$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa File: 532d166f-101c-31f9-9346-a4fc524e4d69.roa (raw, json) Hash identifier: 6hsUPX39Whcd1y3JO88GPrTTndJcFtXAy9LXnZ3wsv4= Subject key identifier: 63:11:0D:9A:47:2C:68:09:82:42:A6:FE:58:A6:12:A0:14:05:D7:55 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066DF42ED94304464CB160 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6d:f4:2e:d9:43:04:46:4c:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=335ec5c7-852a-4960-9412-441d2e7523bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f5:35:d8:43:8a:0e:21:0d:ed:c4:98:c7:ea: 5b:b0:d4:f3:41:b5:79:b2:52:59:5b:11:50:75:60: 25:29:c0:ed:c4:a4:50:a4:9e:fc:1d:95:5a:ad:54: d9:6f:72:16:35:e2:94:7e:26:6d:0e:57:e3:5e:7e: 7b:57:a3:2a:16:6e:72:f4:5d:04:2e:11:be:69:6f: 56:fa:12:31:22:cf:85:4b:b7:3e:ec:52:e7:16:f7: ad:c7:19:b3:4f:e1:15:5d:fe:bd:a7:32:51:7e:c2: 9b:55:ef:6b:06:34:01:0a:38:72:41:8e:5c:39:b9: 47:74:ce:6e:2d:93:01:e3:1f:5e:68:2b:7a:07:84: be:53:1a:99:44:24:5f:a6:ba:87:f4:c6:7a:fe:f7: e8:7c:b4:02:c6:95:05:0a:c0:3a:ea:d9:0c:f2:02: a9:42:3d:06:33:81:2e:3c:e1:68:a9:77:65:45:02: f0:74:32:d8:58:c0:2b:f2:48:44:41:df:e3:8c:b4: ad:37:d9:59:92:f4:3b:4b:c4:15:71:a9:c0:dc:e6: 7b:16:98:7a:26:c2:69:60:e8:ba:cf:2b:92:5d:39: 88:19:b9:83:6b:07:7b:b8:b2:00:4b:90:7b:00:88: e1:93:48:b7:b0:b6:40:54:ae:86:31:ef:9b:06:63: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:11:0D:9A:47:2C:68:09:82:42:A6:FE:58:A6:12:A0:14:05:D7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:06:c1:ff:d1:e4:ce:3c:b7:f8:e1:ed:f8:d7:42:d6:17:12: d3:91:02:86:04:be:57:f8:07:f3:62:9e:a0:9a:a7:3d:e4:91: bd:ad:d0:3e:22:60:f1:a0:d2:98:20:67:0e:f2:f6:58:77:a3: b9:3a:b6:3d:4e:5f:8d:66:87:79:70:ce:d6:97:01:c7:87:99: 21:d2:f3:4b:09:21:bb:f3:c2:50:20:1f:d4:7e:94:44:0a:cb: 56:f2:e1:0d:02:63:fc:29:91:66:1b:65:ae:12:8f:ca:ba:20: 9f:a9:53:c2:af:ff:67:09:46:66:5e:3b:ae:e1:04:61:8b:a9: 2d:bc:4a:ef:b3:77:c1:81:9d:8a:ba:fd:a9:18:de:67:a8:83: 63:2f:25:d3:2b:11:a5:a8:7e:fa:41:63:83:3e:57:dd:a0:73: 96:23:de:52:fa:0e:49:4b:ed:3a:19:21:e4:de:0c:6c:48:26: f7:15:7b:4c:d6:c4:78:eb:e9:ff:02:66:45:b5:ec:c5:87:3e: c8:b0:7d:99:6e:2c:04:d8:72:02:33:8f:f2:d5:89:fc:9b:54: 69:69:1e:42:76:a4:5a:70:30:83:0d:1c:fa:53:1d:02:d4:59: c8:ff:40:80:ac:06:41:e5:27:d6:8b:45:03:19:7c:51:8f:81: 73:49:ea:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBm30LtlDBEZMsWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MzM1ZWM1YzctODUyYS00OTYwLTk0MTItNDQxZDJlNzUyM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/U12EOKDiEN7cSYx+pbsNTzQbV5slJZWxFQ dWAlKcDtxKRQpJ78HZVarVTZb3IWNeKUfiZtDlfjXn57V6MqFm5y9F0ELhG+aW9W +hIxIs+FS7c+7FLnFvetxxmzT+EVXf69pzJRfsKbVe9rBjQBCjhyQY5cOblHdM5u LZMB4x9eaCt6B4S+UxqZRCRfprqH9MZ6/vfofLQCxpUFCsA66tkM8gKpQj0GM4Eu POFoqXdlRQLwdDLYWMAr8khEQd/jjLStN9lZkvQ7S8QVcanA3OZ7Fph6JsJpYOi6 zyuSXTmIGbmDawd7uLIAS5B7AIjhk0i3sLZAVK6GMe+bBmMsGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMRDZpHLGgJgkKm/limEqAUBddVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTMyZDE2NmYtMTAxYy0z MWY5LTkzNDYtYTRmYzUyNGU0ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQGwf/R5M48t/jh7fjXQtYXEtORAoYEvlf4B/NinqCapz3kkb2t0D4i YPGg0pggZw7y9lh3o7k6tj1OX41mh3lwztaXAceHmSHS80sJIbvzwlAgH9R+lEQK y1by4Q0CY/wpkWYbZa4Sj8q6IJ+pU8Kv/2cJRmZeO67hBGGLqS28Su+zd8GBnYq6 /akY3meog2MvJdMrEaWofvpBY4M+V92gc5Yj3lL6DklL7ToZIeTeDGxIJvcVe0zW xHjr6f8CZkW17MWHPsiwfZluLATYcgIzj/LVifybVGlpHkJ2pFpwMIMNHPpTHQLU Wcj/QICsBkHlJ9aLRQMZfFGPgXNJ6nM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:10 2025 by rpki-client