$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa File: cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa (raw, json) Hash identifier: j2Pg+DHenqZCPus5ldNnmWswyR7K5vdzJqVvaRZZv5o= Subject key identifier: 68:2B:9A:9B:04:65:14:8C:29:5A:22:82:82:95:46:3B:4D:FC:5D:94 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD5066E1AB0672DF50EAA6A80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:6e:1a:b0:67:2d:f5:0e:aa:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=cb162997-5655-45ff-967f-d9ca2b1d3098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:7f:fe:c0:f1:d4:a7:1a:4b:97:2f:9d:5e: 08:06:77:7e:bb:c1:30:7e:06:93:f9:f2:b6:02:00: f0:23:f8:14:eb:54:6b:ce:46:62:bf:0c:c3:98:9d: 10:67:40:f3:cc:20:2e:84:75:b7:26:b1:75:09:83: 50:83:42:df:86:fe:66:c2:71:11:4d:62:cc:78:3b: 33:e4:4e:9f:44:74:a2:6d:15:8d:ee:21:27:b1:79: f3:a6:95:62:21:de:da:e2:88:2f:91:74:2a:52:3c: 61:a5:c6:37:04:bd:aa:49:c8:a4:4c:b0:a7:d0:d3: da:4d:af:41:53:a7:fa:92:59:2f:74:63:5f:51:6b: 61:d5:0c:0d:94:31:4a:12:63:f9:d7:99:f2:a7:d4: 9f:31:df:fa:91:4c:34:68:66:69:49:80:a1:87:bf: a9:39:e2:4a:31:44:dc:02:1e:31:18:f9:c4:10:41: 7d:73:56:b4:2d:e2:8b:d4:be:34:50:92:ca:18:cf: 42:dd:08:cf:40:22:37:2b:18:a4:bb:bb:8a:11:fe: 36:09:0d:f3:45:7d:66:5b:54:e1:9e:00:0e:de:7c: dc:1a:17:76:90:01:69:d1:13:87:a1:5e:b7:b9:50: 43:d4:7e:bf:f8:4f:5d:56:e3:0a:1c:85:29:aa:62: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:9A:9B:04:65:14:8C:29:5A:22:82:82:95:46:3B:4D:FC:5D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:52:ea:9b:82:2b:5a:09:30:53:4a:99:fe:99:9d:d0:90:e4: 1b:37:da:de:23:a7:7d:bd:60:d5:71:6f:e3:d7:52:91:63:33: 3c:cf:19:d8:25:e0:6d:2f:5c:df:00:2f:df:05:13:38:40:63: c2:aa:b4:bd:00:db:3f:4d:0d:2f:7d:bf:c9:be:56:bd:4e:d7: d8:42:ec:31:7c:3e:ab:a4:97:a7:97:e0:42:e5:d1:36:2d:09: 5e:65:ce:f5:41:7b:03:70:0d:47:9d:94:67:52:79:55:7e:87: 51:91:36:13:bb:07:82:a6:1c:cd:40:78:16:2e:ba:49:28:c0: e9:00:d5:7c:eb:ca:b1:c8:38:70:6a:d2:9c:b8:17:a2:10:ed: 42:43:ad:c8:4e:67:16:7a:0e:70:75:ae:ab:ff:f4:ba:0e:a7: 74:48:29:ec:6c:ac:a9:bb:65:fc:6f:84:3e:68:c4:60:a7:e7: 81:b3:76:cb:a0:ef:00:21:7a:aa:05:17:1c:07:8d:b0:79:79: 2d:19:a6:d8:87:35:5e:a5:e1:92:c2:19:f4:00:39:2a:e1:7f: ea:52:80:f6:c3:76:42:7e:d4:64:3e:f4:ec:4f:e2:30:18:a8: 2a:90:5c:48:d3:73:27:d5:93:f3:e1:99:45:81:40:92:f6:66: 6f:63:24:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBm4asGct9Q6qaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk Y2IxNjI5OTctNTY1NS00NWZmLTk2N2YtZDljYTJiMWQzMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufp//sDx1KcaS5cvnV4IBnd+u8EwfgaT+fK2 AgDwI/gU61RrzkZivwzDmJ0QZ0DzzCAuhHW3JrF1CYNQg0Lfhv5mwnERTWLMeDsz 5E6fRHSibRWN7iEnsXnzppViId7a4ogvkXQqUjxhpcY3BL2qScikTLCn0NPaTa9B U6f6klkvdGNfUWth1QwNlDFKEmP515nyp9SfMd/6kUw0aGZpSYChh7+pOeJKMUTc Ah4xGPnEEEF9c1a0LeKL1L40UJLKGM9C3QjPQCI3Kxiku7uKEf42CQ3zRX1mW1Th ngAO3nzcGhd2kAFp0ROHoV63uVBD1H6/+E9dVuMKHIUpqmLcrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgrmpsEZRSMKVoigoKVRjtN/F2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2NlM2RmNzQtYjQ5NC0z ZjI0LWJiNzctYTVlZWI1ZDNlNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtS6puCK1oJMFNKmf6ZndCQ5Bs32t4jp329YNVxb+PXUpFjMzzPGdgl 4G0vXN8AL98FEzhAY8KqtL0A2z9NDS99v8m+Vr1O19hC7DF8Pqukl6eX4ELl0TYt CV5lzvVBewNwDUedlGdSeVV+h1GRNhO7B4KmHM1AeBYuukkowOkA1XzryrHIOHBq 0py4F6IQ7UJDrchOZxZ6DnB1rqv/9LoOp3RIKexsrKm7ZfxvhD5oxGCn54Gzdsug 7wAheqoFFxwHjbB5eS0ZptiHNV6l4ZLCGfQAOSrhf+pSgPbDdkJ+1GQ+9OxP4jAY qCqQXEjTcyfVk/PhmUWBQJL2Zm9jJF8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:07 2025 by rpki-client