHUrWt/W7qwwsOGht HLA551f4EVZcAMaqvju5dXSp+ryXWGXm5OKeS59uGcb6qq+tpXSXt6n3juu40XwC f3aZIHJbrmrDuC6gEQKdu13gNZ71zoppfFybCibGp7DG97WWAapCsCUn2DfWpCaL YQbGEJY2RDklB0RVU4nD4mZIBaiwL405z1u4QRUz1SHtDuKo6iavbGZ1r/3tCohd kaTUbpli2CoYyWGuO4ppxyDpaeDARP7Q1RanCidfaYllUYO2pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWj8eETsYV22RKLKTNLvFT9PzihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmYxNDc5YTctNGQ3NC0z MGZlLWEyZjYtZTA3NmZmZjllZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeUeYQ9t2xh0TKK8y1kPke57eyaoDXPg1GInI0GTlpN2SZm4kGyaNDR xp6fL1c06+1sMMX4rf5s48MyRLq6u1LNZDZlgk87tRXYmL8Q+X0lhj8fdwfWwFVO 6JBUtdfXRpsiVtDm1AWI//J+QBMAj4NKoDUkNRmmrP0t42VszqOf2Hdq3aRRHcbi ZSNd0xiBD6ciavQP2wxo3i4uOO+GKJb9MBkX74wfudK3QOkguT4rW0oyptbpQLIq 7HrNxipX9+3rl/97KyNB5GQ8+Y7yjN3Ok0D8Y0wSADDzzQNJWXu84SFxiuXv9IrI d4b3pSZatSXTKh1ETj25WRJjvBtx4Bg= -----END CERTIFICATE-----Generated at Sun Jun 15 18:56:03 2025 by rpki-client