$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa File: 860a423e-5821-3417-a231-43f13e3ac94f.roa (raw, json) Hash identifier: XSPJWBjrkzo/pDG2wVc+U1fOMcIhu1Myww4KNuIaWCE= Subject key identifier: 6D:31:AB:73:F2:B6:08:C8:34:DB:3A:E8:04:89:99:4E:D6:47:83:73 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066AC2BB9F04BF552A0500 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6a:c2:bb:9f:04:bf:55:2a:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=0a3c1731-7e88-4aa4-8fad-8a522d908595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:43:76:05:eb:23:57:cd:51:39:c1:d9:b7:cf: 8a:52:25:ef:a1:26:2a:6b:88:03:a3:dc:94:fb:c8: 57:fb:1f:e5:6d:53:21:f2:49:78:95:d1:5c:72:d9: f0:45:f7:10:b9:ea:7e:d5:9b:92:a3:da:18:94:30: c9:4c:fb:69:29:e3:a7:44:75:16:02:a1:81:df:9a: 5c:d8:af:3c:80:c6:db:56:22:f6:bf:b4:e6:6d:d4: d7:d8:0e:de:f8:18:71:f5:5f:55:ee:e5:fd:2d:80: 6d:84:c3:d1:73:4f:90:fc:e0:69:6e:d7:85:92:97: 6e:1d:a3:cd:34:af:d5:72:34:dd:d5:ad:a7:c4:b2: 65:7a:59:b6:f3:36:9c:85:c1:73:2b:c4:f2:fb:aa: 2b:1f:ad:7d:9b:41:65:f8:9a:e1:25:d3:0d:56:76: a5:be:6d:bb:4f:57:cb:9d:74:6f:78:c7:ac:a7:ac: e1:45:25:c9:76:82:ee:d8:1e:49:7d:6d:08:75:d0: 44:95:96:5c:96:81:ee:ea:d5:d3:e3:7f:be:94:fa: 74:aa:91:b9:6f:c5:66:b5:b9:58:81:92:3e:89:e1: 97:17:9b:1c:f2:13:7f:ea:e8:64:52:17:5b:34:db: f6:93:44:e2:33:82:60:84:e4:39:ce:05:7c:9f:5d: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:31:AB:73:F2:B6:08:C8:34:DB:3A:E8:04:89:99:4E:D6:47:83:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a5:2b:e7:2b:2d:0e:e1:78:2f:41:27:0a:ec:70:b7:60:59: fb:e3:d7:ba:b8:6b:1b:a9:78:b9:3b:1c:71:66:38:7f:f2:e0: 22:c9:f0:3b:bf:b7:ae:27:52:6f:17:b0:ec:b7:b6:dd:d1:8e: 51:05:e4:8a:6b:97:5c:30:ba:84:1c:b6:7c:ab:38:b0:75:97: bd:fa:9e:57:6f:60:33:15:df:6b:18:de:28:f3:b4:38:a1:1e: 72:82:0a:fe:82:3e:09:83:b3:8d:4e:91:fd:34:8b:ee:23:34: 30:c7:dd:85:3f:dd:b6:89:9a:76:eb:f7:8e:6f:bc:74:c5:73: dd:f8:42:23:14:cc:39:88:97:89:c5:3f:02:5c:0d:86:fb:ea: 2b:8c:10:f2:f6:1f:76:2b:68:d0:b9:b5:2c:f9:8a:e2:9e:84: 00:7e:96:1c:d9:fc:04:d7:87:59:01:10:66:62:3a:ba:4b:15: 7e:ff:17:0d:68:e2:34:3b:f0:ec:c7:70:83:32:16:88:e3:3a: 79:ce:9f:73:40:dd:62:af:89:d3:94:25:9c:b1:1e:8c:b0:8b: 15:41:9b:27:37:08:a2:6f:3e:a2:bd:56:0f:87:61:a7:c3:63: 35:97:18:d5:98:a8:cb:63:5e:24:4a:1e:84:40:ce:78:40:6b: ec:4a:08:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmrCu58Ev1UqBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MGEzYzE3MzEtN2U4OC00YWE0LThmYWQtOGE1MjJkOTA4NTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kN2BesjV81ROcHZt8+KUiXvoSYqa4gDo9yU +8hX+x/lbVMh8kl4ldFcctnwRfcQuep+1ZuSo9oYlDDJTPtpKeOnRHUWAqGB35pc 2K88gMbbViL2v7TmbdTX2A7e+Bhx9V9V7uX9LYBthMPRc0+Q/OBpbteFkpduHaPN NK/VcjTd1a2nxLJlelm28zachcFzK8Ty+6orH619m0Fl+JrhJdMNVnalvm27T1fL nXRveMesp6zhRSXJdoLu2B5JfW0IddBElZZcloHu6tXT43++lPp0qpG5b8VmtblY gZI+ieGXF5sc8hN/6uhkUhdbNNv2k0TiM4JghOQ5zgV8n13mTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0xq3PytgjINNs66ASJmU7WR4NzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODYwYTQyM2UtNTgyMS0z NDE3LWEyMzEtNDNmMTNlM2FjOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADClK+crLQ7heC9BJwrscLdgWfvj17q4axupeLk7HHFmOH/y4CLJ8Du/ t64nUm8XsOy3tt3RjlEF5Iprl1wwuoQctnyrOLB1l736nldvYDMV32sY3ijztDih HnKCCv6CPgmDs41Okf00i+4jNDDH3YU/3baJmnbr945vvHTFc934QiMUzDmIl4nF PwJcDYb76iuMEPL2H3YraNC5tSz5iuKehAB+lhzZ/ATXh1kBEGZiOrpLFX7/Fw1o 4jQ78OzHcIMyFojjOnnOn3NA3WKvidOUJZyxHoywixVBmyc3CKJvPqK9Vg+HYafD YzWXGNWYqMtjXiRKHoRAznhAa+xKCMA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:52 2025 by rpki-client