$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa File: 11f726b6-96f1-3faf-8644-bdb6161ae2be.roa (raw, json) Hash identifier: ekFahdE6eH8GyWHWLuHIJCy9QKbYG/xHryK1zOcvyh4= Subject key identifier: 92:BD:CC:B9:58:64:9E:11:97:96:A9:E1:E3:02:D1:0B:5A:CB:29:6D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C264F8F14635E2D99DB680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:64:f8:f1:46:35:e2:d9:9d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=ab8fbbcc-76c5-424f-9fe1-d44a6c65ee29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:1b:d3:64:a1:7e:0c:d0:f2:66:5c:86:e1: 47:8f:4b:4e:f4:cb:58:36:e7:d7:7b:33:4a:62:92: b8:6d:58:83:0f:6a:98:6a:70:01:8a:d2:1d:82:19: a4:02:83:33:06:ca:9a:fb:09:5b:b7:92:98:16:0c: 92:89:48:86:30:27:e4:af:2f:8b:1a:5f:a6:85:3b: 5c:12:8c:53:d4:29:6f:55:a1:27:6b:2f:e8:b9:6a: 27:03:0b:75:46:7e:27:9c:3f:10:fa:b3:31:9c:eb: fe:58:5e:29:4a:67:77:05:40:bf:91:e9:49:04:53: 31:8a:b5:a6:c2:61:b2:0f:64:dd:00:ec:a3:77:b4: e5:ab:9a:d4:71:66:a9:52:66:ef:86:9a:a2:59:e2: 51:e5:1e:50:9d:54:77:71:1d:4d:ac:ab:0e:0c:da: e4:3f:fa:c6:7f:eb:77:57:00:73:70:80:3e:f3:e4: 48:e3:a1:d1:b1:a1:7d:88:e6:69:86:21:91:f6:31: 22:39:c9:e8:a6:2d:48:54:a0:b6:ba:6a:96:99:f0: 5b:c6:58:7a:d4:3d:38:42:cc:ba:84:3b:37:21:4b: 80:85:ff:b6:30:22:89:b9:d3:16:ef:54:17:6f:c1: 16:9d:c4:2f:03:0f:ac:0d:d9:f9:53:33:36:c3:c9: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BD:CC:B9:58:64:9E:11:97:96:A9:E1:E3:02:D1:0B:5A:CB:29:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6c:bc:cd:b7:49:0f:b1:42:61:ec:38:13:25:f6:78:dc:22: d4:c3:e6:2c:ba:bf:3f:42:ea:2e:53:56:01:fc:90:f9:81:b7: 65:c4:35:97:bf:e2:64:40:f4:ba:5c:ed:14:53:86:53:7f:47: fe:c1:e4:c4:f5:32:12:c6:62:6b:fe:99:f9:30:9f:f7:7e:e8: d4:0c:a2:d0:42:db:57:cb:3d:3e:4a:a9:f7:e5:50:3b:fe:a1: 96:f3:d7:f0:6e:b6:69:b7:5b:89:68:22:d9:97:fa:4e:5d:c2: de:08:d1:76:f8:ed:f4:e0:6b:ed:16:96:18:9e:81:dc:24:b2: 61:fe:05:a7:a6:da:c6:9e:c9:f5:19:a4:27:51:1a:84:9c:fc: dc:54:a9:d5:67:bc:c3:90:7f:85:f3:e7:37:f6:54:e6:e3:ac: 0b:98:33:04:33:d9:94:3b:3f:79:42:cb:11:8c:20:33:0f:d5: cc:57:83:13:6e:e3:be:5e:39:a4:1c:1b:38:79:e4:6e:86:53: e5:57:6f:cc:a0:05:09:48:da:c4:38:bd:14:ca:d6:e8:d2:0e: bc:72:89:40:42:d4:74:75:5d:de:b1:28:eb:3b:fc:e3:8d:41: e4:d8:ca:ce:0b:e7:46:9c:8c:38:e2:66:6a:60:15:68:c7:fb: 71:84:99:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmT48UY14tmdtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YWI4ZmJiY2MtNzZjNS00MjRmLTlmZTEtZDQ0YTZjNjVlZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Ab02ShfgzQ8mZchuFHj0tO9MtYNufXezNK YpK4bViDD2qYanABitIdghmkAoMzBsqa+wlbt5KYFgySiUiGMCfkry+LGl+mhTtc EoxT1ClvVaEnay/ouWonAwt1Rn4nnD8Q+rMxnOv+WF4pSmd3BUC/kelJBFMxirWm wmGyD2TdAOyjd7Tlq5rUcWapUmbvhpqiWeJR5R5QnVR3cR1NrKsODNrkP/rGf+t3 VwBzcIA+8+RI46HRsaF9iOZphiGR9jEiOcnopi1IVKC2umqWmfBbxlh61D04Qsy6 hDs3IUuAhf+2MCKJudMW71QXb8EWncQvAw+sDdn5UzM2w8mD5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK9zLlYZJ4Rl5ap4eMC0QtayyltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTFmNzI2YjYtOTZmMS0z ZmFmLTg2NDQtYmRiNjE2MWFlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZsvM23SQ+xQmHsOBMl9njcItTD5iy6vz9C6i5TVgH8kPmBt2XENZe/ 4mRA9Lpc7RRThlN/R/7B5MT1MhLGYmv+mfkwn/d+6NQMotBC21fLPT5KqfflUDv+ oZbz1/Butmm3W4loItmX+k5dwt4I0Xb47fTga+0WlhiegdwksmH+Baem2saeyfUZ pCdRGoSc/NxUqdVnvMOQf4Xz5zf2VObjrAuYMwQz2ZQ7P3lCyxGMIDMP1cxXgxNu 475eOaQcGzh55G6GU+VXb8ygBQlI2sQ4vRTK1ujSDrxyiUBC1HR1Xd6xKOs7/OON QeTYys4L50acjDjiZmpgFWjH+3GEmfw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:21:10 2025 by rpki-client