$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa File: 401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa (raw, json) Hash identifier: vgvgzmFO2q+MS005Ec14WvdDdC/npI10bnvNm8eNhn8= Subject key identifier: 6C:F4:1C:71:91:2C:76:70:C5:F9:56:A9:2D:C4:5F:F2:64:D0:37:FB Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C262C755FDEF82B1D8D400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:62:c7:55:fd:ef:82:b1:d8:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=02afc73f-0e18-49ad-8762-c2e359d10281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:52:cb:77:83:19:9b:41:3a:3b:bc:d9:48: b6:2d:37:a7:d0:81:1a:a6:90:0b:ae:62:c9:fc:c9: ab:6f:64:1f:bb:98:0a:94:04:68:0d:ab:fd:4b:db: b2:6a:2e:47:14:b9:a0:9c:24:f7:d6:23:96:f8:ae: 58:cf:43:31:e2:30:49:cb:ce:c0:60:a0:e0:82:27: 42:69:22:03:81:43:f3:52:b0:a7:97:ae:7f:88:0f: 12:f2:ec:3d:0b:3e:6b:60:0e:83:42:cc:c9:30:b0: 43:e4:04:22:40:39:5a:b5:6c:09:7b:78:b8:f9:89: c5:a4:c0:70:c5:a9:1f:9f:bf:f0:40:4f:60:86:e1: e8:f7:4f:41:64:1e:fc:0a:dc:be:57:85:45:99:d3: 26:38:fd:f8:de:d7:10:99:8b:01:31:0b:12:1a:1d: 91:0e:8e:a7:54:58:0b:c9:db:06:6b:52:03:ab:23: 14:6d:56:fa:1e:8f:44:91:bf:ae:a8:f8:64:18:78: 56:c0:fd:ab:89:91:16:98:7c:a5:5f:1e:b7:3e:40: 73:05:c7:02:85:ae:b0:cc:67:78:05:72:31:97:06: 8a:61:db:3b:a1:40:d0:8a:0a:d7:4b:12:cf:e4:f4: 58:56:e4:39:79:e7:f8:2c:5f:b4:d3:a7:d8:5c:70: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F4:1C:71:91:2C:76:70:C5:F9:56:A9:2D:C4:5F:F2:64:D0:37:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6b:a5:9f:0a:d4:e9:13:d8:e7:f5:aa:22:48:f9:b2:bb:a3: bc:02:7f:de:fe:e8:05:ac:c9:3b:ea:c8:e6:19:d5:5a:63:cc: 19:ed:e7:30:ef:9e:3c:19:17:29:54:59:29:f3:58:2b:bc:6b: 2e:cc:be:f7:b1:6b:3c:2c:8f:17:3b:3b:c3:9b:d9:26:c0:b2: dc:77:62:2f:18:5c:0b:cf:5c:af:39:54:e1:a2:5b:55:28:d8: ec:42:05:b8:d6:45:7f:79:7c:5d:f0:e7:39:1f:f4:a4:06:e9: 47:51:05:3b:b2:08:54:e5:7d:47:45:df:f9:df:64:41:db:b3: 2a:08:ab:a0:18:1f:3b:7e:2a:4c:b2:70:5d:42:c0:48:75:2d: 6d:b3:0c:9c:64:4f:0e:64:1f:0f:f5:e4:9b:9f:f6:01:a4:37: 64:fc:55:6b:df:a3:9b:a3:5e:63:32:30:d5:3f:1c:d1:40:85: c0:44:8e:21:3d:f6:db:03:89:35:a0:1c:c3:a3:09:05:ac:c4: 9b:1f:5a:dc:d5:46:18:37:06:53:a0:ce:ba:c1:d6:cd:43:ec: 4a:ff:36:41:2d:71:10:8b:c7:89:a8:d0:4b:cc:f4:41:53:e2: 81:df:b6:65:26:d4:21:18:28:d5:27:df:86:33:68:a9:c9:c9: bf:f1:0d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmLHVf3vgrHY1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MDJhZmM3M2YtMGUxOC00OWFkLTg3NjItYzJlMzU5ZDEwMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn9Sy3eDGZtBOju82Ui2LTen0IEappALrmLJ /Mmrb2Qfu5gKlARoDav9S9uyai5HFLmgnCT31iOW+K5Yz0Mx4jBJy87AYKDggidC aSIDgUPzUrCnl65/iA8S8uw9Cz5rYA6DQszJMLBD5AQiQDlatWwJe3i4+YnFpMBw xakfn7/wQE9ghuHo909BZB78Cty+V4VFmdMmOP343tcQmYsBMQsSGh2RDo6nVFgL ydsGa1IDqyMUbVb6Ho9Ekb+uqPhkGHhWwP2riZEWmHylXx63PkBzBccCha6wzGd4 BXIxlwaKYds7oUDQigrXSxLP5PRYVuQ5eef4LF+006fYXHCd7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz0HHGRLHZwxflWqS3EX/Jk0Df7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDAxYmRmNGItMGVlZC0z MDI4LTlkOTctN2Q5MDY1ZmYwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJrpZ8K1OkT2Of1qiJI+bK7o7wCf97+6AWsyTvqyOYZ1VpjzBnt5zDv njwZFylUWSnzWCu8ay7Mvvexazwsjxc7O8Ob2SbAstx3Yi8YXAvPXK85VOGiW1Uo 2OxCBbjWRX95fF3w5zkf9KQG6UdRBTuyCFTlfUdF3/nfZEHbsyoIq6AYHzt+Kkyy cF1CwEh1LW2zDJxkTw5kHw/15Juf9gGkN2T8VWvfo5ujXmMyMNU/HNFAhcBEjiE9 9tsDiTWgHMOjCQWsxJsfWtzVRhg3BlOgzrrB1s1D7Er/NkEtcRCLx4mo0EvM9EFT 4oHftmUm1CEYKNUn34YzaKnJyb/xDeI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:14:08 2025 by rpki-client