$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/430e2fdb-132d-3c38-ab73-beeaf803cd53.roa File: 430e2fdb-132d-3c38-ab73-beeaf803cd53.roa (raw, json) Hash identifier: URkLj+1gFBwPsCIXPjkZXdxcq8SywyHVSjkMpOUf8nQ= Subject key identifier: 21:00:D0:5C:05:C9:62:EE:CD:A8:76:C3:B6:4E:B3:C5:96:B1:87:5C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066C3E361DA627850F3900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/430e2fdb-132d-3c38-ab73-beeaf803cd53.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6c:3e:36:1d:a6:27:85:0f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=dea3e141-f3ad-40b4-9280-5586c2c9afa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:20:03:b2:36:7a:8d:2f:e1:7e:e1:21:6a: 4b:d4:cb:c7:80:b5:84:d7:b8:3d:92:fb:b3:b0:32: b5:6d:36:06:0c:0a:ca:bb:88:31:11:7d:c0:8b:67: 9e:03:7c:2a:c9:ba:ab:4c:26:d1:1d:0b:ca:25:04: 2f:2b:95:1d:06:f5:9d:4d:24:31:a2:1a:9c:29:95: 18:77:b8:15:ca:ed:3e:80:cd:b3:12:ed:72:3a:a6: 21:9c:2b:7c:fd:82:89:dc:4a:32:22:5e:8a:08:fb: 92:43:0b:d7:c0:e9:0f:b9:38:85:ac:bb:6c:f9:a0: c5:a5:49:f2:a1:01:e3:ce:fc:bb:de:51:80:23:27: 6a:f7:02:25:8c:6b:5b:88:a8:32:22:c1:53:90:c9: 23:a2:5d:c7:b7:36:72:f6:2e:ab:59:73:8d:70:4d: bb:99:7d:cc:24:0a:fb:b1:61:4b:de:49:ed:7f:ed: fd:ed:5e:11:6c:97:ea:f7:be:e9:4f:9c:b6:d1:e4: 77:3e:22:73:f4:07:a0:0d:2d:52:d0:d6:70:ad:35: fc:fd:d4:59:c9:aa:4c:36:85:4b:08:22:75:fe:eb: bf:ef:b4:9e:39:92:80:47:69:ed:52:7b:91:c4:7a: 52:07:c0:76:b4:f3:27:08:db:47:cf:d6:61:cc:3e: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:00:D0:5C:05:C9:62:EE:CD:A8:76:C3:B6:4E:B3:C5:96:B1:87:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/430e2fdb-132d-3c38-ab73-beeaf803cd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e9:19:fd:16:fb:4b:80:40:09:1a:39:75:33:16:7a:72:be: 65:ad:c6:98:60:05:a4:aa:cf:28:28:4c:e2:20:b3:8a:ed:f2: 24:18:31:3a:26:1a:f1:5d:32:c2:78:5c:ca:59:cd:e7:ff:f1: ee:74:d4:ed:b4:12:28:56:48:c8:70:e2:da:c0:cf:74:b0:24: f4:cf:b5:ac:f0:75:9c:11:a3:43:ae:91:d4:e0:a5:c4:3c:20: ae:5c:7a:fb:f7:90:f1:05:32:45:fc:b8:21:34:7f:77:ec:e7: a8:23:29:9a:ae:69:2e:8a:dc:62:78:47:98:5a:83:b6:0c:1c: 3a:4f:21:a8:65:a9:be:bd:0e:a5:c5:d7:a3:92:f5:f7:7d:1c: 75:4b:ea:f3:75:fc:3d:da:bc:08:d7:1e:2c:56:24:0e:fa:b8: 89:67:52:59:16:cb:99:4a:2d:42:f0:f9:b9:86:b6:97:74:6a: 32:56:c7:ba:24:5c:f6:dc:e4:30:b2:bb:02:51:ed:c6:06:34: 05:f6:80:dd:7f:77:86:2a:de:53:c2:ea:02:47:1f:be:2b:f4: d3:57:86:43:6b:ab:51:8c:93:e4:15:54:36:ef:eb:e5:7f:35: fe:a9:5f:53:d0:1c:b4:f0:e5:98:06:59:36:b3:d0:fc:66:0e: 4d:b9:a4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmw+Nh2mJ4UPOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk ZGVhM2UxNDEtZjNhZC00MGI0LTkyODAtNTU4NmMyYzlhZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G4gA7I2eo0v4X7hIWpL1MvHgLWE17g9kvuz sDK1bTYGDArKu4gxEX3Ai2eeA3wqybqrTCbRHQvKJQQvK5UdBvWdTSQxohqcKZUY d7gVyu0+gM2zEu1yOqYhnCt8/YKJ3EoyIl6KCPuSQwvXwOkPuTiFrLts+aDFpUny oQHjzvy73lGAIydq9wIljGtbiKgyIsFTkMkjol3HtzZy9i6rWXONcE27mX3MJAr7 sWFL3kntf+397V4RbJfq977pT5y20eR3PiJz9AegDS1S0NZwrTX8/dRZyapMNoVL CCJ1/uu/77SeOZKAR2ntUnuRxHpSB8B2tPMnCNtHz9ZhzD4eYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEA0FwFyWLuzah2w7ZOs8WWsYdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDMwZTJmZGItMTMyZC0z YzM4LWFiNzMtYmVlYWY4MDNjZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbpGf0W+0uAQAkaOXUzFnpyvmWtxphgBaSqzygoTOIgs4rt8iQYMTom GvFdMsJ4XMpZzef/8e501O20EihWSMhw4trAz3SwJPTPtazwdZwRo0OukdTgpcQ8 IK5cevv3kPEFMkX8uCE0f3fs56gjKZquaS6K3GJ4R5hag7YMHDpPIahlqb69DqXF 16OS9fd9HHVL6vN1/D3avAjXHixWJA76uIlnUlkWy5lKLULw+bmGtpd0ajJWx7ok XPbc5DCyuwJR7cYGNAX2gN1/d4Yq3lPC6gJHH74r9NNXhkNrq1GMk+QVVDbv6+V/ Nf6pX1PQHLTw5ZgGWTaz0PxmDk25pFA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:06 2025 by rpki-client