$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa File: 5d294aa1-589d-36a0-863c-3f219e30b6f5.roa (raw, json) Hash identifier: FYUl6R7TO7K76fw2NGWRTTQKb0aQdOU+ZNqOelfljD0= Subject key identifier: 2D:72:B3:AE:B9:DB:C6:D3:B6:6A:42:82:EB:EA:FF:A2:E1:C8:A0:C6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066A412C857ED5A6AA6C00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6a:41:2c:85:7e:d5:a6:aa:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=f0f396a2-d1a7-442e-90f9-2c7e20dffe4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7c:fb:36:e4:e8:99:9d:5a:81:06:57:e1:a6: 24:69:f6:44:07:f8:85:11:a3:ca:f5:97:48:b5:ca: 07:55:44:0a:ef:38:55:02:1e:ed:8f:66:d1:d9:ab: f0:6c:f2:d3:30:b4:10:a3:dc:9b:75:b0:b2:fe:b3: 23:93:7b:06:28:b1:87:1f:ba:6f:c7:df:40:50:69: 04:c8:21:99:68:d9:15:d0:b7:e4:50:e6:46:72:b1: 14:22:aa:9a:45:9e:12:60:15:f0:ad:a9:00:80:75: ab:da:85:24:f4:88:a7:83:08:92:d5:60:1b:39:b5: 5a:cf:93:c8:76:34:67:3f:2b:e9:ca:bf:77:9c:9d: e1:41:a3:95:fb:c9:00:89:9f:6d:8b:c5:d0:f5:06: 13:cb:59:ae:98:32:ae:37:3f:73:cf:36:b0:cf:b2: be:87:4d:32:1e:a1:2d:1b:84:60:b7:11:06:84:2b: fa:97:5a:04:1e:65:aa:c2:ef:4c:a3:2c:0d:25:7f: 25:fd:90:31:2a:99:22:37:25:12:77:43:c1:82:43: 7a:a3:08:30:50:4e:76:c0:cd:39:7d:52:13:d0:d4: 8b:23:6d:dd:3a:9d:a0:fa:f3:ac:93:8b:6b:db:41: ef:d5:bd:11:62:7a:fa:3b:98:93:8e:9b:de:02:4d: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:B3:AE:B9:DB:C6:D3:B6:6A:42:82:EB:EA:FF:A2:E1:C8:A0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3b:65:ed:c9:76:64:fe:dd:75:10:1f:6c:80:0d:a3:c6:78: c0:1e:ae:80:f0:3a:d4:b4:6a:c9:83:08:c1:71:18:24:e7:2f: ef:1e:ab:1d:77:96:18:ec:da:84:19:5e:f7:e5:43:1f:de:a8: 5f:16:3f:f1:2d:eb:ab:5d:c6:63:c7:61:7d:bf:88:29:65:0f: 7d:26:85:6f:c9:5b:39:eb:ba:64:96:b7:10:a5:af:36:68:43: 96:72:5b:a9:d8:c7:71:af:6d:0e:96:90:37:da:52:b5:2a:fd: 6d:6c:d5:81:e0:3b:4a:06:b9:1c:e7:b9:bb:a1:34:e6:8e:22: 1c:5f:23:2e:83:e9:59:14:74:ff:a9:bc:63:f1:69:f4:a9:5a: c7:72:cb:56:e9:97:0d:f8:14:6c:3f:36:cc:06:26:b7:73:47: 6f:bd:96:1d:95:88:aa:b8:9b:aa:12:c7:22:25:e7:f9:99:de: e6:d8:29:32:5d:dd:72:0d:d2:ad:be:97:94:fc:f5:70:3c:e2: ea:3b:fe:00:0b:ef:72:7c:5b:d4:01:89:53:9c:60:3c:fc:dc: 39:3d:93:79:1e:1f:4a:a3:55:01:07:e7:07:42:cb:c0:d8:39: 5a:d8:86:db:96:7d:dc:50:d3:4b:ba:ed:3c:0c:86:4e:ed:cf: e5:91:e2:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmpBLIV+1aaqbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk ZjBmMzk2YTItZDFhNy00NDJlLTkwZjktMmM3ZTIwZGZmZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnz7NuTomZ1agQZX4aYkafZEB/iFEaPK9ZdI tcoHVUQK7zhVAh7tj2bR2avwbPLTMLQQo9ybdbCy/rMjk3sGKLGHH7pvx99AUGkE yCGZaNkV0LfkUOZGcrEUIqqaRZ4SYBXwrakAgHWr2oUk9IingwiS1WAbObVaz5PI djRnPyvpyr93nJ3hQaOV+8kAiZ9ti8XQ9QYTy1mumDKuNz9zzzawz7K+h00yHqEt G4RgtxEGhCv6l1oEHmWqwu9MoywNJX8l/ZAxKpkiNyUSd0PBgkN6owgwUE52wM05 fVIT0NSLI23dOp2g+vOsk4tr20Hv1b0RYnr6O5iTjpveAk3LTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1ys66528bTtmpCguvq/6LhyKDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWQyOTRhYTEtNTg5ZC0z NmEwLTg2M2MtM2YyMTllMzBiNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU7Ze3JdmT+3XUQH2yADaPGeMAeroDwOtS0asmDCMFxGCTnL+8eqx13 lhjs2oQZXvflQx/eqF8WP/Et66tdxmPHYX2/iCllD30mhW/JWznrumSWtxClrzZo Q5ZyW6nYx3GvbQ6WkDfaUrUq/W1s1YHgO0oGuRznubuhNOaOIhxfIy6D6VkUdP+p vGPxafSpWsdyy1bplw34FGw/NswGJrdzR2+9lh2ViKq4m6oSxyIl5/mZ3ubYKTJd 3XIN0q2+l5T89XA84uo7/gAL73J8W9QBiVOcYDz83Dk9k3keH0qjVQEH5wdCy8DY OVrYhtuWfdxQ00u67TwMhk7tz+WR4mM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:54 2025 by rpki-client