$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa File: df42286e-2fdc-3a52-b829-aa91fec9017a.roa (raw, json) Hash identifier: v1KyD4eY9FwRy9v9oiuc17XbX0rdl4iOf4Hbevm9Ujc= Subject key identifier: 34:72:77:54:4A:DA:83:4F:77:83:A3:05:32:8E:44:8B:A3:1A:97:3F Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AD50669DCE2A2BF4A81BD2180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 13335 IP address blocks: 204.195.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:69:dc:e2:a2:bf:4a:81:bd:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=c7a31f70-4448-4a8a-9c61-dfb3d4195acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:5c:f8:94:16:bf:65:27:91:fc:30:02:8c: 60:55:21:dd:c0:e6:57:91:fc:d9:4a:43:8d:b2:dd: 73:e9:f5:21:cb:56:83:87:00:19:fd:e1:a5:6e:89: 45:1c:a1:f4:d9:a3:19:95:07:b6:69:0d:bc:c2:20: 2d:4b:39:eb:fc:fb:ce:4a:6c:86:05:61:8b:e8:16: 77:6a:cb:95:a8:80:05:5b:5f:38:d7:1b:81:52:8e: 1e:87:7b:67:d1:e3:2e:3c:e0:76:8f:f6:91:89:5b: ee:54:46:ea:fe:50:c4:32:4f:3b:e7:21:7c:99:bf: 19:80:ab:64:f1:46:72:b3:ec:56:e4:01:ed:b7:41: 3d:39:e0:cb:7f:a9:38:40:4e:e9:9e:de:04:77:a7: 7c:12:f7:76:d7:71:11:d5:e4:cb:f0:65:26:3c:f4: f7:80:28:b5:18:5d:22:36:eb:4f:67:b9:ac:a7:75: d9:de:62:d9:f6:d0:85:40:b6:8e:15:cb:09:4e:6d: d0:62:45:7d:b6:dd:bb:d2:23:c0:de:25:83:c5:01: 0f:20:20:93:31:60:fd:1d:9a:ca:7e:7c:ea:57:b5: 39:92:c9:26:c8:46:d2:6c:9f:fe:29:4d:b2:c6:c3: cf:33:27:de:32:e3:33:f2:9b:56:de:32:4a:24:2e: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:77:54:4A:DA:83:4F:77:83:A3:05:32:8E:44:8B:A3:1A:97:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d1:53:49:81:58:2a:30:2c:b9:c3:16:98:d0:93:e9:47:8d: 70:fb:4a:6d:41:a9:be:ba:3b:dd:d3:10:a8:d2:21:f7:22:2c: 33:b4:e9:8a:f1:3b:e7:ed:62:2b:79:e6:4b:af:b9:60:63:8c: c5:c2:21:10:a9:fb:ef:f5:5d:e8:6d:86:c1:8a:b9:89:0b:c0: 4a:5e:7f:5d:22:ec:bd:61:65:a7:6b:32:9e:89:95:58:fe:85: 8a:4a:90:f3:c1:20:21:e4:10:1e:30:5f:38:61:e2:6e:2e:62: 68:60:9d:b8:02:0b:91:e1:06:bd:14:89:43:a2:b2:30:cd:b6: 71:a8:3e:91:a7:23:75:63:ad:ca:e8:39:75:8a:70:0e:81:75: a0:d8:f6:4a:10:d1:21:af:65:6a:65:ab:a0:1e:27:66:66:6e: e0:1a:74:97:0c:3b:92:91:6d:49:8b:82:6b:75:39:e7:f1:02: b5:c4:ad:28:d5:1a:8c:45:e8:c7:2c:f0:91:14:77:bd:1a:88: e1:50:4e:ac:46:8e:bb:f0:09:f0:89:86:87:9d:2f:f6:28:68: dd:04:85:bd:61:d9:c6:41:5c:af:77:32:5e:f0:59:2a:1d:d4: 18:ad:8c:04:76:d3:2b:19:28:5e:0e:da:43:a2:60:fa:6d:8f: 4d:c6:e9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmnc4qK/SoG9IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk YzdhMzFmNzAtNDQ0OC00YThhLTljNjEtZGZiM2Q0MTk1YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6pc+JQWv2UnkfwwAoxgVSHdwOZXkfzZSkON st1z6fUhy1aDhwAZ/eGlbolFHKH02aMZlQe2aQ28wiAtSznr/PvOSmyGBWGL6BZ3 asuVqIAFW1841xuBUo4eh3tn0eMuPOB2j/aRiVvuVEbq/lDEMk875yF8mb8ZgKtk 8UZys+xW5AHtt0E9OeDLf6k4QE7pnt4Ed6d8Evd213ER1eTL8GUmPPT3gCi1GF0i NutPZ7msp3XZ3mLZ9tCFQLaOFcsJTm3QYkV9tt270iPA3iWDxQEPICCTMWD9HZrK fnzqV7U5kskmyEbSbJ/+KU2yxsPPMyfeMuMz8ptW3jJKJC6IgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRyd1RK2oNPd4OjBTKORIujGpc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGY0MjI4NmUtMmZkYy0z YTUyLWI4MjktYWE5MWZlYzkwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDRU0mBWCowLLnDFpjQk+lHjXD7Sm1Bqb66O93TEKjSIfciLDO06Yrx O+ftYit55kuvuWBjjMXCIRCp++/1XehthsGKuYkLwEpef10i7L1hZadrMp6JlVj+ hYpKkPPBICHkEB4wXzhh4m4uYmhgnbgCC5HhBr0UiUOisjDNtnGoPpGnI3Vjrcro OXWKcA6BdaDY9koQ0SGvZWplq6AeJ2ZmbuAadJcMO5KRbUmLgmt1OefxArXErSjV GoxF6Mcs8JEUd70aiOFQTqxGjrvwCfCJhoedL/YoaN0Ehb1h2cZBXK93Ml7wWSod 1BitjAR20ysZKF4O2kOiYPptj03G6R8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:48 2025 by rpki-client