$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa File: ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa (raw, json) Hash identifier: HJbbczK0GpzTCObf0f5Cw1HyNGYg44KALFGxIRECcJg= Subject key identifier: 91:32:4F:59:6A:69:16:1C:6F:0E:69:1F:D8:4E:FA:3B:16:82:48:F6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066D6F64FC86FC0C8F7D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6d:6f:64:fc:86:fc:0c:8f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=d49ba4e7-2aad-4afb-808c-9583b6c6c8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:13:ab:f5:14:f0:26:36:fd:91:83:b6:1b: 83:df:3c:c7:51:d6:96:11:33:22:e4:db:a0:8e:fa: d6:ac:d4:f5:22:3c:67:0b:88:3d:37:a8:1d:7e:12: 26:78:bc:8a:9c:c6:16:e2:6d:38:f5:a7:a6:d5:99: a4:4f:6f:cc:7c:f3:77:b5:f4:2f:c7:49:2c:73:56: fb:5d:b4:b2:97:eb:90:63:f9:f2:45:47:39:69:c7: ff:9c:c7:72:26:62:e3:4b:76:64:5d:3c:27:80:f5: c4:34:86:39:30:b5:88:c1:0a:18:e6:2e:ca:f7:21: a5:8a:8c:f0:7f:78:32:e2:c5:69:88:05:70:7e:ad: d7:6a:dc:96:2c:41:ba:fa:7d:eb:8e:5d:b4:4d:fb: 7d:e1:9d:0e:26:33:23:fe:35:db:b4:a8:29:06:85: ea:d9:8d:d5:86:2d:09:f8:85:c4:36:3a:dc:78:ce: b5:51:61:ea:36:01:3d:dc:7f:b0:2e:45:94:41:b7: 27:92:5e:de:27:31:46:29:e8:ae:6e:73:36:93:0d: 0f:8a:98:73:d4:0c:9a:c2:98:df:87:86:bc:d0:3f: e8:83:7b:70:2d:97:30:a3:9f:ea:f1:c7:7d:0e:b5: 71:33:63:b7:41:1b:10:d9:75:74:bb:47:6a:74:6c: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:32:4F:59:6A:69:16:1C:6F:0E:69:1F:D8:4E:FA:3B:16:82:48:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:94:dc:0b:b5:2b:c4:61:63:f5:45:90:4c:16:51:fd:b3:38: 5e:11:27:37:79:c9:af:d8:cf:e0:28:3b:ba:b9:03:6a:6a:05: 4c:46:77:e1:e8:73:9a:b9:96:4a:3e:fe:1b:38:29:dc:47:77: 60:8b:e4:52:10:ca:da:a1:1e:11:2d:5a:9e:2e:8d:7b:0e:e9: 85:4d:3b:0e:a4:f1:43:70:06:e9:7b:fd:9b:71:34:73:aa:05: 5f:c8:9e:5e:90:f7:6b:1a:b5:78:63:b3:f3:d5:bc:07:7b:14: 8c:99:6a:d0:8d:97:4f:11:8f:0a:fc:39:d4:ad:58:ee:b4:e9: da:91:c4:17:48:7d:e0:f2:29:ae:30:12:08:f5:72:02:2a:f9: 97:89:01:be:6b:4d:db:f9:2c:d1:14:67:2a:30:cd:04:ce:64: fa:9e:9a:8a:f7:cb:8a:5c:1c:b8:25:7b:00:ef:1b:76:fb:d4: 1a:68:6b:56:b6:1f:1e:47:0d:fa:89:7d:a9:eb:5b:0a:b5:4d: 7f:f1:0d:1c:e2:50:94:1a:34:06:c3:77:bc:c6:22:c8:f3:74: 8a:81:ce:9d:2a:e8:83:18:5d:4e:52:2d:9a:19:31:07:9b:db: 7a:31:c8:1e:a5:9a:53:de:6e:51:ef:49:15:17:fa:f5:65:cd: a4:c3:62:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBm1vZPyG/AyPfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk ZDQ5YmE0ZTctMmFhZC00YWZiLTgwOGMtOTU4M2I2YzZjOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPsTq/UU8CY2/ZGDthuD3zzHUdaWETMi5Nug jvrWrNT1IjxnC4g9N6gdfhImeLyKnMYW4m049aem1ZmkT2/MfPN3tfQvx0ksc1b7 XbSyl+uQY/nyRUc5acf/nMdyJmLjS3ZkXTwngPXENIY5MLWIwQoY5i7K9yGliozw f3gy4sVpiAVwfq3XatyWLEG6+n3rjl20Tft94Z0OJjMj/jXbtKgpBoXq2Y3Vhi0J +IXENjrceM61UWHqNgE93H+wLkWUQbcnkl7eJzFGKeiubnM2kw0Piphz1Ayawpjf h4a80D/og3twLZcwo5/q8cd9DrVxM2O3QRsQ2XV0u0dqdGws2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEyT1lqaRYcbw5pH9hO+jsWgkj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2E2ZDNjOWYtOWI0Ny0z YWY4LTg2NDQtY2EyNTY4MGI4OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+U3Au1K8RhY/VFkEwWUf2zOF4RJzd5ya/Yz+AoO7q5A2pqBUxGd+Ho c5q5lko+/hs4KdxHd2CL5FIQytqhHhEtWp4ujXsO6YVNOw6k8UNwBul7/ZtxNHOq BV/Inl6Q92satXhjs/PVvAd7FIyZatCNl08Rjwr8OdStWO606dqRxBdIfeDyKa4w Egj1cgIq+ZeJAb5rTdv5LNEUZyowzQTOZPqemor3y4pcHLglewDvG3b71Bpoa1a2 Hx5HDfqJfanrWwq1TX/xDRziUJQaNAbDd7zGIsjzdIqBzp0q6IMYXU5SLZoZMQeb 23oxyB6lmlPeblHvSRUX+vVlzaTDYhA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:16 2025 by rpki-client