$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa File: 996fdb20-fc5a-3408-8b85-ad4946b759e6.roa (raw, json) Hash identifier: ZhxeTc10MHAs/WGxLg19PnEeGnp/uQgBhWcippDoLYM= Subject key identifier: 44:2D:0D:D3:04:B0:99:CB:42:FE:A9:D8:37:C7:75:C9:09:6C:15:44 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584925B3B2CDDE8A805BEFFCFB80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:b2:cd:de:8a:80:5b:ef:fc:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=45653cac-6a0f-492b-ad68-7187918a3030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:7e:b1:fc:7a:28:6b:7e:a9:af:c9:2c:5e: 2a:cc:84:14:65:be:d2:58:46:8f:62:02:ac:25:d3: 07:23:da:b1:f2:5a:6e:04:40:e3:2f:b2:fa:c5:66: e4:90:06:64:70:cd:f1:72:00:d9:b1:ec:d6:c4:6f: 20:73:ab:1c:9a:d6:aa:45:20:d9:ca:80:b8:3b:e4: ca:12:e2:6f:ef:f2:67:4a:cc:2a:2d:a0:60:33:54: 00:f0:46:ed:84:c7:21:4e:e1:ac:11:0d:7d:76:58: cb:30:84:4e:9a:90:5f:ff:8b:59:55:22:d1:98:cc: ae:cf:f9:00:28:79:52:4d:f2:64:dd:3e:e4:dc:32: 4a:68:6c:16:b8:71:a5:26:c6:f8:eb:7a:54:f4:f3: bd:38:74:27:1c:cc:0e:ea:d0:ce:e9:43:04:c3:ea: 1d:52:39:1d:68:78:fa:91:de:e6:dd:26:d6:82:0c: 0c:8e:1c:55:b9:4b:fb:50:16:8a:bf:89:f5:2a:40: 92:a3:05:dd:82:db:3b:ad:59:a8:06:57:5f:5c:e1: 1c:c3:df:53:36:f6:6d:98:4b:a7:e6:f6:ee:84:31: 28:b0:6b:43:e4:e0:77:d0:b8:46:48:07:aa:35:0f: 9e:21:88:eb:1a:2d:40:e7:ee:a0:3b:c8:8c:c6:5d: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2D:0D:D3:04:B0:99:CB:42:FE:A9:D8:37:C7:75:C9:09:6C:15:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ec:f4:03:97:b0:16:a2:98:4e:84:f4:f8:d8:85:ea:b7:7c: a4:9c:bc:f2:c1:b1:ae:6a:10:cf:e8:a5:1a:d0:bb:43:a7:c2: 1c:26:5d:3c:88:47:e4:5f:86:65:94:10:b5:c5:cb:77:53:9f: 11:26:8f:c5:27:64:19:93:39:b9:48:86:41:4d:d5:dd:7e:31: a0:2d:9a:86:e6:c7:7c:18:05:04:87:e7:c1:9a:d2:d7:b4:a4: 73:a2:8f:cc:3d:e0:89:29:10:dd:cb:15:52:dd:d7:47:e1:5c: 2d:af:95:c5:2d:c6:0d:ed:82:9c:97:42:07:0c:c3:93:64:d5: 41:b5:4a:c6:d0:0e:4f:30:a9:03:d5:5c:5a:36:47:a5:5b:11: 06:6b:d0:4a:91:7d:f1:fe:5f:de:d6:40:3c:56:45:14:6a:42: 9d:ae:1a:43:ea:9f:81:c8:6c:7e:e8:98:d4:40:ec:07:23:6a: 11:e8:11:c2:88:38:99:a5:db:15:24:45:f5:49:12:b8:e0:7e: 54:01:2f:47:ee:c8:fe:b5:3a:28:21:a9:7b:e2:3a:d8:18:b7: 2b:a0:04:96:68:6b:c5:c5:4c:37:0e:9b:2c:e8:f4:8f:dd:3d: b8:dd:ab:d8:aa:b2:ce:00:5c:83:8a:30:3d:51:10:6f:41:21: 2d:81:69:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls7LN3oqAW+/8+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NDU2NTNjYWMtNmEwZi00OTJiLWFkNjgtNzE4NzkxOGEzMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+1+sfx6KGt+qa/JLF4qzIQUZb7SWEaPYgKs JdMHI9qx8lpuBEDjL7L6xWbkkAZkcM3xcgDZsezWxG8gc6scmtaqRSDZyoC4O+TK EuJv7/JnSswqLaBgM1QA8EbthMchTuGsEQ19dljLMIROmpBf/4tZVSLRmMyuz/kA KHlSTfJk3T7k3DJKaGwWuHGlJsb463pU9PO9OHQnHMwO6tDO6UMEw+odUjkdaHj6 kd7m3SbWggwMjhxVuUv7UBaKv4n1KkCSowXdgts7rVmoBldfXOEcw99TNvZtmEun 5vbuhDEosGtD5OB30LhGSAeqNQ+eIYjrGi1A5+6gO8iMxl0YDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQtDdMEsJnLQv6p2DfHdckJbBVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTk2ZmRiMjAtZmM1YS0z NDA4LThiODUtYWQ0OTQ2Yjc1OWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzMPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7s9AOXsBaimE6E9PjYheq3fKScvPLBsa5qEM/opRrQu0OnwhwmXTyI R+RfhmWUELXFy3dTnxEmj8UnZBmTOblIhkFN1d1+MaAtmobmx3wYBQSH58Ga0te0 pHOij8w94IkpEN3LFVLd10fhXC2vlcUtxg3tgpyXQgcMw5Nk1UG1SsbQDk8wqQPV XFo2R6VbEQZr0EqRffH+X97WQDxWRRRqQp2uGkPqn4HIbH7omNRA7AcjahHoEcKI OJml2xUkRfVJErjgflQBL0fuyP61OighqXviOtgYtyugBJZoa8XFTDcOmyzo9I/d Pbjdq9iqss4AXIOKMD1REG9BIS2BaX4= -----END CERTIFICATE-----Generated at Fri Mar 14 08:11:05 2025 by rpki-client