$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2257a8fe-79d9-332e-847d-13ed7e121adf.roa File: 2257a8fe-79d9-332e-847d-13ed7e121adf.roa (raw, json) Hash identifier: FNOSJEQUqOSS0S9AHQWlVDRWaZhlw/mZ1tkKTc04PbY= Subject key identifier: 5B:42:CD:8D:FA:D4:5F:18:4E:14:69:64:75:C4:3D:C3:62:DD:28:50 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066B607571E14C14F8ED00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2257a8fe-79d9-332e-847d-13ed7e121adf.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6b:60:75:71:e1:4c:14:f8:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=b296283a-9bdf-4355-9934-3dde7262937b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:8b:a9:ae:dd:d9:72:5b:42:c0:2f:3b:59: 68:b5:83:1c:22:e4:48:ad:ed:0d:da:57:aa:e8:84: e3:4f:3e:bf:37:b1:4e:ad:aa:60:c7:eb:9d:e2:a5: 86:a0:00:fa:04:72:f6:3d:14:a7:26:c3:32:b5:5d: 96:8d:fa:b7:a5:f6:e9:ca:da:b3:6b:cf:bf:77:c0: 9e:69:47:d6:f4:98:04:92:e7:0e:64:15:b2:14:25: a0:11:ee:33:55:7c:47:b9:f8:00:8f:db:cf:2d:a7: d5:bf:9f:7c:e9:a7:e2:6b:c8:d5:aa:34:85:4d:c1: 69:4d:70:74:87:58:d6:a2:08:1f:e4:ef:0e:e0:f3: 5c:f4:04:cc:b5:43:e6:c3:e4:5c:cb:c8:64:93:d1: 45:3e:bf:0d:29:ec:a2:56:c6:2d:e9:19:19:1a:de: 33:50:2b:fc:6b:44:8b:5f:41:ab:d6:36:c1:6e:d7: 39:ab:e4:7f:af:a1:76:a4:3d:6e:59:db:69:d3:a8: 43:13:79:f8:fa:fd:d3:b0:03:a1:b5:ca:73:20:63: a7:d1:8f:de:4e:f7:0d:e5:09:7d:76:fe:6d:b6:14: 99:7d:ce:8a:c6:cf:b1:51:58:fb:7a:2d:89:3d:e2: 70:0e:a0:5d:bd:8c:39:41:d9:37:6f:d8:79:c0:94: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:CD:8D:FA:D4:5F:18:4E:14:69:64:75:C4:3D:C3:62:DD:28:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2257a8fe-79d9-332e-847d-13ed7e121adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ad:2e:79:20:ff:aa:6d:42:71:6e:35:a9:17:a2:4c:a0:7d: 4f:d7:4a:7a:dc:42:e0:7b:9c:22:69:53:0b:82:46:20:cb:af: fb:e2:dc:c3:3e:00:25:20:41:9a:31:04:d4:41:1a:f9:53:00: c2:c2:8c:e5:0c:1d:b4:75:05:ee:4e:de:90:3b:af:ea:07:39: ac:25:50:bc:23:38:87:e7:fd:aa:93:10:37:d4:76:a1:2d:ae: 95:9b:bb:41:aa:62:93:7b:8a:be:6d:34:bb:26:57:7f:dc:7b: e6:88:28:34:4e:92:8e:11:9f:7f:a1:e6:67:ea:f2:fb:92:bb: e5:5a:58:68:62:7a:6a:1e:ec:06:a3:42:d8:d9:54:ff:6c:f1: 11:fc:43:db:0f:46:d4:3b:ce:20:b1:4e:ed:eb:e7:29:2f:d0: 78:59:85:4d:1c:0a:8e:a1:3c:c9:77:25:36:e6:bb:dd:6a:a4: 88:32:89:6e:7d:36:36:64:3e:7b:3b:b0:17:5c:34:59:9e:83: d5:38:06:79:08:24:b0:8d:61:39:9b:70:81:4a:6c:9f:4a:e7: 87:97:2b:4a:e2:48:45:78:a3:40:2a:d7:cf:09:07:7d:bf:fb: cf:07:7f:e8:05:77:55:3f:e2:b6:d3:80:c9:b2:58:bd:ac:09: 32:6c:db:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmtgdXHhTBT47QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk YjI5NjI4M2EtOWJkZi00MzU1LTk5MzQtM2RkZTcyNjI5MzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaiLqa7d2XJbQsAvO1lotYMcIuRIre0N2leq 6ITjTz6/N7FOrapgx+ud4qWGoAD6BHL2PRSnJsMytV2Wjfq3pfbpytqza8+/d8Ce aUfW9JgEkucOZBWyFCWgEe4zVXxHufgAj9vPLafVv5986afia8jVqjSFTcFpTXB0 h1jWoggf5O8O4PNc9ATMtUPmw+Rcy8hkk9FFPr8NKeyiVsYt6RkZGt4zUCv8a0SL X0Gr1jbBbtc5q+R/r6F2pD1uWdtp06hDE3n4+v3TsAOhtcpzIGOn0Y/eTvcN5Ql9 dv5tthSZfc6Kxs+xUVj7ei2JPeJwDqBdvYw5Qdk3b9h5wJRHEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtCzY361F8YThRpZHXEPcNi3ShQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjI1N2E4ZmUtNzlkOS0z MzJlLTg0N2QtMTNlZDdlMTIxYWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEStLnkg/6ptQnFuNakXokygfU/XSnrcQuB7nCJpUwuCRiDLr/vi3MM+ ACUgQZoxBNRBGvlTAMLCjOUMHbR1Be5O3pA7r+oHOawlULwjOIfn/aqTEDfUdqEt rpWbu0GqYpN7ir5tNLsmV3/ce+aIKDROko4Rn3+h5mfq8vuSu+VaWGhiemoe7Aaj QtjZVP9s8RH8Q9sPRtQ7ziCxTu3r5ykv0HhZhU0cCo6hPMl3JTbmu91qpIgyiW59 NjZkPns7sBdcNFmeg9U4BnkIJLCNYTmbcIFKbJ9K54eXK0riSEV4o0Aq188JB32/ +88Hf+gFd1U/4rbTgMmyWL2sCTJs26Q= -----END CERTIFICATE-----Generated at Sat Aug 23 15:44:25 2025 by rpki-client