$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67ead5e5-34c1-3a20-8799-838410d09198.roa File: 67ead5e5-34c1-3a20-8799-838410d09198.roa (raw, json) Hash identifier: Yj+ahhbIqjaq7Cbfh3JGwgfVQaInJOjikUw3E1VBaHU= Subject key identifier: EE:39:8D:12:39:8E:69:01:65:A3:4D:B8:22:A3:3C:14:C9:B6:43:D3 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5067026E0DDC8BC763AD248 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67ead5e5-34c1-3a20-8799-838410d09198.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:70:26:e0:dd:c8:bc:76:3a:d2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=08288df3-cd4c-40f6-ae0f-d43db2f46532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:7e:43:25:91:97:a4:c4:b6:4e:b4:e5:4d: c6:66:0b:18:e3:e2:74:cb:c1:59:97:bb:32:f5:cd: 33:91:27:2d:a5:ab:0e:0a:31:4b:26:a0:2d:cb:11: 13:4b:56:1c:c9:25:d0:66:45:4d:8d:c7:98:b6:aa: 0a:75:38:39:89:95:b6:12:64:e6:ef:50:31:2c:ed: 65:96:77:ec:b8:13:c4:66:7b:4d:45:39:bb:f0:59: bb:45:63:1a:b5:ca:34:9d:28:06:1f:2a:e3:75:75: 3d:9e:54:da:88:ba:bb:8f:ea:5e:17:93:c2:c4:5f: 55:86:e6:e1:22:c7:f0:c7:86:4e:d7:44:c6:17:26: 1f:43:de:0f:5e:01:01:a7:54:b7:ee:f7:d9:db:b0: 17:f8:ed:6e:64:ad:c9:21:2f:73:35:d5:20:cf:4a: b9:05:11:02:cf:e5:09:6a:3d:c6:28:71:62:52:8e: 0d:87:83:d9:ad:d1:1c:96:32:a1:8e:94:af:73:cd: 13:75:66:8a:d6:71:be:ac:2a:83:7d:7b:c2:b0:bb: 6f:d1:f7:d8:6f:24:bc:78:8b:46:60:52:49:91:f8: 83:52:31:a7:5f:d8:a5:02:46:a8:7d:6a:5c:e1:b4: 6f:cc:a6:60:0f:c3:6b:27:7e:2f:0f:91:d7:af:68: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:39:8D:12:39:8E:69:01:65:A3:4D:B8:22:A3:3C:14:C9:B6:43:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67ead5e5-34c1-3a20-8799-838410d09198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c3:51:7c:5d:d0:12:3e:e1:89:d2:b6:56:34:f2:6a:83:7c: 28:f3:84:b9:ef:0b:00:a1:29:3c:03:f5:29:38:12:a7:8a:ea: 78:a2:bd:fb:84:e9:bf:30:7a:fa:21:46:b6:2d:88:a4:b1:0f: a0:36:82:10:cb:57:7a:96:f7:3f:76:02:2e:58:b4:a2:5a:1e: d4:e4:8c:b1:cf:50:24:cc:32:ef:4a:c1:8e:70:4b:41:5f:2d: 4a:52:a9:e2:94:3b:e2:9e:a3:ee:52:d2:cf:c8:e7:6a:72:1a: 87:64:8e:26:f9:41:3d:4d:99:3b:48:48:46:df:8b:e2:f0:02: c8:ee:bf:b3:c1:bc:d8:df:98:55:70:57:05:1f:2b:86:25:35: da:5d:f8:fb:c9:ff:af:d5:45:31:d5:fa:0c:e5:09:ff:76:d0: f9:bf:56:59:9d:6b:98:fd:e5:52:f6:6f:ff:fc:e3:a2:92:d3: 73:2c:30:c6:05:2f:2e:5f:9c:15:91:39:28:67:67:88:d2:92: b5:2f:02:7a:77:bb:0d:ae:e2:57:3e:00:77:bb:4f:e0:76:70: 5b:a3:53:57:ad:8a:c4:08:17:65:eb:2b:e7:1f:ec:dc:f6:cb: 8d:f2:90:23:78:00:a5:a1:19:48:45:7e:11:c7:ca:9d:e0:7c: cf:40:93:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBnAm4N3IvHY60kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MDgyODhkZjMtY2Q0Yy00MGY2LWFlMGYtZDQzZGIyZjQ2NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFd+QyWRl6TEtk605U3GZgsY4+J0y8FZl7sy 9c0zkSctpasOCjFLJqAtyxETS1YcySXQZkVNjceYtqoKdTg5iZW2EmTm71AxLO1l lnfsuBPEZntNRTm78Fm7RWMatco0nSgGHyrjdXU9nlTaiLq7j+peF5PCxF9Vhubh Isfwx4ZO10TGFyYfQ94PXgEBp1S37vfZ27AX+O1uZK3JIS9zNdUgz0q5BRECz+UJ aj3GKHFiUo4Nh4PZrdEcljKhjpSvc80TdWaK1nG+rCqDfXvCsLtv0ffYbyS8eItG YFJJkfiDUjGnX9ilAkaofWpc4bRvzKZgD8NrJ34vD5HXr2jxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO45jRI5jmkBZaNNuCKjPBTJtkPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjdlYWQ1ZTUtMzRjMS0z YTIwLTg3OTktODM4NDEwZDA5MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLDUXxd0BI+4YnStlY08mqDfCjzhLnvCwChKTwD9Sk4EqeK6niivfuE 6b8wevohRrYtiKSxD6A2ghDLV3qW9z92Ai5YtKJaHtTkjLHPUCTMMu9KwY5wS0Ff LUpSqeKUO+Keo+5S0s/I52pyGodkjib5QT1NmTtISEbfi+LwAsjuv7PBvNjfmFVw VwUfK4YlNdpd+PvJ/6/VRTHV+gzlCf920Pm/Vlmda5j95VL2b//846KS03MsMMYF Ly5fnBWROShnZ4jSkrUvAnp3uw2u4lc+AHe7T+B2cFujU1etisQIF2XrK+cf7Nz2 y43ykCN4AKWhGUhFfhHHyp3gfM9Ak5E= -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:50 2025 by rpki-client