$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa File: 2d4f9a49-dc28-3351-bde3-98642755927b.roa (raw, json) Hash identifier: jkR1l1AUBsFJaV6c3D/k7UOE+cowBugS+E2aV9YZQlg= Subject key identifier: D7:9C:E6:6B:69:F0:ED:8C:14:0E:F1:4D:A4:F9:96:A8:B0:EA:B4:26 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C2619DB2C61956BF31E100 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:61:9d:b2:c6:19:56:bf:31:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=9928c3b9-a3cb-4a76-814d-c085ed17604b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:e9:45:c7:15:2e:c2:5e:de:76:e5:1d:9d: 3c:b7:b1:39:ef:1b:76:99:af:25:a2:9d:99:b7:8c: e5:85:be:fc:68:e2:23:af:06:64:89:d2:e8:f7:78: 74:25:79:08:b7:bb:12:2f:80:06:ce:e7:b4:bc:ef: 38:e3:d7:30:46:9f:d2:dc:34:c5:1e:36:65:51:21: 8c:7f:90:2a:d1:90:84:51:7b:be:c0:2a:f6:a9:b4: fc:68:f3:ef:13:e8:39:2f:c6:24:11:59:cf:5b:d0: fd:1f:09:aa:92:2f:f2:ea:34:d0:77:3b:b4:af:e3: 17:60:1d:ee:2e:8e:76:4d:fa:19:03:bc:44:03:4d: 16:53:bf:74:ea:99:3a:53:e7:e1:42:7d:0d:1b:15: c2:0c:2c:99:5e:59:49:17:1c:f5:6b:f6:c0:92:79: a3:eb:c2:dd:78:9a:34:37:58:be:b7:68:78:d4:01: 88:61:ef:f4:fb:1c:9d:10:7c:8c:41:08:34:68:4a: 08:0f:a2:a4:96:b2:37:99:c6:8c:48:3e:1d:e6:12: c8:dc:2b:db:9d:d7:6a:92:c0:9e:14:1c:9d:67:1f: 9d:9d:ce:07:e7:36:63:32:20:2b:93:14:61:81:c6: 6b:42:89:88:b4:91:25:ca:4e:50:42:f0:16:df:02: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9C:E6:6B:69:F0:ED:8C:14:0E:F1:4D:A4:F9:96:A8:B0:EA:B4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6d:ae:34:2e:b8:14:d3:73:b7:44:8b:16:39:d0:b2:9b:fc: 98:35:00:cc:03:80:aa:5d:a1:b1:a1:76:bc:af:b2:8b:f4:cc: e1:50:fd:3e:1a:33:fd:6c:a2:ae:27:a0:4b:ce:b0:60:87:98: a6:df:24:fe:79:71:43:d2:04:d5:3b:1a:51:a3:b6:9c:a0:a8: 10:94:74:c7:09:77:8a:c4:fe:7c:52:9a:df:a7:37:0f:8c:95: 62:3e:07:be:2f:0c:a4:9e:7f:d2:c2:39:83:8b:d7:6d:60:b3: bd:3f:6b:2a:83:a2:71:35:8f:38:88:f6:03:7d:2e:1f:f0:3b: b8:4a:9a:eb:08:ee:7c:08:4a:6d:42:88:43:67:3e:3a:4d:d6: ca:c3:fd:6f:1a:99:cc:87:0d:ae:f9:9d:af:65:69:f4:76:8a: 55:b4:7d:5e:ee:24:26:cc:e7:8c:13:70:20:e5:48:7e:6a:db: 51:3d:51:67:96:af:1f:b7:b7:8e:76:3b:fb:2b:0c:2c:37:eb: bd:dc:a5:d8:3e:39:7c:a8:83:58:0b:b5:af:a7:94:4e:23:bc: f4:18:6d:69:40:3a:55:03:9e:74:7b:a1:b7:55:7f:d1:d0:0e: bf:38:bd:b1:cf:87:34:20:99:ac:e4:7b:9d:55:b2:68:5b:f2: 45:99:dc:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmGdssYZVr8x4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OTkyOGMzYjktYTNjYi00YTc2LTgxNGQtYzA4NWVkMTc2MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7npRccVLsJe3nblHZ08t7E57xt2ma8lop2Z t4zlhb78aOIjrwZkidLo93h0JXkIt7sSL4AGzue0vO8449cwRp/S3DTFHjZlUSGM f5Aq0ZCEUXu+wCr2qbT8aPPvE+g5L8YkEVnPW9D9Hwmqki/y6jTQdzu0r+MXYB3u Lo52TfoZA7xEA00WU7906pk6U+fhQn0NGxXCDCyZXllJFxz1a/bAknmj68LdeJo0 N1i+t2h41AGIYe/0+xydEHyMQQg0aEoID6KklrI3mcaMSD4d5hLI3CvbnddqksCe FBydZx+dnc4H5zZjMiArkxRhgcZrQomItJElyk5QQvAW3wLN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNec5mtp8O2MFA7xTaT5lqiw6rQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQ0ZjlhNDktZGMyOC0z MzUxLWJkZTMtOTg2NDI3NTU5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVtrjQuuBTTc7dEixY50LKb/Jg1AMwDgKpdobGhdryvsov0zOFQ/T4a M/1soq4noEvOsGCHmKbfJP55cUPSBNU7GlGjtpygqBCUdMcJd4rE/nxSmt+nNw+M lWI+B74vDKSef9LCOYOL121gs70/ayqDonE1jziI9gN9Lh/wO7hKmusI7nwISm1C iENnPjpN1srD/W8amcyHDa75na9lafR2ilW0fV7uJCbM54wTcCDlSH5q21E9UWeW rx+3t452O/srDCw3673cpdg+OXyog1gLta+nlE4jvPQYbWlAOlUDnnR7obdVf9HQ Dr84vbHPhzQgmazke51Vsmhb8kWZ3NE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:58:44 2025 by rpki-client