$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dc757cc-2e7c-3ecd-8132-1403dda68224.roa File: 9dc757cc-2e7c-3ecd-8132-1403dda68224.roa (raw, json) Hash identifier: 3pXSo3gUDlszdvZvsmoRKmzKXB8jfvepFmx/+8tNZVY= Subject key identifier: 4A:10:C8:21:26:4E:E7:15:AD:86:96:65:5C:FA:55:DC:75:F0:69:59 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584915116584CC3FDB66A5067180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dc757cc-2e7c-3ecd-8132-1403dda68224.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:65:84:cc:3f:db:66:a5:06:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=cfdc8587-3e66-4103-8ef6-96f6dec5041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:c4:9f:5e:d3:ce:16:7a:c7:52:c9:5d:74: 58:38:2c:ec:d8:9d:69:2d:7a:d8:ec:a6:00:42:df: aa:14:54:c7:73:71:9e:88:09:52:f3:bb:d9:16:e3: 23:d4:9a:fa:de:fb:1f:68:a1:14:bf:52:5c:8f:94: cb:51:e4:bd:05:9f:94:1c:5e:4e:03:f3:36:66:da: 8a:7e:5a:86:ad:3a:a8:8a:61:9e:f9:2f:a4:45:95: f3:d5:a7:82:3a:02:7c:f1:41:73:85:6b:2a:80:ca: 7f:1d:b5:89:cf:68:57:8f:e1:5c:a0:e6:e3:22:f5: c5:69:64:57:23:e8:93:f7:fe:02:81:88:97:b1:96: 43:d7:07:08:56:23:67:0e:9f:aa:63:17:97:2c:69: d3:c7:26:0b:bf:a6:c1:36:90:a3:ed:76:d6:04:a1: 1f:58:b2:20:61:90:86:91:39:67:c0:18:57:dc:51: 60:e2:c8:61:32:c9:e9:c6:1f:01:a4:ed:f4:7a:1c: f7:7a:25:60:ce:e8:ee:1b:ec:40:70:08:15:fb:aa: 5d:fb:bc:56:af:93:19:3e:27:68:9e:58:6d:a1:85: 4b:4d:fc:45:16:af:1f:52:f9:58:1d:31:18:0a:74: ed:79:90:94:90:b0:19:9a:73:9c:bb:63:18:ec:7f: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:10:C8:21:26:4E:E7:15:AD:86:96:65:5C:FA:55:DC:75:F0:69:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dc757cc-2e7c-3ecd-8132-1403dda68224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:38:35:09:39:09:eb:c9:b3:18:62:91:87:8b:e7:27:88:fc: 16:c3:f8:ca:55:ba:40:ac:d4:2e:6c:e9:58:77:9f:6c:6c:a8: 9d:58:a1:f7:36:1c:42:59:52:ce:d0:1e:69:5f:c8:01:13:80: 9d:94:7c:84:7a:1a:de:5c:39:28:24:d2:d1:a1:32:a3:2c:13: 4b:81:83:50:c2:1c:a7:62:12:39:75:84:c5:17:0a:6b:34:60: 64:ec:13:56:fd:98:2a:0a:4e:d3:d6:62:a8:af:97:44:e2:a1: 4b:5b:06:20:47:de:e3:cc:ad:2c:6f:e1:f3:89:10:58:ee:a8: a9:9a:35:66:d5:88:43:ab:1f:94:4c:fd:61:df:47:b3:14:19: 74:d5:c3:2d:67:6e:5a:5d:da:7d:92:d5:be:f6:fa:2a:cf:d0: 61:6d:d4:36:ee:79:9e:81:af:d1:1d:6c:c1:83:19:5a:82:cf: 4f:63:4f:d9:0d:eb:a8:ae:a2:a6:e8:ee:eb:a6:74:3d:1c:fa: bf:ad:9e:75:d6:d1:01:2f:23:68:4a:27:49:b5:d1:a8:e8:80: 9c:45:92:62:83:40:bf:5c:f4:a3:1f:9b:ba:0e:22:9d:4d:bc: f0:65:4c:71:d5:3f:5d:1f:4a:ac:70:19:73:1c:30:b2:46:e3: 32:ed:12:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWWEzD/bZqUGcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk Y2ZkYzg1ODctM2U2Ni00MTAzLThlZjYtOTZmNmRlYzUwNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKvEn17TzhZ6x1LJXXRYOCzs2J1pLXrY7KYA Qt+qFFTHc3GeiAlS87vZFuMj1Jr63vsfaKEUv1Jcj5TLUeS9BZ+UHF5OA/M2ZtqK flqGrTqoimGe+S+kRZXz1aeCOgJ88UFzhWsqgMp/HbWJz2hXj+FcoObjIvXFaWRX I+iT9/4CgYiXsZZD1wcIViNnDp+qYxeXLGnTxyYLv6bBNpCj7XbWBKEfWLIgYZCG kTlnwBhX3FFg4shhMsnpxh8BpO30ehz3eiVgzujuG+xAcAgV+6pd+7xWr5MZPido nlhtoYVLTfxFFq8fUvlYHTEYCnTteZCUkLAZmnOcu2MY7H+nWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoQyCEmTucVrYaWZVz6Vdx18GlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWRjNzU3Y2MtMmU3Yy0z ZWNkLTgxMzItMTQwM2RkYTY4MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD04NQk5CevJsxhikYeL5yeI/BbD+MpVukCs1C5s6Vh3n2xsqJ1Yofc2 HEJZUs7QHmlfyAETgJ2UfIR6Gt5cOSgk0tGhMqMsE0uBg1DCHKdiEjl1hMUXCms0 YGTsE1b9mCoKTtPWYqivl0TioUtbBiBH3uPMrSxv4fOJEFjuqKmaNWbViEOrH5RM /WHfR7MUGXTVwy1nblpd2n2S1b72+irP0GFt1DbueZ6Br9EdbMGDGVqCz09jT9kN 66iuoqbo7uumdD0c+r+tnnXW0QEvI2hKJ0m10ajogJxFkmKDQL9c9KMfm7oOIp1N vPBlTHHVP10fSqxwGXMcMLJG4zLtEsY= -----END CERTIFICATE-----Generated at Fri Apr 4 16:16:39 2025 by rpki-client