$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa File: 406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa (raw, json) Hash identifier: PAWjY0DopNdZlpGjTGqBAmpNUVkYQ/udri+S6jlWz80= Subject key identifier: D6:54:57:31:BB:27:EA:E2:CA:34:9C:F3:23:D1:B6:FF:F5:66:28:A9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25FCAF45E4EE5FB9F9F00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5f:ca:f4:5e:4e:e5:fb:9f:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=40e147b1-740d-4f23-879c-1589928a4766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:27:77:8b:b5:10:84:84:31:e3:33:b5:9b: 68:e2:a8:39:fe:7d:58:95:38:d8:80:6c:31:3c:ef: 33:63:07:a9:ff:db:ca:7e:24:7a:e6:bd:71:1c:0f: 62:a5:2a:94:2d:9d:fb:de:d5:36:09:60:47:76:9e: 5a:9c:16:9d:9c:64:22:33:9f:fb:1c:77:6c:10:7b: e7:c8:2a:95:e8:ce:e4:54:d6:22:07:93:d3:db:8a: 63:c1:fe:30:ef:84:ed:ff:1a:25:cb:f7:89:8b:95: bf:e7:a9:c7:8b:88:59:f1:bd:51:ed:45:de:12:2e: f3:3e:ff:c1:c2:80:29:6d:81:10:f3:d1:97:c2:35: ad:9d:0f:1f:6f:33:a0:0d:02:e1:01:33:c9:f9:dd: ad:ce:20:59:d8:2b:34:e4:24:e2:37:1a:69:ff:1a: d5:99:8f:26:1e:82:23:eb:50:0f:36:0d:50:63:e3: ff:bd:1d:31:89:c0:2f:ff:0f:9a:14:28:41:8b:fa: 99:62:d5:cf:a3:de:54:9a:be:c2:18:2b:74:ba:e3: e8:8a:ad:be:7f:97:8f:73:8e:4a:de:bb:79:78:63: ec:93:dd:50:d9:a9:40:a0:78:2c:59:79:03:dc:df: 8a:e3:d6:9f:9f:73:2e:10:70:fa:0a:28:30:20:3f: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:54:57:31:BB:27:EA:E2:CA:34:9C:F3:23:D1:B6:FF:F5:66:28:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1e:47:83:7e:17:ff:f6:c8:0d:44:12:7f:de:a1:7a:b4:01: 00:80:4d:f9:5b:9b:c3:b8:12:3d:87:d0:97:75:d7:bd:1a:a9: 0f:b5:bb:bc:e3:9c:53:6d:08:6b:83:1a:e7:d3:c0:a2:79:a2: 80:0e:b4:c7:1d:bc:3f:cf:e2:50:0a:e3:e0:2a:59:f4:4c:e6: 29:aa:f1:1b:9b:ed:5a:7d:d3:aa:db:50:fb:dd:14:67:76:19: 94:1f:b6:03:c9:97:a1:62:fd:09:4b:1e:92:04:4f:72:f3:33: 92:d2:86:4f:f2:51:6c:3e:58:9b:78:7a:7d:18:84:47:3a:06: 5c:f5:91:b4:90:66:ce:8e:20:13:c1:d6:f1:8b:b6:43:8f:2d: 08:cd:eb:3e:27:1c:73:a6:cf:12:fb:2c:64:a0:fa:7c:26:be: 41:e7:e2:ce:4d:ce:0d:01:8f:c5:7c:ff:73:a3:95:bb:d1:db: 06:9c:a2:ef:c4:6c:a6:13:8f:b0:10:7c:4d:bf:30:4e:33:07: b1:0c:e3:ce:53:69:99:de:8f:56:9b:85:23:8d:b6:a4:49:aa: 61:a0:78:be:71:f6:ce:b7:8f:13:58:bd:0a:52:4b:d4:5a:fe: 5d:b8:34:9a:34:14:2d:51:93:58:32:bd:fa:ad:f9:ce:34:d2: 05:84:98:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl/K9F5O5fufnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NDBlMTQ3YjEtNzQwZC00ZjIzLTg3OWMtMTU4OTkyOGE0NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Qnd4u1EISEMeMztZto4qg5/n1YlTjYgGwx PO8zYwep/9vKfiR65r1xHA9ipSqULZ373tU2CWBHdp5anBadnGQiM5/7HHdsEHvn yCqV6M7kVNYiB5PT24pjwf4w74Tt/xoly/eJi5W/56nHi4hZ8b1R7UXeEi7zPv/B woApbYEQ89GXwjWtnQ8fbzOgDQLhATPJ+d2tziBZ2Cs05CTiNxpp/xrVmY8mHoIj 61APNg1QY+P/vR0xicAv/w+aFChBi/qZYtXPo95Umr7CGCt0uuPoiq2+f5ePc45K 3rt5eGPsk91Q2alAoHgsWXkD3N+K49afn3MuEHD6CigwID9x5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZUVzG7J+riyjSc8yPRtv/1ZiipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDA2ZWJhMmMtYzQ5YS0z YThiLTljZTktMGFhZmEwYmVjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAeR4N+F//2yA1EEn/eoXq0AQCATflbm8O4Ej2H0Jd1170aqQ+1u7zj nFNtCGuDGufTwKJ5ooAOtMcdvD/P4lAK4+AqWfRM5imq8Rub7Vp906rbUPvdFGd2 GZQftgPJl6Fi/QlLHpIET3LzM5LShk/yUWw+WJt4en0YhEc6Blz1kbSQZs6OIBPB 1vGLtkOPLQjN6z4nHHOmzxL7LGSg+nwmvkHn4s5Nzg0Bj8V8/3OjlbvR2wacou/E bKYTj7AQfE2/ME4zB7EM485TaZnej1abhSONtqRJqmGgeL5x9s63jxNYvQpSS9Ra /l24NJo0FC1Rk1gyvfqt+c400gWEmB0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:47 2025 by rpki-client