$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd5dcc5-b100-39c6-8111-c9020f713e52.roa File: 9dd5dcc5-b100-39c6-8111-c9020f713e52.roa (raw, json) Hash identifier: JJmOboG/L2lCccGU0sLmR4LYhllUbuY24D4tUO0g5kY= Subject key identifier: 68:50:4F:0D:41:6E:4A:C4:EB:4A:18:BD:82:30:F5:50:06:13:7E:C3 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066BF4776C0FA4ED488780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd5dcc5-b100-39c6-8111-c9020f713e52.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6b:f4:77:6c:0f:a4:ed:48:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=b2d2b2f0-df7a-46c4-8bc5-7f30278b048f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c2:f8:59:c4:e4:fb:5e:56:3b:ae:7b:92:e6: 07:54:34:b8:5d:a8:39:80:b2:ca:70:06:25:2c:b6: 54:1d:11:65:6b:60:b5:75:34:c9:59:c2:7d:72:20: 98:32:03:bc:29:7b:84:6f:13:81:0f:66:eb:b0:be: 26:47:ac:bb:9e:f0:d4:48:a9:80:cf:79:86:13:5b: 5f:3e:9d:39:8d:8e:b8:61:c1:2a:93:6d:59:88:8e: 0d:fd:a1:03:f8:f3:e6:10:cd:9f:27:6e:1c:c4:2c: e1:26:2b:35:fe:c7:46:c6:71:fd:b2:2c:c9:72:fb: c3:df:c3:3e:2f:8e:e4:7b:af:6a:20:75:d1:27:1c: 5e:02:64:4d:80:38:20:4a:99:a5:da:7b:9b:2e:c4: 69:61:99:fe:c8:fa:73:a1:c3:24:9b:06:7a:15:2d: fd:f4:1f:bd:a0:a7:fe:58:d0:ce:e6:2b:52:44:d7: a0:bb:77:06:ab:63:30:5a:d0:18:01:55:1d:d7:95: 04:b1:66:cd:a0:e6:e7:f0:fb:91:45:37:76:44:46: ef:51:6e:c7:1a:47:36:67:a6:85:66:49:bd:0c:b1: 64:12:67:ae:66:ce:9f:b5:1b:05:88:34:59:1c:fd: 95:d2:b2:87:70:d0:32:fb:83:c8:07:ab:0f:31:68: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:50:4F:0D:41:6E:4A:C4:EB:4A:18:BD:82:30:F5:50:06:13:7E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd5dcc5-b100-39c6-8111-c9020f713e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2f:74:ea:00:ab:84:16:44:ca:e9:cc:90:a6:01:f5:35:70: 86:15:6a:7b:b6:14:7b:44:63:3b:ae:30:60:b5:60:be:83:05: d8:5b:c8:e8:6c:0d:6e:ee:c1:da:6e:93:6f:07:e2:46:12:b9: b2:b6:c2:68:13:c3:d8:29:ab:a1:2e:5b:f4:d3:73:5c:34:9f: a8:50:7f:df:03:84:d3:3e:1f:62:bc:d0:9c:09:c6:cc:18:74: 32:4e:5c:dd:8b:bd:55:ef:c0:de:f1:9e:cf:82:a2:26:7a:d4: 65:cb:b6:e4:f5:0e:de:eb:0b:38:15:88:3f:89:7c:a9:16:d5: 99:4a:fe:0d:40:d0:d4:8f:13:9b:4b:59:0e:92:de:4b:76:96: 8f:a9:2b:09:5d:6d:80:3f:d5:51:b2:a4:01:66:2a:5b:04:2b: d2:6d:10:de:e5:07:41:49:70:a7:7d:91:89:5f:23:04:2f:7b: 74:6d:53:c9:42:d4:25:54:b7:6d:0a:89:0b:2d:16:ec:70:77: 2b:c0:0c:d6:a2:b5:40:ba:ce:d9:e2:da:53:76:a2:e4:c3:00: 7c:bb:e6:3c:74:e4:4a:5a:61:10:d5:81:63:84:d1:0f:40:46: 55:01:7f:70:a0:81:1f:ca:7e:36:c0:47:fb:37:3d:6a:96:33: c8:b7:61:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmv0d2wPpO1Ih4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk YjJkMmIyZjAtZGY3YS00NmM0LThiYzUtN2YzMDI3OGIwNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsL4WcTk+15WO657kuYHVDS4Xag5gLLKcAYl LLZUHRFla2C1dTTJWcJ9ciCYMgO8KXuEbxOBD2brsL4mR6y7nvDUSKmAz3mGE1tf Pp05jY64YcEqk21ZiI4N/aED+PPmEM2fJ24cxCzhJis1/sdGxnH9sizJcvvD38M+ L47ke69qIHXRJxxeAmRNgDggSpml2nubLsRpYZn+yPpzocMkmwZ6FS399B+9oKf+ WNDO5itSRNegu3cGq2MwWtAYAVUd15UEsWbNoObn8PuRRTd2REbvUW7HGkc2Z6aF Zkm9DLFkEmeuZs6ftRsFiDRZHP2V0rKHcNAy+4PIB6sPMWjHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhQTw1BbkrE60oYvYIw9VAGE37DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWRkNWRjYzUtYjEwMC0z OWM2LTgxMTEtYzkwMjBmNzEzZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMvdOoAq4QWRMrpzJCmAfU1cIYVanu2FHtEYzuuMGC1YL6DBdhbyOhs DW7uwdpuk28H4kYSubK2wmgTw9gpq6EuW/TTc1w0n6hQf98DhNM+H2K80JwJxswY dDJOXN2LvVXvwN7xns+CoiZ61GXLtuT1Dt7rCzgViD+JfKkW1ZlK/g1A0NSPE5tL WQ6S3kt2lo+pKwldbYA/1VGypAFmKlsEK9JtEN7lB0FJcKd9kYlfIwQve3RtU8lC 1CVUt20KiQstFuxwdyvADNaitUC6ztni2lN2ouTDAHy75jx05EpaYRDVgWOE0Q9A RlUBf3CggR/KfjbAR/s3PWqWM8i3YW8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:19 2025 by rpki-client