$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa File: 5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa (raw, json) Hash identifier: JOtMDJuLV4i5RLiU3ye+isleVxedHGHxkwrXlR8FYhs= Subject key identifier: 85:82:09:9B:46:67:B2:24:65:79:91:D0:23:56:B8:E9:1F:75:B5:41 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584915116440A3C60D0A79040D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:64:40:a3:c6:0d:0a:79:04:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=52e64729-47dc-4cdf-8cb3-38cbe1402739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:27:53:d8:84:3c:bc:f3:fa:e5:64:42:93: 24:95:d3:19:27:10:74:ae:26:b4:94:23:de:90:fe: 82:84:41:ba:12:01:4a:12:38:aa:58:6d:a2:b0:0a: ff:ac:28:fc:8e:a0:aa:cb:27:4e:b7:29:8a:95:6f: 41:fe:ae:e2:4b:ce:6b:13:72:95:65:61:24:cb:98: 61:aa:a5:09:24:0d:c7:2b:43:4f:0d:28:bd:18:53: 2b:e3:31:54:41:6d:dd:4f:19:4f:70:e9:db:fc:f4: c1:92:f2:4f:59:6f:79:93:48:e9:eb:88:3e:5e:86: 78:fe:08:c4:a8:00:72:5c:3e:b2:20:6e:67:d9:88: 04:ed:7a:1d:06:09:50:0a:0c:36:24:e4:24:9b:1d: 0c:fa:82:52:2f:8d:6b:65:d9:4d:ab:f2:9d:1f:b7: b0:6f:92:7b:87:f3:df:3f:8f:29:4f:dc:50:3c:e3: 45:bb:f9:ea:b3:f4:a2:ce:a5:a2:54:c3:d5:bb:e7: d9:9f:80:8c:03:24:7d:cf:c3:12:01:df:e7:96:c8: e7:9b:cc:82:e6:96:d3:b7:82:e2:f9:26:de:a0:31: d4:87:67:c9:27:af:03:d9:47:a3:b2:dd:1a:a8:1b: 9d:b1:e4:96:99:48:1c:1e:4e:3c:38:f5:f4:7a:2d: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:82:09:9B:46:67:B2:24:65:79:91:D0:23:56:B8:E9:1F:75:B5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fc:73:e6:b8:b4:89:df:8d:fb:24:db:71:15:24:74:28:d7: 90:78:1f:57:9c:3b:99:ab:55:62:eb:a6:ac:0a:26:30:e8:4f: 6b:38:29:61:23:0c:9f:ea:bf:67:34:5f:d9:f7:e1:7c:34:5b: 1c:18:15:d8:dc:9a:ae:15:2c:ac:52:cd:3f:ad:6a:90:cd:62: 10:84:8a:3e:d7:28:32:ea:3e:d0:34:e6:04:8d:de:be:fb:8f: 5a:46:c4:fe:f8:a5:4d:1d:b1:47:da:6c:79:5b:9e:2f:67:9e: ca:fa:2d:7c:06:89:14:b5:4a:f9:78:87:b1:be:f5:78:1d:0f: 45:5b:a0:14:6a:71:0b:bf:75:69:3d:51:16:7d:d8:2c:eb:29: f2:9d:c8:93:48:ca:7a:58:b2:0a:00:db:20:d7:3b:bb:fe:2c: cc:5a:d4:93:42:a8:f2:22:f7:b2:c9:b4:01:77:8c:4f:a6:b1: 10:30:25:12:ae:09:f3:89:27:67:b6:53:a6:8d:49:5f:da:e6: d2:93:2d:9b:3b:63:20:8d:4b:aa:1f:a8:96:58:0e:24:d6:7d: 76:7b:ea:44:40:93:e4:03:a5:f2:e5:20:e9:01:92:48:23:1b: af:78:4e:42:50:d5:ce:65:8f:27:21:b2:fb:81:9f:e6:ec:4e: d6:fc:91:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWRAo8YNCnkEDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk NTJlNjQ3MjktNDdkYy00Y2RmLThjYjMtMzhjYmUxNDAyNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLknU9iEPLzz+uVkQpMkldMZJxB0ria0lCPe kP6ChEG6EgFKEjiqWG2isAr/rCj8jqCqyydOtymKlW9B/q7iS85rE3KVZWEky5hh qqUJJA3HK0NPDSi9GFMr4zFUQW3dTxlPcOnb/PTBkvJPWW95k0jp64g+XoZ4/gjE qAByXD6yIG5n2YgE7XodBglQCgw2JOQkmx0M+oJSL41rZdlNq/KdH7ewb5J7h/Pf P48pT9xQPONFu/nqs/SizqWiVMPVu+fZn4CMAyR9z8MSAd/nlsjnm8yC5pbTt4Li +SbeoDHUh2fJJ68D2Uejst0aqBudseSWmUgcHk48OPX0ei33mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWCCZtGZ7IkZXmR0CNWuOkfdbVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTMwMWYyZWYtNjg5ZC0z YjVmLWFhZWItY2QyZDVhOGUyOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT8c+a4tInfjfsk23EVJHQo15B4H1ecO5mrVWLrpqwKJjDoT2s4KWEj DJ/qv2c0X9n34Xw0WxwYFdjcmq4VLKxSzT+tapDNYhCEij7XKDLqPtA05gSN3r77 j1pGxP74pU0dsUfabHlbni9nnsr6LXwGiRS1Svl4h7G+9XgdD0VboBRqcQu/dWk9 URZ92CzrKfKdyJNIynpYsgoA2yDXO7v+LMxa1JNCqPIi97LJtAF3jE+msRAwJRKu CfOJJ2e2U6aNSV/a5tKTLZs7YyCNS6ofqJZYDiTWfXZ76kRAk+QDpfLlIOkBkkgj G694TkJQ1c5ljychsvuBn+bsTtb8kb0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:03 2025 by rpki-client