$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa File: ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa (raw, json) Hash identifier: 3YTc7C5Hk8ZnPcuQDvO/08UswreaSOWODmEanueDpEM= Subject key identifier: 67:E4:C1:0A:70:7D:F0:27:96:3E:9F:06:1C:B2:E2:05:A4:45:A7:9C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD506691BDD33B2016B29C900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:69:1b:dd:33:b2:01:6b:29:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=210bfdd9-6547-4069-b593-c5e5891bdad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:67:ad:6b:d6:cc:0b:72:a6:27:5f:62:3d:3b: 32:f4:40:84:d9:6c:ed:e1:13:c7:80:c0:e3:1c:3c: d9:e7:e0:03:72:86:c2:c3:7a:fd:7c:c4:61:81:76: 5a:99:16:8e:c8:1a:1f:62:5d:67:60:2a:8c:38:64: d6:26:25:23:64:39:d5:52:65:be:02:77:78:1e:a8: 41:5e:58:61:12:c2:45:50:17:c8:58:17:cf:69:f6: a6:e0:00:f9:d4:10:c7:51:b5:ff:8e:c2:40:cf:04: 76:7d:a8:1a:e2:fc:e5:bf:5b:bb:17:81:19:33:d8: e2:66:21:37:14:70:f7:b0:92:13:83:f3:0a:95:e2: ad:b2:ad:74:c3:fb:36:36:81:ec:3c:ae:cc:5c:56: 5c:4a:1f:06:26:9c:40:2d:db:aa:bf:70:0a:88:72: d3:a4:64:56:73:f7:6f:a6:76:4e:d0:a6:29:41:a1: 43:6c:12:8c:2f:bc:89:85:90:a0:81:1e:9b:58:81: 22:28:14:aa:a5:22:42:18:77:37:25:0b:58:92:ca: 28:01:e7:04:e7:63:e8:5b:56:f2:a6:00:5e:53:df: e1:fa:74:45:27:f1:1b:b0:9b:ea:d2:e3:53:d8:bc: a4:92:2a:f9:a7:9b:4f:64:62:4f:4e:fe:4a:17:54: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E4:C1:0A:70:7D:F0:27:96:3E:9F:06:1C:B2:E2:05:A4:45:A7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ac7146a4-ca2d-33f0-9751-30543fdd56a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8f:86:34:12:1c:34:81:8d:10:d8:8e:38:5d:ec:16:28:99: 77:a1:31:94:ba:fa:45:9d:1d:b8:d0:ea:1e:be:27:2e:56:5a: 55:db:34:40:c6:1b:02:3e:f7:1e:91:a2:f0:5c:27:d6:2a:c2: 4f:cc:c6:2b:28:13:bd:4f:97:4c:e2:93:dc:95:1c:bc:74:5d: 62:65:f8:26:01:77:49:52:84:ab:23:8a:50:25:2e:8c:d3:9e: e5:d6:80:49:20:25:9d:bd:a2:f1:74:bc:1b:a7:e9:af:f3:f9: c8:4d:51:00:0d:42:d3:4a:11:06:ed:89:db:7f:fa:5b:a9:af: 2d:1f:29:ed:88:57:fc:2f:0c:4e:c8:33:24:d1:33:7a:0a:4b: 82:a0:1e:e2:e9:10:44:74:9f:c4:49:68:5f:65:bb:ed:f3:85: 4b:e4:5d:da:af:d5:a8:0e:b2:87:46:89:46:b8:9b:07:fa:ea: 43:08:e1:7a:d1:b6:6f:81:78:d9:88:c7:5e:ab:11:19:ca:3d: 73:3d:a9:a7:9b:2c:dd:53:95:1f:34:f0:78:3f:f4:3a:ea:88: a6:39:11:01:a2:e3:83:71:9a:51:6b:8e:f9:ed:ac:85:64:63: 0b:48:65:c1:f6:18:3c:ca:e3:33:24:e7:ff:b6:73:10:55:01: 95:d5:9a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmkb3TOyAWspyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MjEwYmZkZDktNjU0Ny00MDY5LWI1OTMtYzVlNTg5MWJkYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2eta9bMC3KmJ19iPTsy9ECE2Wzt4RPHgMDj HDzZ5+ADcobCw3r9fMRhgXZamRaOyBofYl1nYCqMOGTWJiUjZDnVUmW+And4HqhB XlhhEsJFUBfIWBfPafam4AD51BDHUbX/jsJAzwR2faga4vzlv1u7F4EZM9jiZiE3 FHD3sJITg/MKleKtsq10w/s2NoHsPK7MXFZcSh8GJpxALduqv3AKiHLTpGRWc/dv pnZO0KYpQaFDbBKML7yJhZCggR6bWIEiKBSqpSJCGHc3JQtYksooAecE52PoW1by pgBeU9/h+nRFJ/EbsJvq0uNT2Lykkir5p5tPZGJPTv5KF1QpzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfkwQpwffAnlj6fBhyy4gWkRaecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWM3MTQ2YTQtY2EyZC0z M2YwLTk3NTEtMzA1NDNmZGQ1NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmPhjQSHDSBjRDYjjhd7BYomXehMZS6+kWdHbjQ6h6+Jy5WWlXbNEDG GwI+9x6RovBcJ9Yqwk/MxisoE71Pl0zik9yVHLx0XWJl+CYBd0lShKsjilAlLozT nuXWgEkgJZ29ovF0vBun6a/z+chNUQANQtNKEQbtidt/+lupry0fKe2IV/wvDE7I MyTRM3oKS4KgHuLpEER0n8RJaF9lu+3zhUvkXdqv1agOsodGiUa4mwf66kMI4XrR tm+BeNmIx16rERnKPXM9qaebLN1TlR808Hg/9DrqiKY5EQGi44NxmlFrjvntrIVk YwtIZcH2GDzK4zMk5/+2cxBVAZXVmo0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:00 2025 by rpki-client