$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa File: 32dde319-0457-358d-a7bd-2a910a0b3183.roa (raw, json) Hash identifier: ZvzbO5LhBkipOr7BAzOMHWcFyqugePtoi46FtkJd9U4= Subject key identifier: 43:32:7C:9C:F4:74:18:06:42:DA:CF:4A:EC:C0:DC:F3:E8:6C:28:D3 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C265818737E7E339B6D860 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:65:81:87:37:e7:e3:39:b6:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=f2a68b11-cd3c-477d-bfc7-56728d89333c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:f7:19:88:e6:17:5f:08:9b:13:78:af:84: d7:72:9d:ea:bf:ea:16:37:bc:cd:0c:f7:89:3f:ae: 1d:56:93:b7:7e:77:29:1e:0a:9c:bb:09:45:f2:db: 6a:54:de:98:2b:01:10:13:14:11:18:19:f4:92:45: 5d:ec:cc:4c:2a:cb:6b:9f:26:7e:19:53:f1:da:45: a3:41:1e:a1:ed:ba:28:9e:49:ed:18:51:b2:68:80: c4:67:92:52:62:92:cc:b3:9a:75:4d:f7:a4:46:f3: 93:73:9f:cd:36:3a:42:9d:b0:4a:fd:f1:fe:fb:42: 99:7e:41:79:04:16:0f:f2:0e:ea:68:03:43:b4:da: 39:af:4f:3b:32:fc:6e:28:c0:7e:fe:d3:26:22:a2: 5c:f5:7f:85:d7:cd:cc:9f:84:42:06:35:8c:43:20: f8:b0:a8:0f:84:1c:58:8c:9d:bc:23:96:ff:4f:3a: 32:39:2d:01:0f:15:8f:f2:a8:fe:d3:b9:5a:ba:bb: ca:39:6a:74:0b:56:ab:5a:7f:58:a5:c7:10:72:ed: 4b:f1:fa:6e:35:fe:e4:8b:7a:bb:a3:2b:60:63:6a: 54:31:77:3a:64:a6:69:01:b6:23:74:67:b2:f0:60: 42:61:66:b4:5b:13:f7:27:75:a5:6c:7b:ae:33:52: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:7C:9C:F4:74:18:06:42:DA:CF:4A:EC:C0:DC:F3:E8:6C:28:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e5:ad:57:3e:22:c0:6b:ea:0e:3b:c8:27:5b:c5:83:ce:85: 54:6f:e9:a4:5f:50:5e:9d:ab:3c:0c:9c:d8:f5:6d:54:11:f9: d2:14:cc:8a:c4:a7:6b:b0:83:59:ec:16:ed:29:bf:45:60:9a: 7d:3d:8d:2f:53:76:06:e3:67:49:27:c7:8b:ce:72:bd:d8:94: b3:47:03:2f:84:56:66:ce:b9:70:57:8c:3d:49:c2:36:84:70: 2a:6f:3d:8f:db:e1:4a:6a:52:15:c4:5a:2b:9c:bc:51:16:5a: c6:84:ab:44:6d:98:69:c4:2e:8a:22:b9:66:9a:2c:6b:2f:8a: ea:38:79:9c:d2:b8:6e:f4:76:dc:97:eb:27:9b:75:d0:c3:99: ac:96:67:b7:39:ba:3c:76:6f:1e:c3:34:f8:c7:dc:3a:9a:3e: e1:3f:36:80:9e:ea:ea:f2:21:f3:8f:5d:8e:5f:5a:12:40:60: 6d:fd:4e:c7:ab:90:2e:c7:9d:b0:7d:47:01:6f:4f:01:e8:57: 95:19:7c:8d:d3:05:69:65:16:a6:4f:8d:d7:4b:a9:d3:76:fd: 8a:9f:c6:3b:3d:68:09:0a:9a:b5:a6:3c:f8:ee:65:f6:94:cb: 7d:a6:30:e0:13:c9:cc:8b:92:58:63:05:55:9d:cb:47:a1:5d: 6b:cb:a9:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmWBhzfn4zm22GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjJhNjhiMTEtY2QzYy00NzdkLWJmYzctNTY3MjhkODkzMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDf3GYjmF18ImxN4r4TXcp3qv+oWN7zNDPeJ P64dVpO3fncpHgqcuwlF8ttqVN6YKwEQExQRGBn0kkVd7MxMKstrnyZ+GVPx2kWj QR6h7boonkntGFGyaIDEZ5JSYpLMs5p1TfekRvOTc5/NNjpCnbBK/fH++0KZfkF5 BBYP8g7qaANDtNo5r087MvxuKMB+/tMmIqJc9X+F183Mn4RCBjWMQyD4sKgPhBxY jJ28I5b/TzoyOS0BDxWP8qj+07laurvKOWp0C1arWn9YpccQcu1L8fpuNf7ki3q7 oytgY2pUMXc6ZKZpAbYjdGey8GBCYWa0WxP3J3WlbHuuM1JlFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMyfJz0dBgGQtrPSuzA3PPobCjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzJkZGUzMTktMDQ1Ny0z NThkLWE3YmQtMmE5MTBhMGIzMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXlrVc+IsBr6g47yCdbxYPOhVRv6aRfUF6dqzwMnNj1bVQR+dIUzIrE p2uwg1nsFu0pv0Vgmn09jS9TdgbjZ0knx4vOcr3YlLNHAy+EVmbOuXBXjD1JwjaE cCpvPY/b4UpqUhXEWiucvFEWWsaEq0RtmGnELooiuWaaLGsviuo4eZzSuG70dtyX 6yebddDDmayWZ7c5ujx2bx7DNPjH3DqaPuE/NoCe6uryIfOPXY5fWhJAYG39Tser kC7HnbB9RwFvTwHoV5UZfI3TBWllFqZPjddLqdN2/Yqfxjs9aAkKmrWmPPjuZfaU y32mMOATycyLklhjBVWdy0ehXWvLqXk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:19:18 2025 by rpki-client