$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e36fb02-4606-3bf3-bf1b-d2d993dadc6e.roa File: 0e36fb02-4606-3bf3-bf1b-d2d993dadc6e.roa (raw, json) Hash identifier: s4z0F74R+D2BFo8D/EIE3wOjsc981j+u4HqzbWHeceg= Subject key identifier: 10:A9:9D:60:E9:DD:1F:4D:11:91:A1:3C:5C:0D:C1:E5:80:82:21:1F Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C2601768BA89F4C4DF5700 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e36fb02-4606-3bf3-bf1b-d2d993dadc6e.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:60:17:68:ba:89:f4:c4:df:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=eb5e1d1b-7868-4a21-8526-fb7aa59a76c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:57:ed:01:a8:aa:4f:96:e5:11:8d:2b:c6: 89:ee:09:42:8a:f9:63:19:86:dd:90:0a:d4:59:52: b3:8f:8a:52:9d:50:43:78:be:93:9c:af:19:ad:e8: f0:ec:9f:0d:90:93:64:1d:6f:ec:d1:77:ed:74:54: d0:cc:87:ab:80:b7:13:b5:cd:0b:60:94:9e:ff:74: 54:2b:55:24:bd:1d:be:ca:d7:0d:cd:8a:92:a1:1c: cf:a1:44:bb:ca:89:74:09:88:af:a9:1f:e0:53:79: 01:3d:d3:ab:83:ad:e4:98:8a:14:33:f9:82:fd:19: fb:1b:be:aa:d9:82:76:a0:7e:34:29:6f:fc:22:79: a6:d4:7b:b3:49:c5:67:60:78:74:b3:f6:e8:18:0c: 68:9c:6f:c2:15:21:83:94:c5:13:8b:20:43:f3:54: dc:20:16:86:38:24:67:c8:3a:23:a4:c3:66:df:99: cc:62:64:a9:6f:57:8e:13:84:d3:b5:49:0b:0e:9f: 74:4e:29:1b:6f:a5:5a:b3:27:8b:c5:21:06:74:4f: 00:fc:7a:19:55:8e:f9:3f:39:66:83:23:b9:54:54: a8:e1:dc:1f:f2:27:d2:85:dc:f0:49:3b:52:08:6d: 0e:7e:cd:1a:09:b6:92:02:75:0f:22:45:bf:3d:da: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A9:9D:60:E9:DD:1F:4D:11:91:A1:3C:5C:0D:C1:E5:80:82:21:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e36fb02-4606-3bf3-bf1b-d2d993dadc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9e:0f:72:df:d7:c9:1c:09:1b:7a:d3:b7:c6:64:dc:22:38: 87:9b:7f:20:84:ed:bf:ac:9f:6f:60:29:16:b0:d2:52:97:a7: 96:59:bd:a5:33:9c:9e:56:30:f0:e0:2c:9e:08:75:c1:96:c0: 27:8f:ad:3a:20:89:6c:5a:93:ee:6c:39:44:01:f9:df:75:15: 51:25:e7:8b:f8:b9:33:c4:a5:cd:c5:ee:2f:a3:ef:fe:c1:d6: ec:b7:c2:54:8d:fd:17:ec:e8:92:b6:e8:f7:94:1d:3a:fd:f5: 6d:b9:32:c7:40:2f:9d:69:f2:35:50:44:96:28:d4:07:65:a6: 9c:70:8e:24:0d:47:cb:63:9e:72:b4:66:18:9b:1f:90:40:ad: 5f:48:c7:8a:2b:cc:c5:d3:6b:24:f2:fd:71:4d:e8:fd:5a:89: 97:cd:58:75:ae:13:80:26:ba:b7:29:f0:e7:6d:41:fc:22:4e: 6e:db:a7:ee:87:a1:cc:69:75:42:88:e3:0d:ce:75:dc:ee:13: 5c:05:57:fc:c8:9d:39:40:06:72:f9:93:2c:92:23:61:0f:48: a3:01:33:1f:e5:8e:b1:d9:b8:f8:b7:07:60:7b:8c:ab:f6:42: b0:a6:10:87:ce:fa:91:78:e0:86:d3:a8:ed:13:01:08:07:f5: ca:e9:b3:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmAXaLqJ9MTfVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWI1ZTFkMWItNzg2OC00YTIxLTg1MjYtZmI3YWE1OWE3NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrBX7QGoqk+W5RGNK8aJ7glCivljGYbdkArU WVKzj4pSnVBDeL6TnK8Zrejw7J8NkJNkHW/s0XftdFTQzIergLcTtc0LYJSe/3RU K1UkvR2+ytcNzYqSoRzPoUS7yol0CYivqR/gU3kBPdOrg63kmIoUM/mC/Rn7G76q 2YJ2oH40KW/8Inmm1HuzScVnYHh0s/boGAxonG/CFSGDlMUTiyBD81TcIBaGOCRn yDojpMNm35nMYmSpb1eOE4TTtUkLDp90Tikbb6VasyeLxSEGdE8A/HoZVY75Pzlm gyO5VFSo4dwf8ifShdzwSTtSCG0Ofs0aCbaSAnUPIkW/Pdo8OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCpnWDp3R9NEZGhPFwNweWAgiEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGUzNmZiMDItNDYwNi0z YmYzLWJmMWItZDJkOTkzZGFkYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWeD3Lf18kcCRt607fGZNwiOIebfyCE7b+sn29gKRaw0lKXp5ZZvaUz nJ5WMPDgLJ4IdcGWwCePrTogiWxak+5sOUQB+d91FVEl54v4uTPEpc3F7i+j7/7B 1uy3wlSN/Rfs6JK26PeUHTr99W25MsdAL51p8jVQRJYo1AdlppxwjiQNR8tjnnK0 ZhibH5BArV9Ix4orzMXTayTy/XFN6P1aiZfNWHWuE4Amurcp8OdtQfwiTm7bp+6H ocxpdUKI4w3OddzuE1wFV/zInTlABnL5kyySI2EPSKMBMx/ljrHZuPi3B2B7jKv2 QrCmEIfO+pF44IbTqO0TAQgH9crps7E= -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:53 2025 by rpki-client