$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8f2f2440-f594-3714-8f65-a96d171d04d8.roa File: 8f2f2440-f594-3714-8f65-a96d171d04d8.roa (raw, json) Hash identifier: VgkqVtsEm2Bc5TxVztN1LMb1iePabLLqAbQRS0dew40= Subject key identifier: 34:4B:6E:C3:26:A7:47:53:63:DD:AB:1B:61:01:46:26:79:7D:E0:E4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849F44A6936227D9E3FD1CA0B00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8f2f2440-f594-3714-8f65-a96d171d04d8.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 204.195.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:69:36:22:7d:9e:3f:d1:ca:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=87fa6187-978b-43dd-ac07-2c8ce12ae349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:19:53:9c:2e:4b:32:1c:6e:9b:d1:b9:04: 4c:61:2c:a7:ee:7e:c8:d0:0d:a9:9b:7d:f5:7b:cf: 15:95:4c:44:a4:4e:78:d4:62:e1:29:b2:8e:e7:e8: bc:43:18:2b:bf:6a:43:7d:79:53:9e:ac:23:67:1a: fa:0d:55:d3:77:8e:9b:95:85:bc:74:c4:50:3e:92: 8d:02:42:ea:5a:e9:4c:4a:59:3e:29:70:12:53:50: 2b:40:b4:79:d1:43:dc:3e:8a:bd:ab:d4:f3:1e:cb: 14:c4:00:9e:7c:2e:c5:87:94:58:dc:3f:b7:c8:ea: 22:51:63:aa:9f:d0:17:7d:04:9c:b6:59:9f:b1:d4: 1e:1b:ba:28:4d:b7:21:6f:70:af:1a:84:3a:a5:d6: ff:34:b5:f4:36:ef:65:cd:83:7b:0c:95:b5:03:72: d0:34:11:79:00:a6:c6:49:4e:81:72:03:ba:37:50: 97:b7:d5:37:2e:04:89:63:37:de:08:e9:bc:81:15: f7:06:b9:77:e9:79:05:16:73:ae:00:21:a7:63:ce: f5:b4:bd:fc:ea:1f:b6:b6:57:a2:cc:14:86:f2:99: 0d:bd:64:59:d1:8e:56:41:c7:e6:58:27:7b:13:75: 2f:4f:40:b8:1f:06:cd:41:f5:fa:f9:c4:c5:ff:f6: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4B:6E:C3:26:A7:47:53:63:DD:AB:1B:61:01:46:26:79:7D:E0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8f2f2440-f594-3714-8f65-a96d171d04d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3b:ac:eb:00:3f:ed:f2:df:93:83:f2:9d:69:b1:be:41:1c: 4e:d2:ba:88:30:74:5b:00:8c:b0:03:7f:27:b2:7f:bd:13:4c: ad:e1:71:bb:a3:13:bd:fa:8c:1f:3b:06:1f:27:ac:aa:bd:5a: 91:11:8f:68:a0:ad:52:ca:72:85:76:28:33:98:24:48:3f:da: 20:46:69:47:72:21:d0:34:a6:ac:c0:95:96:1d:16:2c:aa:67: 6f:f0:72:76:92:29:9a:63:20:e6:20:e1:7c:5f:17:e3:c4:f6: 01:f9:80:f6:93:a4:32:7b:49:4e:e2:4b:2b:5e:08:06:14:37: 1c:1f:45:b0:7f:e6:ee:73:21:6e:a5:6a:10:da:80:b3:85:3a: c6:df:6b:2d:58:fe:72:e4:b2:bf:31:92:7b:7d:95:af:cb:55: 7a:5a:f5:a5:0b:53:35:99:e6:2b:6f:5e:e0:6d:8f:7a:f9:c4: a2:e0:85:b0:d1:31:f6:e9:86:df:f5:90:d3:0c:d1:a6:67:c0: 36:e8:ce:f5:dc:1a:16:68:05:fc:a4:7d:73:61:85:94:9f:41: 46:3c:26:0f:b9:86:41:01:03:73:cf:bb:eb:4e:d8:41:18:a7: e7:f9:b6:7d:2d:1b:52:39:d8:e0:83:d0:9e:e1:ab:3f:ef:24: a0:10:79:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Smk2In2eP9HKCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ODdmYTYxODctOTc4Yi00M2RkLWFjMDctMmM4Y2UxMmFlMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMwZU5wuSzIcbpvRuQRMYSyn7n7I0A2pm331 e88VlUxEpE541GLhKbKO5+i8Qxgrv2pDfXlTnqwjZxr6DVXTd46blYW8dMRQPpKN AkLqWulMSlk+KXASU1ArQLR50UPcPoq9q9TzHssUxACefC7Fh5RY3D+3yOoiUWOq n9AXfQSctlmfsdQeG7ooTbchb3CvGoQ6pdb/NLX0Nu9lzYN7DJW1A3LQNBF5AKbG SU6BcgO6N1CXt9U3LgSJYzfeCOm8gRX3Brl36XkFFnOuACGnY871tL386h+2tlei zBSG8pkNvWRZ0Y5WQcfmWCd7E3UvT0C4HwbNQfX6+cTF//biMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRLbsMmp0dTY92rG2EBRiZ5feDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGYyZjI0NDAtZjU5NC0z NzE0LThmNjUtYTk2ZDE3MWQwNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo7rOsAP+3y35OD8p1psb5BHE7SuogwdFsAjLADfyeyf70TTK3hcbuj E736jB87Bh8nrKq9WpERj2igrVLKcoV2KDOYJEg/2iBGaUdyIdA0pqzAlZYdFiyq Z2/wcnaSKZpjIOYg4XxfF+PE9gH5gPaTpDJ7SU7iSyteCAYUNxwfRbB/5u5zIW6l ahDagLOFOsbfay1Y/nLksr8xknt9la/LVXpa9aULUzWZ5itvXuBtj3r5xKLghbDR Mfbpht/1kNMM0aZnwDbozvXcGhZoBfykfXNhhZSfQUY8Jg+5hkEBA3PPu+tO2EEY p+f5tn0tG1I52OCD0J7hqz/vJKAQeVs= -----END CERTIFICATE-----Generated at Tue Jul 1 06:31:18 2025 by rpki-client