$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa File: 0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa (raw, json) Hash identifier: fCWYhjTW4Da5Iz9XmajIVtXAuMbqvT0DLVcM5++cCtA= Subject key identifier: 6E:DD:BD:65:C0:75:AE:51:D0:91:03:29:5E:82:CE:06:9B:B2:AB:0A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C26238BD161B1D46BA8A40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:62:38:bd:16:1b:1d:46:ba:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=777adea7-6b94-44e7-8dc6-f6bcccf6ea26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:e0:0b:48:95:f1:c2:bb:55:10:2c:c2:44: 7e:e5:f5:54:fd:4f:4c:93:b6:7e:ba:34:76:cc:e7: 56:6c:b9:a8:c2:46:8b:5b:4b:5e:e2:d4:55:47:8e: e7:14:57:8a:cd:5c:1b:39:b8:53:26:37:10:af:cc: ea:c0:e6:1e:52:26:ac:35:40:06:d2:06:7b:96:ac: 5d:de:13:c7:f8:8e:fd:9b:60:23:f0:88:06:54:41: f3:f4:0e:6b:af:b8:18:1e:7b:b2:df:1a:57:0d:e6: 41:60:74:29:c9:3b:14:61:1c:35:6b:18:03:ef:57: f7:34:8b:54:8f:20:e2:54:0c:53:f3:ef:9a:fb:c8: e8:a2:d2:15:cf:af:1d:cf:2c:74:d7:73:84:cd:54: 7f:77:f4:8b:bb:1c:18:c5:87:63:b5:9f:41:ae:9f: 0f:57:89:24:51:1a:63:aa:f5:5f:a1:58:cd:a5:8e: 12:ae:4a:74:15:b7:f0:49:db:4a:0e:bc:2f:ad:98: f9:24:c1:3f:0d:4e:24:4e:7f:aa:42:20:5e:b8:ad: 17:e3:5e:6b:25:98:95:25:86:21:79:10:57:8e:6b: c0:e4:78:05:0d:be:a2:4a:e4:ba:69:8a:72:e1:27: 44:78:e2:0d:46:1a:36:51:03:77:57:f7:15:d6:4e: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DD:BD:65:C0:75:AE:51:D0:91:03:29:5E:82:CE:06:9B:B2:AB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:67:aa:89:5a:77:11:9b:f5:7f:b2:b4:46:c1:e4:4a:d9:64: 9b:08:ba:d7:26:8e:a8:e1:43:70:96:45:60:3d:48:eb:8b:d5: 80:00:c2:ad:b6:19:f3:5c:82:03:45:68:99:10:6e:08:9f:18: c4:69:a8:c4:52:69:90:c7:b4:98:30:16:3a:98:f9:29:92:f3: 81:ad:5b:d0:34:18:3a:de:37:1d:ba:2b:4c:05:c6:27:81:8f: fd:13:d5:be:84:9d:7e:2a:c9:da:53:be:4a:a1:df:f5:bb:2a: c0:f4:4a:a0:a2:23:4d:59:97:26:eb:21:7c:d5:f7:dc:d6:58: 3e:b6:26:1a:97:09:03:a0:5f:9a:1b:fc:68:b3:65:b3:6f:68: 8e:1c:eb:44:0e:24:07:b6:79:45:61:ed:a6:b1:52:f2:f8:21: 5a:e4:a1:03:95:be:41:ab:4b:ec:0f:97:c0:cc:8d:58:81:dd: 67:53:57:3c:72:65:f1:6e:19:d8:26:6f:26:bb:61:fb:62:81: 75:e6:92:48:69:25:9f:45:20:7e:e8:af:db:6b:02:c2:82:a5: 60:a2:62:11:21:19:c2:9f:55:e8:29:de:9e:47:cc:b3:4b:ec: 2b:22:66:ee:1f:ad:a9:64:fc:bc:61:37:c9:30:2f:a7:49:31: 65:b3:9c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmI4vRYbHUa6ikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk Nzc3YWRlYTctNmI5NC00NGU3LThkYzYtZjZiY2NjZjZlYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpHgC0iV8cK7VRAswkR+5fVU/U9Mk7Z+ujR2 zOdWbLmowkaLW0te4tRVR47nFFeKzVwbObhTJjcQr8zqwOYeUiasNUAG0gZ7lqxd 3hPH+I79m2Aj8IgGVEHz9A5rr7gYHnuy3xpXDeZBYHQpyTsUYRw1axgD71f3NItU jyDiVAxT8++a+8jootIVz68dzyx013OEzVR/d/SLuxwYxYdjtZ9Brp8PV4kkURpj qvVfoVjNpY4Srkp0FbfwSdtKDrwvrZj5JME/DU4kTn+qQiBeuK0X415rJZiVJYYh eRBXjmvA5HgFDb6iSuS6aYpy4SdEeOINRho2UQN3V/cV1k5X1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7dvWXAda5R0JEDKV6CzgabsqsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGU1YjE1M2QtMTEzMC0z OGZhLWJlMTgtZGFmZWFiZDZjMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJnqoladxGb9X+ytEbB5ErZZJsIutcmjqjhQ3CWRWA9SOuL1YAAwq22 GfNcggNFaJkQbgifGMRpqMRSaZDHtJgwFjqY+SmS84GtW9A0GDreNx26K0wFxieB j/0T1b6EnX4qydpTvkqh3/W7KsD0SqCiI01ZlybrIXzV99zWWD62JhqXCQOgX5ob /GizZbNvaI4c60QOJAe2eUVh7aaxUvL4IVrkoQOVvkGrS+wPl8DMjViB3WdTVzxy ZfFuGdgmbya7YftigXXmkkhpJZ9FIH7or9trAsKCpWCiYhEhGcKfVegp3p5HzLNL 7CsiZu4fralk/LxhN8kwL6dJMWWznMA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:48 2025 by rpki-client