$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/01e7583a-1a91-3485-9057-18676c741104.roa File: 01e7583a-1a91-3485-9057-18676c741104.roa (raw, json) Hash identifier: d55U92V00sQk5x90e4Ab+6rT5kVOFVVvqVT6RXGQndk= Subject key identifier: 14:95:4E:2F:BE:4A:28:3B:FC:76:2C:B7:BD:D6:AF:B0:F7:9E:8D:69 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25F580159C6F21BFE3B50 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/01e7583a-1a91-3485-9057-18676c741104.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5f:58:01:59:c6:f2:1b:fe:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=b7a00ae8-4342-4326-a5d8-5e4179ff4773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:bf:05:24:63:dc:1d:e2:e2:3b:bf:24:a4: 8d:e0:d4:3a:b3:88:eb:4f:b7:f6:b1:be:6d:51:8f: 9d:2f:5a:ea:b9:ee:15:ab:f9:19:41:a4:8a:ae:92: 3b:b8:ab:90:87:7b:e6:b3:a0:0c:10:e4:2a:5d:d0: 3a:db:60:d1:76:41:9a:14:78:dc:8e:ae:52:be:d0: 90:a1:fa:0d:f3:22:b5:ac:bf:a3:88:16:c8:e1:78: a3:09:a7:0b:59:7b:5f:3f:83:a8:e4:45:e0:fd:3d: e0:1c:e8:91:33:2e:dd:51:1e:f7:56:c0:d5:29:e8: d7:8f:28:33:77:83:8f:38:84:17:b5:64:31:ce:2b: d6:64:74:1c:06:ee:b9:50:3e:81:d8:11:58:b2:1b: c8:f7:ef:20:3f:d5:32:2e:65:d2:ec:de:2e:80:4b: 57:7a:c1:95:f5:40:44:cc:6e:51:92:60:6d:f4:3f: 9e:a2:4e:d4:69:1c:f1:10:9b:fa:73:c6:c6:a0:c4: 77:bb:c9:98:79:68:b7:52:8c:ce:35:7e:9e:00:b7: 95:08:46:37:96:e3:a4:f9:ce:f4:b0:00:53:35:d1: db:b5:1d:46:32:d5:12:e0:8b:0c:5e:2f:e4:1e:e7: 25:07:24:28:65:5d:2b:eb:24:ed:8f:f1:6b:83:b7: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:95:4E:2F:BE:4A:28:3B:FC:76:2C:B7:BD:D6:AF:B0:F7:9E:8D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/01e7583a-1a91-3485-9057-18676c741104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3a:d5:75:5c:5f:e6:4a:6e:53:3f:32:15:4e:8d:f2:1a:cd: 80:66:b6:51:5b:f0:c6:5b:54:29:8a:89:61:9d:69:e9:52:8c: 79:e7:46:05:8e:06:f7:56:ba:24:c9:43:e7:b7:59:a7:03:22: 49:ee:7e:d4:0b:89:78:80:ab:1a:86:85:4c:12:8a:08:27:64: 10:98:14:26:f0:aa:2e:4d:fc:1f:20:93:27:58:38:f2:8d:4d: a0:da:cf:23:82:9c:0c:5d:93:c2:4d:51:b0:ad:6d:36:e9:4e: 40:22:99:4c:8f:bd:59:67:ba:a7:fe:02:9d:bf:b9:ee:5f:78: 48:f4:4d:19:eb:14:48:c2:f3:90:e6:43:3f:be:da:fe:1a:88: 90:6a:77:ec:0e:d2:39:00:b0:e4:c0:9e:5c:1e:c8:22:bc:d4: ff:b9:9a:2b:fe:28:fc:ab:22:94:b4:89:76:34:22:82:dd:fd: 32:46:9b:f0:7e:d7:ca:1a:e5:57:0b:c5:bf:5e:a0:f4:3b:6c: 03:e6:a8:f6:9f:1b:d8:32:40:10:88:52:bd:49:67:01:f1:75: 46:61:91:64:9a:e9:a8:5c:91:1e:3f:e5:85:50:79:aa:a5:f5: 58:ce:70:db:9c:f7:0e:d0:35:6c:4d:56:8c:e1:31:b2:5d:3e: da:ee:6a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl9YAVnG8hv+O1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YjdhMDBhZTgtNDM0Mi00MzI2LWE1ZDgtNWU0MTc5ZmY0NzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxu/BSRj3B3i4ju/JKSN4NQ6s4jrT7f2sb5t UY+dL1rque4Vq/kZQaSKrpI7uKuQh3vms6AMEOQqXdA622DRdkGaFHjcjq5SvtCQ ofoN8yK1rL+jiBbI4XijCacLWXtfP4Oo5EXg/T3gHOiRMy7dUR73VsDVKejXjygz d4OPOIQXtWQxzivWZHQcBu65UD6B2BFYshvI9+8gP9UyLmXS7N4ugEtXesGV9UBE zG5RkmBt9D+eok7UaRzxEJv6c8bGoMR3u8mYeWi3UozONX6eALeVCEY3luOk+c70 sABTNdHbtR1GMtUS4IsMXi/kHuclByQoZV0r6yTtj/Frg7fjmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSVTi++Sig7/HYst73Wr7D3no1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDFlNzU4M2EtMWE5MS0z NDg1LTkwNTctMTg2NzZjNzQxMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI61XVcX+ZKblM/MhVOjfIazYBmtlFb8MZbVCmKiWGdaelSjHnnRgWO BvdWuiTJQ+e3WacDIknuftQLiXiAqxqGhUwSiggnZBCYFCbwqi5N/B8gkydYOPKN TaDazyOCnAxdk8JNUbCtbTbpTkAimUyPvVlnuqf+Ap2/ue5feEj0TRnrFEjC85Dm Qz++2v4aiJBqd+wO0jkAsOTAnlweyCK81P+5miv+KPyrIpS0iXY0IoLd/TJGm/B+ 18oa5VcLxb9eoPQ7bAPmqPafG9gyQBCIUr1JZwHxdUZhkWSa6ahckR4/5YVQeaql 9VjOcNuc9w7QNWxNVozhMbJdPtruahc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:12 2025 by rpki-client