$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa File: 0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa (raw, json) Hash identifier: UQwUBrkhywqXrI85WBobHHZmZNIGRrxR9f9fT42zxaA= Subject key identifier: 71:58:1A:F2:C7:06:8F:BD:46:84:14:D4:0E:1F:34:70:7B:0F:7A:7A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066DAC9EA48F5222C33210 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6d:ac:9e:a4:8f:52:22:c3:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=0e3fd0fb-d1b8-4cd0-8e4e-2698499231d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:22:b1:dc:74:05:62:ac:82:a9:e9:88:c7: 94:3d:9c:a1:3b:67:dd:66:2d:22:41:3c:ee:9f:1a: d5:15:a5:f8:01:a2:63:bb:be:4a:54:9e:9d:5c:c5: ff:63:71:3c:6e:c1:c2:b8:8f:f8:8b:f7:e5:b5:cc: 50:aa:b6:ac:bd:7d:64:f7:9b:95:17:26:cb:18:6f: ba:9d:fb:92:f5:d2:62:04:74:6b:76:9a:39:8a:9d: 6a:b7:a1:2e:60:50:2c:b5:89:a3:e0:44:6b:36:81: 6d:c2:40:51:da:97:bd:e9:7b:1a:0e:e6:fa:fd:98: f0:b9:24:73:f6:b8:a8:42:e4:e5:04:75:61:5f:58: fa:33:02:73:78:c9:62:42:1f:48:d4:3b:7f:ba:12: 1b:2e:19:15:8a:61:2e:ff:50:9d:32:3c:6a:34:9f: fc:f4:88:e2:7b:84:c5:39:83:7d:5f:f4:b1:3d:42: 9d:db:2e:9c:51:f5:ea:11:0b:90:05:54:1a:a2:dc: fd:61:bc:ff:31:aa:fc:9f:4a:da:e5:90:d4:f6:bf: 1b:62:a3:52:ca:d2:3f:da:01:f3:e8:0e:45:56:e8: 34:98:d6:50:35:5b:5b:81:e5:5d:eb:aa:45:e8:d5: 21:06:4c:23:76:c6:8f:4a:00:03:63:6f:c7:9d:18: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:58:1A:F2:C7:06:8F:BD:46:84:14:D4:0E:1F:34:70:7B:0F:7A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e8:40:5c:3d:d3:c1:a2:67:fe:6a:ce:ae:4f:74:ed:63:9e: 62:83:40:4f:0f:77:2e:da:b3:f7:3c:36:f9:87:df:7b:6d:5d: d4:b1:13:a2:5c:3a:b5:54:ea:d2:77:86:63:47:89:77:b5:6b: 81:14:ef:c9:39:5e:d3:65:ac:36:c9:f9:db:fa:65:20:62:fe: b1:3f:b8:0e:5b:a3:4d:08:10:22:0f:76:aa:0b:42:f0:1e:53: 64:1f:b8:03:c2:85:4f:aa:6e:25:bc:4a:c6:df:1d:ea:75:57: 90:97:9e:0d:16:e2:23:b0:b8:78:02:53:23:51:08:14:5f:8d: b9:66:6f:bb:78:71:68:78:bd:99:58:22:6d:c8:7d:f6:f8:72: 9c:8a:fc:8c:b9:c8:5b:14:89:44:8f:0b:6f:e6:9f:01:9d:0a: 57:d8:83:9f:b0:6b:3c:f4:2f:fa:b5:1a:61:5c:8e:26:0a:07: 7f:e5:4d:fd:64:a6:c9:38:6e:7d:12:8a:8d:5d:fd:2c:9d:76: 55:91:a2:4e:e7:7b:d4:10:de:c7:cf:fe:14:2b:4d:6d:96:15: 4f:74:48:0a:ee:a0:8b:ee:f8:1f:59:01:8b:2e:a4:3c:82:01: 0a:be:c7:e3:66:f8:51:f4:c1:c0:a4:f7:21:58:15:c3:ef:36: af:60:de:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBm2snqSPUiLDMhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MGUzZmQwZmItZDFiOC00Y2QwLThlNGUtMjY5ODQ5OTIzMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuoisdx0BWKsgqnpiMeUPZyhO2fdZi0iQTzu nxrVFaX4AaJju75KVJ6dXMX/Y3E8bsHCuI/4i/fltcxQqrasvX1k95uVFybLGG+6 nfuS9dJiBHRrdpo5ip1qt6EuYFAstYmj4ERrNoFtwkBR2pe96XsaDub6/ZjwuSRz 9rioQuTlBHVhX1j6MwJzeMliQh9I1Dt/uhIbLhkVimEu/1CdMjxqNJ/89Ijie4TF OYN9X/SxPUKd2y6cUfXqEQuQBVQaotz9Ybz/Mar8n0ra5ZDU9r8bYqNSytI/2gHz 6A5FVug0mNZQNVtbgeVd66pF6NUhBkwjdsaPSgADY2/HnRhQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFYGvLHBo+9RoQU1A4fNHB7D3p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGU1YjE1M2QtMTEzMC0z OGZhLWJlMTgtZGFmZWFiZDZjMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDoQFw908GiZ/5qzq5PdO1jnmKDQE8Pdy7as/c8NvmH33ttXdSxE6Jc OrVU6tJ3hmNHiXe1a4EU78k5XtNlrDbJ+dv6ZSBi/rE/uA5bo00IECIPdqoLQvAe U2QfuAPChU+qbiW8SsbfHep1V5CXng0W4iOwuHgCUyNRCBRfjblmb7t4cWh4vZlY Im3Iffb4cpyK/Iy5yFsUiUSPC2/mnwGdClfYg5+wazz0L/q1GmFcjiYKB3/lTf1k psk4bn0Sio1d/SyddlWRok7ne9QQ3sfP/hQrTW2WFU90SAruoIvu+B9ZAYsupDyC AQq+x+Nm+FH0wcCk9yFYFcPvNq9g3vA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:16 2025 by rpki-client