$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa64b05d-a531-372f-aae8-ab6e91bb627b.roa File: aa64b05d-a531-372f-aae8-ab6e91bb627b.roa (raw, json) Hash identifier: 2AEzRR+U8pQltIWgsgZiDlVACK7VSQvFjdrPRq3LB0E= Subject key identifier: 11:71:01:BA:81:05:38:9A:B7:BD:15:96:EC:BE:45:12:DA:CB:2D:27 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066CC5B9CDC13C5797A480 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa64b05d-a531-372f-aae8-ab6e91bb627b.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6c:c5:b9:cd:c1:3c:57:97:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=c7fd2a52-8c89-4aac-a30c-126e5bcb2d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:5b:03:ec:af:1e:37:37:55:e7:17:e5:67: bf:d2:61:ff:71:32:5f:b8:49:49:9b:5a:41:2b:d0: 50:a5:5f:16:33:85:1b:24:ab:66:64:18:18:9d:e6: 64:a6:18:a1:f5:e6:49:e8:be:41:91:ec:12:51:51: 18:7d:19:24:7b:11:c5:2d:fe:fd:b5:71:7e:0a:fb: d6:bb:8f:43:b5:6b:ca:46:26:ea:7f:04:b4:cb:41: b5:ce:18:c9:3d:7e:e3:d6:30:a0:7a:de:7c:c5:71: 04:fd:89:bc:77:ed:5b:fa:f7:70:b7:cd:a6:03:f5: 8c:24:47:e7:49:ec:29:21:21:70:b2:d3:17:0f:0e: 61:75:ad:e3:07:ed:60:0a:b7:45:cb:70:04:7b:58: bb:48:0f:03:69:1e:84:7e:90:7b:01:a8:50:ea:a8: 27:4c:9e:7e:18:71:69:d8:99:10:f6:89:f7:98:ab: 05:42:b5:74:78:9e:f4:e5:93:43:f4:01:c5:3a:5d: c9:73:76:3e:68:93:79:4d:2d:51:d1:4a:c8:3a:7f: 29:cf:e6:29:55:0a:12:46:ff:0c:f8:05:71:e5:bd: 1d:bc:a1:15:26:d3:ef:45:f6:d0:4d:ae:33:38:12: 7f:ad:50:75:a9:73:d6:79:dc:99:8d:e4:20:69:86: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:01:BA:81:05:38:9A:B7:BD:15:96:EC:BE:45:12:DA:CB:2D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa64b05d-a531-372f-aae8-ab6e91bb627b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:10:a7:78:c4:a0:21:ed:67:5b:7d:18:91:0e:bb:ab:cb:6d: c6:26:ed:38:2a:ca:de:01:c2:ed:5e:b9:46:41:c2:0e:0c:c0: e7:4e:c6:32:3f:22:02:09:6a:7f:20:61:65:c1:32:79:dc:47: 05:c5:2d:18:40:f6:ff:fc:dd:09:c6:52:cb:bc:f2:d6:14:2d: 15:82:8b:e3:cb:2c:03:bc:0e:91:db:c3:ba:22:7e:95:87:a7: f7:36:3b:d6:82:5d:78:ae:38:15:cb:29:54:80:2f:ca:27:2f: 76:2a:bf:02:af:ae:b7:32:07:91:25:96:a2:f6:cf:31:21:e6: a7:19:47:fd:4c:81:e5:4f:3a:ea:90:d5:eb:da:f6:a1:82:ec: c8:b5:7f:95:86:80:da:50:93:92:43:63:be:53:be:49:85:eb: 95:b7:98:59:e3:ec:01:07:f2:3d:71:bc:e9:3f:1a:0c:7f:2f: df:a9:51:b4:a8:1c:89:a4:5a:aa:78:10:19:f2:48:a1:78:a7: fe:fb:9f:24:00:52:8b:ea:fb:10:18:6d:19:ec:41:07:82:dd: e6:ed:c5:44:b6:f1:88:b1:ad:d1:d8:4b:ba:ec:04:ec:43:81: 99:08:40:4f:f2:23:ff:ab:84:e5:cc:76:f3:46:14:aa:31:03: 97:dc:7c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmzFuc3BPFeXpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk YzdmZDJhNTItOGM4OS00YWFjLWEzMGMtMTI2ZTViY2IyZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15hbA+yvHjc3VecX5We/0mH/cTJfuElJm1pB K9BQpV8WM4UbJKtmZBgYneZkphih9eZJ6L5BkewSUVEYfRkkexHFLf79tXF+CvvW u49DtWvKRibqfwS0y0G1zhjJPX7j1jCget58xXEE/Ym8d+1b+vdwt82mA/WMJEfn SewpISFwstMXDw5hda3jB+1gCrdFy3AEe1i7SA8DaR6EfpB7AahQ6qgnTJ5+GHFp 2JkQ9on3mKsFQrV0eJ705ZND9AHFOl3Jc3Y+aJN5TS1R0UrIOn8pz+YpVQoSRv8M +AVx5b0dvKEVJtPvRfbQTa4zOBJ/rVB1qXPWedyZjeQgaYYGawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFxAbqBBTiat70Vluy+RRLayy0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWE2NGIwNWQtYTUzMS0z NzJmLWFhZTgtYWI2ZTkxYmI2MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcQp3jEoCHtZ1t9GJEOu6vLbcYm7Tgqyt4Bwu1euUZBwg4MwOdOxjI/ IgIJan8gYWXBMnncRwXFLRhA9v/83QnGUsu88tYULRWCi+PLLAO8DpHbw7oifpWH p/c2O9aCXXiuOBXLKVSAL8onL3YqvwKvrrcyB5EllqL2zzEh5qcZR/1MgeVPOuqQ 1eva9qGC7Mi1f5WGgNpQk5JDY75TvkmF65W3mFnj7AEH8j1xvOk/Ggx/L9+pUbSo HImkWqp4EBnySKF4p/77nyQAUovq+xAYbRnsQQeC3ebtxUS28YixrdHYS7rsBOxD gZkIQE/yI/+rhOXMdvNGFKoxA5fcfCc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:39:43 2025 by rpki-client