$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa File: 401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa (raw, json) Hash identifier: Jvez6pLOpUQ46hjKNH7AkWp22smrBV8oo80TVBHNsUM= Subject key identifier: 82:94:D9:95:20:D6:6D:BD:C2:DB:40:29:29:15:30:97:4A:A2:BE:BE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849151165267415693E15E9F240 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:65:26:74:15:69:3e:15:e9:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=64bef21e-ec4a-40ce-bd87-f87ad7eb0749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:b6:cb:7a:23:c5:0b:ae:6b:62:5c:fe:b7: 23:ba:55:2a:a0:45:b4:a1:1e:90:56:1b:6f:90:8f: 60:69:e1:82:6b:3f:14:23:32:fa:53:ef:4f:90:fc: 55:1b:74:11:77:ba:92:26:0e:83:ed:9f:f4:f4:8f: 4d:40:f9:15:71:ef:99:16:7b:90:e5:3a:a1:b5:e2: c5:b8:6a:58:83:18:0b:0a:48:55:80:5a:17:2f:20: f4:14:08:66:ac:c8:2f:82:05:59:33:40:12:43:b1: 9e:10:f1:bd:0a:c2:01:f8:84:ca:c2:a4:10:0d:36: a1:36:dd:9f:5d:fd:67:41:cd:8d:d6:b0:df:01:9e: 2b:7f:42:6a:3c:2e:13:a4:20:82:1d:67:df:df:44: 1a:6d:07:77:17:4c:29:77:cf:26:36:54:3e:be:c3: b1:7c:40:1f:1a:68:16:08:43:74:b2:92:91:3a:8b: f8:5c:55:c6:69:92:5b:50:af:3a:15:32:94:a0:44: 77:67:53:6b:a2:7f:04:5e:56:62:e9:a2:5c:73:8b: 76:66:ee:06:c2:fa:05:57:a4:c3:65:2b:ff:9c:39: 39:b0:84:8c:7b:ad:f5:7a:fc:e7:3d:e5:e1:06:de: a5:43:de:22:d1:61:86:9f:83:4a:b2:45:8e:e7:7a: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:94:D9:95:20:D6:6D:BD:C2:DB:40:29:29:15:30:97:4A:A2:BE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:58:ba:e3:e9:83:c2:e9:50:14:90:58:cd:b3:4a:22:8a:c0: fa:65:7d:b9:cc:f5:be:4e:8d:b2:c5:e1:91:f3:51:a3:a9:a6: 7d:18:3a:75:ea:c6:ea:df:6d:5f:b1:2d:5d:3f:ab:7d:95:69: 7b:e6:83:25:5a:08:1b:de:1f:dd:1a:f3:e6:a6:a7:10:6a:c4: 3d:fb:d1:34:b0:f8:55:a9:45:27:1b:43:41:11:29:06:76:76: 32:a7:0f:94:56:ea:e0:bb:16:98:3b:a8:83:70:12:59:3c:19: 5c:93:e6:13:47:f5:b7:c5:42:f2:10:bb:2a:8c:92:fd:77:da: fd:53:73:7d:0d:b3:87:7f:d5:f2:d6:e8:7c:38:9b:29:cd:d7: 07:d9:16:cf:51:fc:34:84:b5:70:fe:2f:a5:23:ff:73:d4:ee: 3d:aa:58:57:ac:61:eb:e4:f3:0e:aa:f9:8d:7d:1f:6c:6e:84: 23:91:6e:c4:41:10:aa:90:d8:fc:3f:0d:30:20:d3:91:cf:54: 35:a0:71:6e:f4:27:71:d9:da:a1:0e:b3:b3:49:de:b7:36:95: 30:9f:a0:3b:ce:c5:5c:c9:8f:77:98:49:7a:81:d3:d7:3a:6d: 3f:87:75:7f:77:53:2c:d7:4d:f5:3d:79:48:60:00:f0:af:2e: 4c:d4:dd:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWUmdBVpPhXp8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk NjRiZWYyMWUtZWM0YS00MGNlLWJkODctZjg3YWQ3ZWIwNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN+2y3ojxQuua2Jc/rcjulUqoEW0oR6QVhtv kI9gaeGCaz8UIzL6U+9PkPxVG3QRd7qSJg6D7Z/09I9NQPkVce+ZFnuQ5TqhteLF uGpYgxgLCkhVgFoXLyD0FAhmrMgvggVZM0ASQ7GeEPG9CsIB+ITKwqQQDTahNt2f Xf1nQc2N1rDfAZ4rf0JqPC4TpCCCHWff30QabQd3F0wpd88mNlQ+vsOxfEAfGmgW CEN0spKROov4XFXGaZJbUK86FTKUoER3Z1Nron8EXlZi6aJcc4t2Zu4GwvoFV6TD ZSv/nDk5sISMe631evznPeXhBt6lQ94i0WGGn4NKskWO53qwgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKU2ZUg1m29wttAKSkVMJdKor6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDAxYmRmNGItMGVlZC0z MDI4LTlkOTctN2Q5MDY1ZmYwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERYuuPpg8LpUBSQWM2zSiKKwPplfbnM9b5OjbLF4ZHzUaOppn0YOnXq xurfbV+xLV0/q32VaXvmgyVaCBveH90a8+ampxBqxD370TSw+FWpRScbQ0ERKQZ2 djKnD5RW6uC7Fpg7qINwElk8GVyT5hNH9bfFQvIQuyqMkv132v1Tc30Ns4d/1fLW 6Hw4mynN1wfZFs9R/DSEtXD+L6Uj/3PU7j2qWFesYevk8w6q+Y19H2xuhCORbsRB EKqQ2Pw/DTAg05HPVDWgcW70J3HZ2qEOs7NJ3rc2lTCfoDvOxVzJj3eYSXqB09c6 bT+HdX93UyzXTfU9eUhgAPCvLkzU3T4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:35 2025 by rpki-client