$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6012aeb5-9650-33a3-afce-c15708c97a49.roa File: 6012aeb5-9650-33a3-afce-c15708c97a49.roa (raw, json) Hash identifier: kSVd0WYrfB+C1TpvnbedpwRwRn6eaYJKtR9UV+8VUv0= Subject key identifier: 6B:4D:E9:33:AD:3A:CB:43:7D:95:AA:FC:36:52:5B:43:51:30:E7:00 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584925B3B2E04AE541A7E0925880 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6012aeb5-9650-33a3-afce-c15708c97a49.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:b2:e0:4a:e5:41:a7:e0:92:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=bda60f41-ae93-4207-b512-3ffb461f5d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:b3:76:55:01:29:6a:2e:8c:2b:e7:d9:aa: 5f:c6:1c:da:e3:97:f6:43:0d:f7:6f:28:fd:cb:ad: dd:2d:c9:6b:fc:74:2f:f9:14:0f:3d:f8:88:a7:e8: 72:17:60:d5:f3:d8:97:18:67:de:c1:96:42:78:46: f0:59:18:5f:1e:1a:24:d3:4d:7b:06:a8:92:a7:97: 73:18:ca:72:b7:e6:dd:10:e0:32:fb:53:88:af:61: b0:2a:ef:97:59:9d:16:7e:32:23:bc:df:3f:f6:b4: 21:8c:a8:60:d0:1c:3f:c9:b8:d3:f7:b0:99:b0:58: 8c:c4:75:c6:73:36:32:73:db:39:7e:61:9c:11:48: 13:dd:3a:37:8a:01:f7:11:3f:6d:8d:d5:72:62:6f: d1:7f:a0:69:53:6b:8b:f8:3d:1c:f7:50:47:64:70: f2:fc:2b:47:d2:a6:db:cc:30:b2:88:f8:af:74:48: af:d3:c6:82:04:19:81:38:b3:18:c2:f8:d3:1e:f9: d7:89:ee:b0:f0:77:cc:0e:15:ee:9c:b1:2f:9c:4e: 53:60:4e:65:06:7b:c1:58:96:f4:7e:5e:9d:ab:4b: 30:da:41:11:1c:74:e9:83:d4:af:d4:09:12:f6:e8: 3a:ae:91:9a:d8:92:4b:3b:4a:88:ba:ce:63:2b:91: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4D:E9:33:AD:3A:CB:43:7D:95:AA:FC:36:52:5B:43:51:30:E7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6012aeb5-9650-33a3-afce-c15708c97a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c3:c9:0b:81:ee:36:0b:18:64:52:61:fb:ff:e9:85:78:19: 21:8a:31:d8:61:46:5b:a1:91:9a:62:fe:01:60:15:73:85:b5: ae:78:a1:97:d8:bd:10:49:6b:00:93:0e:fb:d5:c2:81:1b:c7: 43:39:a1:97:f7:7a:0c:d0:af:9e:35:cc:ab:48:58:7f:18:b5: e7:35:a7:78:81:e0:c9:69:56:1e:a2:9d:7d:72:a4:92:10:8b: 4f:aa:be:4c:65:ee:2c:1a:40:66:77:5f:af:f2:cd:8d:bb:cd: 43:b8:49:af:bd:58:a2:ac:5c:ae:db:b5:f2:b9:56:7e:26:90: 25:a8:e2:a4:96:bd:7d:4f:ba:8d:2f:d3:77:f3:83:f3:f2:a1: 89:39:a5:fe:00:a6:2e:af:89:2b:3a:63:2d:79:0c:0a:59:df: 8d:99:f4:cc:70:69:8e:a7:c4:44:07:00:26:c3:eb:1f:07:3f: 81:03:43:20:fa:1f:b5:e8:85:29:d3:ab:32:49:fa:fc:8a:66: 05:d1:65:48:82:06:c0:fb:86:2e:4d:42:f3:85:92:4b:68:75: c0:5e:6c:d4:18:74:71:41:ae:fe:3b:e7:fc:79:0c:cc:25:a2: fe:92:dc:b8:e9:df:52:00:e2:32:2a:ef:48:0d:16:d2:dc:bf: b9:5a:0f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls7LgSuVBp+CSWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk YmRhNjBmNDEtYWU5My00MjA3LWI1MTItM2ZmYjQ2MWY1ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4CzdlUBKWoujCvn2apfxhza45f2Qw33byj9 y63dLclr/HQv+RQPPfiIp+hyF2DV89iXGGfewZZCeEbwWRhfHhok0017BqiSp5dz GMpyt+bdEOAy+1OIr2GwKu+XWZ0WfjIjvN8/9rQhjKhg0Bw/ybjT97CZsFiMxHXG czYyc9s5fmGcEUgT3To3igH3ET9tjdVyYm/Rf6BpU2uL+D0c91BHZHDy/CtH0qbb zDCyiPivdEiv08aCBBmBOLMYwvjTHvnXie6w8HfMDhXunLEvnE5TYE5lBnvBWJb0 fl6dq0sw2kERHHTpg9Sv1AkS9ug6rpGa2JJLO0qIus5jK5FWXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtN6TOtOstDfZWq/DZSW0NRMOcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjAxMmFlYjUtOTY1MC0z M2EzLWFmY2UtYzE1NzA4Yzk3YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzMPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrDyQuB7jYLGGRSYfv/6YV4GSGKMdhhRluhkZpi/gFgFXOFta54oZfY vRBJawCTDvvVwoEbx0M5oZf3egzQr541zKtIWH8Ytec1p3iB4MlpVh6inX1ypJIQ i0+qvkxl7iwaQGZ3X6/yzY27zUO4Sa+9WKKsXK7btfK5Vn4mkCWo4qSWvX1Puo0v 03fzg/PyoYk5pf4Api6viSs6Yy15DApZ342Z9MxwaY6nxEQHACbD6x8HP4EDQyD6 H7XohSnTqzJJ+vyKZgXRZUiCBsD7hi5NQvOFkktodcBebNQYdHFBrv475/x5DMwl ov6S3Ljp31IA4jIq70gNFtLcv7laD5o= -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:27 2025 by rpki-client