$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa File: a815da88-cfa8-3af3-ada0-55a72b6309b2.roa (raw, json) Hash identifier: uYaTqTdMA2AwFEiJxdezu7Tkjlkj/aB3+kP9lr88kw8= Subject key identifier: CC:4A:78:20:31:61:90:34:FD:FB:BF:75:1F:FF:1D:80:7E:41:FC:76 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849151163F063C703AD7B1E5740 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:63:f0:63:c7:03:ad:7b:1e:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=2ac0a9ad-fceb-49e0-9ab1-3717d961beee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:13:4b:49:55:46:22:96:08:c1:6f:2e:51: de:fd:80:55:5b:ed:4f:6e:07:52:e4:af:c5:49:06: 33:6f:2f:74:65:9a:a2:d3:26:4b:55:87:99:15:54: 77:ba:16:ec:11:32:a3:ad:50:fd:5d:7c:57:4d:98: c0:20:a2:48:a9:1f:5f:8f:b9:78:27:93:d8:30:88: cc:06:a4:6b:57:74:4d:39:fa:e4:83:5f:20:b5:f9: 3e:c1:25:d9:f3:ec:52:e1:c2:b8:03:84:90:56:d7: be:da:93:56:c1:ee:24:41:e7:38:2d:21:11:0c:8e: 68:a4:06:6c:75:a2:6c:c8:09:a3:df:d2:69:9f:49: 61:ec:c8:75:a4:04:30:42:d5:d5:23:29:75:e3:95: fb:d8:e3:7c:49:d3:ee:e3:f5:52:75:39:cc:ed:44: 3a:74:29:ac:27:7e:f0:67:9e:92:43:ea:53:34:ec: ff:05:38:48:dc:95:b0:d2:88:fe:f2:53:e4:44:ad: 02:b9:a2:7e:6f:88:ec:fd:68:4a:a2:f5:b4:95:37: 34:8b:ae:1f:a0:8c:d4:3d:95:ba:16:cc:da:76:f5: 9d:ce:da:db:b7:ad:2c:f0:d0:16:09:08:38:4b:a6: 07:23:4c:c6:e0:ca:e1:60:92:41:ea:ed:36:87:12: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:78:20:31:61:90:34:FD:FB:BF:75:1F:FF:1D:80:7E:41:FC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6b:da:c9:53:f7:2b:57:6a:8a:5b:da:6a:46:95:1f:43:e3: 3d:27:88:eb:a6:54:66:e2:d9:a0:fc:b1:dc:bd:fc:28:91:cf: 70:36:10:95:aa:60:cb:9f:c8:a5:ff:86:96:80:74:4e:60:4c: 44:a2:a8:6f:be:82:de:f5:51:ee:29:1b:92:a4:ac:e2:77:29: ce:d5:e5:01:dd:32:db:16:b0:16:d9:f9:5d:92:a3:e8:18:33: 64:07:b3:fd:23:28:15:ff:fd:dc:f8:8e:40:57:e0:73:b9:c0: 42:ea:c1:53:a8:a8:5c:ba:ad:83:83:9f:e5:f2:52:c4:99:44: 56:6c:83:b3:28:47:86:07:7c:3a:81:cf:d2:50:bd:e7:19:86: 2f:f5:01:27:3b:23:28:1a:97:31:0c:df:94:a7:a5:87:7b:fa: 21:3d:1f:bd:88:08:c4:d8:74:bf:3e:98:f6:a9:12:eb:48:07: cc:d3:d3:6f:0a:03:90:67:d4:bf:2b:34:36:94:8b:83:c0:02: 16:19:a0:39:18:27:a5:5b:2c:0d:da:a7:1b:39:6e:e8:c5:14: 52:96:ea:99:0f:d7:a7:c2:f3:c6:37:c5:4f:52:3a:25:f7:69: 11:00:fe:af:7e:c9:8b:da:3b:94:5e:d3:78:18:22:7d:40:86: 01:49:0f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWPwY8cDrXseV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk MmFjMGE5YWQtZmNlYi00OWUwLTlhYjEtMzcxN2Q5NjFiZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozsTS0lVRiKWCMFvLlHe/YBVW+1PbgdS5K/F SQYzby90ZZqi0yZLVYeZFVR3uhbsETKjrVD9XXxXTZjAIKJIqR9fj7l4J5PYMIjM BqRrV3RNOfrkg18gtfk+wSXZ8+xS4cK4A4SQVte+2pNWwe4kQec4LSERDI5opAZs daJsyAmj39Jpn0lh7Mh1pAQwQtXVIyl145X72ON8SdPu4/VSdTnM7UQ6dCmsJ37w Z56SQ+pTNOz/BThI3JWw0oj+8lPkRK0CuaJ+b4js/WhKovW0lTc0i64foIzUPZW6 FszadvWdztrbt60s8NAWCQg4S6YHI0zG4MrhYJJB6u02hxIYUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxKeCAxYZA0/fu/dR//HYB+Qfx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTgxNWRhODgtY2ZhOC0z YWYzLWFkYTAtNTVhNzJiNjMwOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpr2slT9ytXaopb2mpGlR9D4z0niOumVGbi2aD8sdy9/CiRz3A2EJWq YMufyKX/hpaAdE5gTESiqG++gt71Ue4pG5KkrOJ3Kc7V5QHdMtsWsBbZ+V2So+gY M2QHs/0jKBX//dz4jkBX4HO5wELqwVOoqFy6rYODn+XyUsSZRFZsg7MoR4YHfDqB z9JQvecZhi/1ASc7IygalzEM35SnpYd7+iE9H72ICMTYdL8+mPapEutIB8zT028K A5Bn1L8rNDaUi4PAAhYZoDkYJ6VbLA3apxs5bujFFFKW6pkP16fC88Y3xU9SOiX3 aREA/q9+yYvaO5Re03gYIn1AhgFJD6Y= -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:46 2025 by rpki-client