$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4690b0-26ac-35e4-a177-f503692f6599.roa File: ff4690b0-26ac-35e4-a177-f503692f6599.roa (raw, json) Hash identifier: RS43M2t05f+Ah2A+WsslZUd8kgRJ2X2lSAVCvN/jmJw= Subject key identifier: EC:56:ED:28:9C:DE:30:84:86:5A:B7:99:44:92:CE:64:A8:C3:7F:00 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849151162C86BD6AD0919D20580 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4690b0-26ac-35e4-a177-f503692f6599.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:62:c8:6b:d6:ad:09:19:d2:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=7c64c103-8963-4645-8175-22262cd6b086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:b1:38:8c:05:a4:fe:45:44:7f:be:1d:7f: 0f:49:d7:98:c2:37:8d:c5:6b:f9:79:86:66:93:3b: bb:e7:47:22:3c:c4:15:dd:82:5b:c6:33:c2:3e:33: d2:39:1a:8d:05:03:93:5f:b5:36:96:4d:63:8c:38: 2d:db:81:13:5f:2e:f1:2b:66:03:aa:f7:82:e3:cb: 69:dd:8c:ed:3e:43:f8:8e:41:50:21:b2:ae:50:68: 1d:8b:31:97:29:2d:ce:b3:68:b7:9c:d6:fa:7e:10: 76:fa:ec:ae:7e:d5:95:be:4e:f0:30:37:c5:cc:b1: d6:92:02:eb:4f:ce:02:93:b4:ae:4b:e5:d1:c2:33: b4:89:13:4f:2e:5b:78:66:99:9a:21:9d:31:2e:7d: f4:ef:8a:6d:56:e4:2a:fa:a9:75:0f:25:47:5b:25: 13:87:3c:f7:3c:d5:d4:8e:61:6c:ba:58:ab:b2:3a: eb:75:3c:87:4f:19:ab:04:ad:66:20:d8:ac:38:c7: e3:2c:26:4d:1c:c1:ad:45:84:48:f0:8b:a9:96:73: 26:51:cc:4f:d9:78:4e:30:7b:45:47:8b:1d:43:39: 1e:c0:75:90:1d:d6:48:7a:79:87:e7:90:f6:e2:a1: 59:d5:6a:5e:9b:a8:f5:ea:dd:cb:32:70:66:ff:86: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:ED:28:9C:DE:30:84:86:5A:B7:99:44:92:CE:64:A8:C3:7F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4690b0-26ac-35e4-a177-f503692f6599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:22:48:e8:ab:e5:cc:17:71:eb:d5:dd:69:3c:d0:a7:1c:c7: 18:56:bb:3e:ad:55:9a:42:9b:2f:a2:cc:ed:c1:44:20:69:f5: b1:a9:1b:10:8f:f3:d2:69:3b:a5:e6:0f:39:cd:d1:54:50:d0: cc:fb:98:1b:a2:53:32:48:27:4c:5c:cc:a4:9f:72:44:a2:c6: 2d:a6:42:73:e8:81:67:02:83:74:6c:79:02:37:6b:dc:c8:0d: 9c:88:84:b2:5e:04:d4:8f:dd:59:f1:46:80:7e:2f:40:0b:b3: b5:ce:a5:3d:ef:b0:d8:5c:29:5b:1b:8e:2c:28:23:bd:5d:ee: 75:a9:af:2a:98:66:1a:38:86:87:f7:53:32:05:96:a4:cb:3a: e6:ec:8a:a2:52:f2:95:85:07:08:fa:63:d9:8c:55:cd:97:e1: db:f5:2e:5e:73:32:53:60:24:b9:4d:48:20:b1:ca:fd:8b:60: ba:96:ea:e0:4d:92:9f:e2:31:b1:6d:8d:a8:08:7d:62:26:75: a1:82:80:a3:b9:3a:24:73:c6:da:27:07:c2:61:a0:0f:c3:89: 28:05:00:55:e9:25:04:a5:be:bd:ce:91:f4:1e:42:d2:ee:48: 64:fd:3d:22:43:e2:43:6d:ea:35:2c:e4:ba:a4:fa:76:39:c5: ab:33:9c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWLIa9atCRnSBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk N2M2NGMxMDMtODk2My00NjQ1LTgxNzUtMjIyNjJjZDZiMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfqxOIwFpP5FRH++HX8PSdeYwjeNxWv5eYZm kzu750ciPMQV3YJbxjPCPjPSORqNBQOTX7U2lk1jjDgt24ETXy7xK2YDqveC48tp 3YztPkP4jkFQIbKuUGgdizGXKS3Os2i3nNb6fhB2+uyuftWVvk7wMDfFzLHWkgLr T84Ck7SuS+XRwjO0iRNPLlt4ZpmaIZ0xLn3074ptVuQq+ql1DyVHWyUThzz3PNXU jmFsulirsjrrdTyHTxmrBK1mINisOMfjLCZNHMGtRYRI8IuplnMmUcxP2XhOMHtF R4sdQzkewHWQHdZIenmH55D24qFZ1Wpem6j16t3LMnBm/4YgMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxW7Sic3jCEhlq3mUSSzmSow38AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmY0NjkwYjAtMjZhYy0z NWU0LWExNzctZjUwMzY5MmY2NTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMiSOir5cwXcevV3Wk80KccxxhWuz6tVZpCmy+izO3BRCBp9bGpGxCP 89JpO6XmDznN0VRQ0Mz7mBuiUzJIJ0xczKSfckSixi2mQnPogWcCg3RseQI3a9zI DZyIhLJeBNSP3VnxRoB+L0ALs7XOpT3vsNhcKVsbjiwoI71d7nWpryqYZho4hof3 UzIFlqTLOubsiqJS8pWFBwj6Y9mMVc2X4dv1Ll5zMlNgJLlNSCCxyv2LYLqW6uBN kp/iMbFtjagIfWImdaGCgKO5OiRzxtonB8JhoA/DiSgFAFXpJQSlvr3OkfQeQtLu SGT9PSJD4kNt6jUs5Lqk+nY5xasznFY= -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:47 2025 by rpki-client