$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa File: be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa (raw, json) Hash identifier: 5e0NOMqRwNlGF1P7Tp4isaUkqnXKMwob99Zwyod2uRQ= Subject key identifier: 38:38:78:3A:7D:BF:6F:9B:5B:A5:B1:DC:53:51:0F:56:9E:DC:40:A8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849151160C819DE3832563618C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:60:c8:19:de:38:32:56:36:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=8fbdc646-ba69-4863-9b04-1e001db4c8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:80:8b:04:5e:32:ec:4a:0b:66:9e:f8:a9: 0b:f0:49:db:d1:08:8d:72:7a:b6:36:19:64:de:bb: d3:7e:58:41:58:e5:60:14:54:75:0a:e0:c1:12:3c: 44:83:00:63:17:97:d0:05:00:fa:ce:c7:f7:f5:7b: 78:97:68:b1:4b:ed:14:0e:94:5a:20:37:b4:52:75: 5a:58:0c:4e:8a:92:ac:e7:5f:d6:e5:be:52:07:2a: 91:e0:98:69:99:4c:91:7e:83:70:67:91:17:73:b4: 8f:b0:b9:75:33:d2:a0:0a:47:74:ee:c6:e0:ec:b9: e7:4f:7e:c6:0a:b8:22:1a:3f:13:63:44:07:2e:e0: 84:65:73:0c:bd:9a:9b:61:dc:d5:1e:97:b1:81:5d: 4d:0c:ee:38:8e:f1:5e:15:a6:a8:76:85:4e:be:7d: a6:1a:f8:8b:ec:63:36:06:50:02:b3:1b:bb:cd:42: 6e:4c:a5:20:49:b8:6a:d9:d6:ff:f5:85:1e:1a:06: 49:64:39:e7:0f:26:74:06:e8:ae:63:7a:72:95:4f: 1c:42:e6:29:f0:81:90:e1:eb:f8:8f:b5:d8:be:8e: 16:02:4f:5a:e0:42:41:be:21:0a:b2:80:6d:af:33: b8:1c:d9:87:b0:4d:97:25:63:b3:c0:ad:aa:eb:30: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:38:78:3A:7D:BF:6F:9B:5B:A5:B1:DC:53:51:0F:56:9E:DC:40:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3e:c6:d4:ea:bd:2c:4e:08:2c:85:d5:c6:54:f4:aa:df:0c: 96:77:dc:72:84:9a:53:9b:eb:08:47:cb:05:43:9b:9c:a2:c8: 1c:2b:7a:c0:31:e4:df:bf:66:ab:ce:ee:27:65:1d:fd:69:71: 0d:6e:1d:54:d8:df:c5:73:80:5c:26:ea:18:76:86:fb:4e:d0: a3:3a:f9:ce:c0:ff:9e:5f:a3:ff:11:5a:65:73:26:d0:9b:23: fd:63:4f:fa:5f:c0:26:cf:d7:66:0b:75:d1:dd:cc:76:31:de: 46:1a:9d:69:65:25:92:88:f3:62:84:14:2b:95:b6:73:ff:27: 0b:6d:88:f4:ea:7d:64:cd:6b:95:8f:2f:51:e1:b2:a1:bb:b8: 98:27:87:50:38:ab:4c:aa:9e:49:ad:80:ef:ab:e4:35:2d:9b: 04:e9:a5:c2:2f:61:9c:ea:96:c5:37:4b:86:49:96:f0:e8:f5: 6a:2f:42:cc:d0:98:43:15:a1:d1:94:3d:d5:33:a3:3c:29:d4: 88:2f:ce:ee:a9:f8:79:0e:39:48:69:8c:c2:bb:ad:41:3b:0d: 8d:0f:fe:9a:55:d9:d0:e1:44:89:48:6b:f2:a1:f0:63:d5:25: dd:42:d6:f3:de:c6:22:10:68:d4:fe:d6:6d:93:c9:79:de:5c: ac:d7:5f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWDIGd44MlY2GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk OGZiZGM2NDYtYmE2OS00ODYzLTliMDQtMWUwMDFkYjRjOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjaAiwReMuxKC2ae+KkL8Enb0QiNcnq2Nhlk 3rvTflhBWOVgFFR1CuDBEjxEgwBjF5fQBQD6zsf39Xt4l2ixS+0UDpRaIDe0UnVa WAxOipKs51/W5b5SByqR4JhpmUyRfoNwZ5EXc7SPsLl1M9KgCkd07sbg7LnnT37G CrgiGj8TY0QHLuCEZXMMvZqbYdzVHpexgV1NDO44jvFeFaaodoVOvn2mGviL7GM2 BlACsxu7zUJuTKUgSbhq2db/9YUeGgZJZDnnDyZ0BuiuY3pylU8cQuYp8IGQ4ev4 j7XYvo4WAk9a4EJBviEKsoBtrzO4HNmHsE2XJWOzwK2q6zC6/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg4eDp9v2+bW6Wx3FNRD1ae3ECoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmU0YjRiYmUtN2Q5NS0z ZDdmLWI5YzQtM2RiOWY1Y2NkZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8+xtTqvSxOCCyF1cZU9KrfDJZ33HKEmlOb6whHywVDm5yiyBwresAx 5N+/ZqvO7idlHf1pcQ1uHVTY38VzgFwm6hh2hvtO0KM6+c7A/55fo/8RWmVzJtCb I/1jT/pfwCbP12YLddHdzHYx3kYanWllJZKI82KEFCuVtnP/JwttiPTqfWTNa5WP L1HhsqG7uJgnh1A4q0yqnkmtgO+r5DUtmwTppcIvYZzqlsU3S4ZJlvDo9WovQszQ mEMVodGUPdUzozwp1Igvzu6p+HkOOUhpjMK7rUE7DY0P/ppV2dDhRIlIa/Kh8GPV Jd1C1vPexiIQaNT+1m2TyXneXKzXX4A= -----END CERTIFICATE-----Generated at Fri Mar 14 13:14:53 2025 by rpki-client