$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac3a68d8-4273-35ba-a641-561213862682.roa File: ac3a68d8-4273-35ba-a641-561213862682.roa (raw, json) Hash identifier: pCryeMlySUdbjIQRL6Kg1U7YQt7Q+e8+eeWflA55l9U= Subject key identifier: 10:34:9A:98:92:DA:C4:80:77:68:8F:D2:DA:48:C7:A4:C9:CF:7E:FE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066CEDCCAB459ADF3DA968 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac3a68d8-4273-35ba-a641-561213862682.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6c:ed:cc:ab:45:9a:df:3d:a9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=b78e9118-ddc2-471d-8e85-5d1ff1beba3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:42:12:a4:0f:f0:c0:83:e8:04:87:4c:57:72: 95:1d:5a:4b:b0:05:be:c1:bb:af:ae:33:7b:10:e5: eb:6c:0f:72:11:b2:6d:2c:a1:18:fd:ae:e9:cf:c4: 75:c2:0f:e4:38:25:14:6e:0d:c5:f4:12:06:fa:8f: 80:9b:79:72:8f:ee:e5:ca:3c:8c:e1:5d:a6:39:ef: a9:3a:56:a5:bd:46:11:c3:f7:41:33:fa:93:db:91: 4b:45:7e:1a:53:4c:00:57:b0:bb:72:e8:7d:5f:d8: 87:3b:94:0b:a0:00:fa:4b:43:48:e9:ab:eb:68:c8: f6:5d:dc:18:39:4c:a8:42:a1:1a:c7:d9:f9:8f:c0: bd:cc:62:4b:4c:78:84:c7:79:bf:c3:7d:a0:60:3e: 06:59:f7:07:5c:d4:f1:70:e0:fc:a5:a2:49:1b:1c: c0:9c:f6:db:f4:d8:86:44:88:8d:ae:ed:98:44:27: 3e:d8:44:55:7d:58:63:77:f3:9f:84:64:a7:e2:de: 84:45:8d:0f:18:a1:3d:5b:bc:eb:9e:34:de:b5:87: 8c:13:9a:59:55:45:f2:46:e3:53:5e:2c:ae:cc:18: 19:b8:eb:db:a9:4a:33:05:92:e2:cf:92:3d:91:6a: ac:eb:1c:4c:37:ce:e7:0d:06:8f:74:39:4f:49:75: 97:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:9A:98:92:DA:C4:80:77:68:8F:D2:DA:48:C7:A4:C9:CF:7E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac3a68d8-4273-35ba-a641-561213862682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1c:12:da:16:8b:16:27:33:7f:42:8c:37:05:09:0c:ad:b7: 92:19:93:c9:d8:a2:49:20:1e:9b:b0:54:35:60:78:7a:8f:8a: 18:23:70:5b:4b:b9:49:d4:ca:f9:29:65:03:5f:8e:fe:08:51: a9:77:93:34:ba:f7:00:05:1f:7d:d6:f7:69:71:5a:84:5d:cc: 0d:e3:61:45:46:ba:47:33:75:81:b5:3f:ba:26:76:50:a9:e2: 4c:a2:90:b9:3c:e3:5c:1b:f0:9c:5e:ad:94:ae:1c:0e:cb:24: 07:7b:aa:72:df:3b:dd:40:37:e5:e4:4c:a6:80:8d:25:7c:16: 2c:ae:25:50:e4:39:1e:3a:e1:b2:00:b1:2f:9f:31:f7:33:92: b9:9f:45:e2:4b:7b:49:69:33:61:0e:49:b1:84:5c:e6:fa:f3: 71:77:ed:4d:2d:33:e7:bd:38:e6:73:61:cc:6a:34:fe:76:27: 55:d0:f8:98:9c:f6:ab:ba:9c:c3:bc:56:17:a7:94:35:97:68: f3:34:b8:5f:06:81:e5:31:d0:9c:b4:26:93:5e:7b:d8:9b:cf: a0:8e:71:1f:02:1d:94:bb:01:38:64:60:fb:91:54:c6:7f:98: 00:f1:e4:c3:f4:89:b0:79:52:36:af:47:94:5c:e1:16:65:fe: c3:49:cd:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmztzKtFmt89qWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk Yjc4ZTkxMTgtZGRjMi00NzFkLThlODUtNWQxZmYxYmViYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ISpA/wwIPoBIdMV3KVHVpLsAW+wbuvrjN7 EOXrbA9yEbJtLKEY/a7pz8R1wg/kOCUUbg3F9BIG+o+Am3lyj+7lyjyM4V2mOe+p OlalvUYRw/dBM/qT25FLRX4aU0wAV7C7cuh9X9iHO5QLoAD6S0NI6avraMj2XdwY OUyoQqEax9n5j8C9zGJLTHiEx3m/w32gYD4GWfcHXNTxcOD8paJJGxzAnPbb9NiG RIiNru2YRCc+2ERVfVhjd/OfhGSn4t6ERY0PGKE9W7zrnjTetYeME5pZVUXyRuNT XiyuzBgZuOvbqUozBZLiz5I9kWqs6xxMN87nDQaPdDlPSXWXRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA0mpiS2sSAd2iP0tpIx6TJz37+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWMzYTY4ZDgtNDI3My0z NWJhLWE2NDEtNTYxMjEzODYyNjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQcEtoWixYnM39CjDcFCQytt5IZk8nYokkgHpuwVDVgeHqPihgjcFtL uUnUyvkpZQNfjv4IUal3kzS69wAFH33W92lxWoRdzA3jYUVGukczdYG1P7omdlCp 4kyikLk841wb8JxerZSuHA7LJAd7qnLfO91AN+XkTKaAjSV8FiyuJVDkOR464bIA sS+fMfczkrmfReJLe0lpM2EOSbGEXOb683F37U0tM+e9OOZzYcxqNP52J1XQ+Jic 9qu6nMO8VhenlDWXaPM0uF8GgeUx0Jy0JpNee9ibz6COcR8CHZS7AThkYPuRVMZ/ mADx5MP0ibB5UjavR5Rc4RZl/sNJzdk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:51:50 2025 by rpki-client