$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2257a8fe-79d9-332e-847d-13ed7e121adf.roa File: 2257a8fe-79d9-332e-847d-13ed7e121adf.roa (raw, json) Hash identifier: 8NwoBKs+5KZoYh7L77sTucV1a42h2Ix4h8oecAGFtWc= Subject key identifier: 0F:4D:18:0F:F8:CE:71:98:A1:D6:CC:76:A1:41:3C:F6:25:21:B6:8D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25FA732E241A70730D200 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2257a8fe-79d9-332e-847d-13ed7e121adf.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5f:a7:32:e2:41:a7:07:30:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=568251df-41ed-42f3-a573-75da9ae08f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:78:e2:40:04:d1:c1:19:bc:a8:52:62:6c:97: 1a:78:36:ab:42:50:e6:4e:09:46:4a:9b:15:29:37: 80:96:d4:22:c7:d8:2f:3c:97:ee:db:04:62:25:39: b0:0a:90:30:5c:67:53:7e:f4:ff:c8:7d:9c:57:fd: d1:87:4c:d6:25:6e:83:b2:3f:e8:58:6f:fa:31:9e: f9:f7:49:c1:26:8a:32:0f:88:29:7f:39:2c:be:23: 6e:f9:31:ee:a8:b4:13:d0:3d:0b:4a:f9:de:d4:e4: c1:91:8b:b8:27:64:51:1a:92:15:e4:d8:7f:0a:7e: f2:86:63:ae:ed:64:10:7f:96:24:62:f9:42:2a:dd: 27:53:5f:75:87:7f:0b:8a:fb:6d:cc:19:51:c1:16: a2:51:bb:9e:86:db:ae:63:7e:d2:4e:6c:7e:af:62: f1:a0:1c:13:03:e9:1f:3d:13:fc:0e:23:57:5d:7f: 00:44:1e:48:28:f1:4f:5a:89:0a:bc:cc:0d:39:7a: a0:cf:4a:6f:18:e0:88:0e:1e:59:1d:c8:d8:05:df: 92:d2:3f:63:82:37:46:4a:c6:8d:a0:3a:69:7f:1f: 13:c1:ad:49:bf:42:7f:da:ef:32:41:1e:a2:40:db: 98:39:87:b1:ef:ea:82:4a:4e:95:71:1b:8f:b2:ab: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4D:18:0F:F8:CE:71:98:A1:D6:CC:76:A1:41:3C:F6:25:21:B6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2257a8fe-79d9-332e-847d-13ed7e121adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3e:1d:45:8d:be:63:b6:ac:66:9e:e4:15:1b:dd:2d:39:78: d1:7e:ea:e8:25:5f:f0:a1:66:18:a5:98:ee:92:4b:19:18:f0: ed:49:1e:41:b7:a0:86:98:49:2d:26:cd:89:8c:08:b1:9a:b9: 27:dc:5e:10:9f:93:71:37:1e:41:15:58:d3:e0:3b:ac:1d:17: 33:fc:b9:22:1e:54:5a:a6:df:21:c8:71:53:dd:4e:b6:ef:75: 14:4d:b7:b7:b1:ed:2e:c5:52:8f:a8:80:a9:64:fa:bf:5b:ed: d2:7d:45:23:ab:be:d9:ad:d2:2f:04:c7:52:5f:65:95:0b:a1: a7:40:95:6e:cf:1f:06:5d:4d:6c:92:d5:7f:0f:97:e3:0f:d6: d3:99:42:d4:90:fb:d3:3c:bd:3e:7d:e5:bc:57:94:11:72:da: f5:af:1b:e6:40:96:23:30:9f:9e:58:61:1a:e2:ee:b9:c9:01: f9:03:1f:92:97:56:f2:0b:69:ad:81:b5:fe:93:b9:25:4d:67: 44:e1:64:8f:08:14:31:15:cc:34:c3:b2:7b:ee:65:7e:03:f2: f8:70:d3:a4:b6:50:63:6b:b9:fb:36:c8:45:35:73:0d:c0:05: 03:b4:a9:89:c8:59:58:2d:26:f2:a5:f9:06:06:82:66:4f:9b: 46:97:92:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl+nMuJBpwcw0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NTY4MjUxZGYtNDFlZC00MmYzLWE1NzMtNzVkYTlhZTA4ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXjiQATRwRm8qFJibJcaeDarQlDmTglGSpsV KTeAltQix9gvPJfu2wRiJTmwCpAwXGdTfvT/yH2cV/3Rh0zWJW6Dsj/oWG/6MZ75 90nBJooyD4gpfzksviNu+THuqLQT0D0LSvne1OTBkYu4J2RRGpIV5Nh/Cn7yhmOu 7WQQf5YkYvlCKt0nU191h38LivttzBlRwRaiUbuehtuuY37STmx+r2LxoBwTA+kf PRP8DiNXXX8ARB5IKPFPWokKvMwNOXqgz0pvGOCIDh5ZHcjYBd+S0j9jgjdGSsaN oDppfx8Twa1Jv0J/2u8yQR6iQNuYOYex7+qCSk6VcRuPsquw3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9NGA/4znGYodbMdqFBPPYlIbaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjI1N2E4ZmUtNzlkOS0z MzJlLTg0N2QtMTNlZDdlMTIxYWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA+HUWNvmO2rGae5BUb3S05eNF+6uglX/ChZhilmO6SSxkY8O1JHkG3 oIaYSS0mzYmMCLGauSfcXhCfk3E3HkEVWNPgO6wdFzP8uSIeVFqm3yHIcVPdTrbv dRRNt7ex7S7FUo+ogKlk+r9b7dJ9RSOrvtmt0i8Ex1JfZZULoadAlW7PHwZdTWyS 1X8Pl+MP1tOZQtSQ+9M8vT595bxXlBFy2vWvG+ZAliMwn55YYRri7rnJAfkDH5KX VvILaa2Btf6TuSVNZ0ThZI8IFDEVzDTDsnvuZX4D8vhw06S2UGNrufs2yEU1cw3A BQO0qYnIWVgtJvKl+QYGgmZPm0aXkoA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:37 2025 by rpki-client