$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa File: 43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa (raw, json) Hash identifier: 5bsuVdPOJPBKJxKhErfosnPq9kCkIpDWot4x6Yb4ofY= Subject key identifier: 97:1F:28:9A:AC:C6:E6:70:65:5A:25:08:BC:8D:C3:70:70:4B:AC:BB Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C265A91BC088F21543A2C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:65:a9:1b:c0:88:f2:15:43:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=189d8a70-1970-4879-9a2a-30f5b50d2d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:60:86:86:f9:94:45:1b:cd:a0:1f:c0:f5: 79:99:cf:ec:97:81:7e:2b:e7:ba:9f:16:45:15:c1: 82:aa:6b:80:4f:bb:07:02:79:bf:0c:81:4e:f7:4f: 75:60:b9:05:e5:23:f0:c8:e3:c7:08:4b:d1:4a:31: 00:ba:7d:67:b8:24:30:9b:34:16:fe:2d:ef:f9:5a: 3e:2e:0f:bb:96:7d:75:e0:95:cd:69:50:ed:c8:0b: 7b:3b:9a:e8:81:24:ad:31:49:f5:3d:b2:39:c1:61: bf:8c:97:b9:73:56:5f:0a:aa:29:00:76:86:c8:41: 50:a7:02:8f:0c:a9:46:8e:68:96:6c:81:25:95:ca: 48:a7:8a:73:62:c4:50:d9:9d:2b:2c:91:99:62:cf: 03:43:ab:04:dd:17:da:f8:fe:0b:ab:cd:03:7d:85: 44:05:72:72:c5:a1:b6:8f:07:0a:45:a4:c3:a7:49: 5a:f8:6a:af:26:b6:8a:b0:e5:47:00:1d:72:bc:ce: c3:30:01:17:28:b8:c6:23:e9:0a:38:1c:9e:72:a6: 56:70:13:42:d6:ca:d0:97:3a:45:ae:68:5a:5f:5a: 20:72:47:76:0c:49:84:82:c5:5a:1e:b4:fe:f8:05: 9a:21:6e:5d:74:22:c4:51:b8:07:a0:d5:fe:0f:e3: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1F:28:9A:AC:C6:E6:70:65:5A:25:08:BC:8D:C3:70:70:4B:AC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a4:85:bd:7e:4b:a2:e1:da:28:29:b8:27:43:0c:eb:fb:40: a9:4d:6d:1a:fd:95:02:e7:22:35:9a:87:ac:c5:61:33:01:9f: ca:b8:39:9c:ae:92:c8:59:ea:d2:64:9a:90:60:dd:6f:b6:85: 1e:8b:21:3b:24:b1:a5:82:3e:45:ff:bc:49:6e:c0:e1:da:3c: 75:b7:28:ce:2e:03:a4:ae:97:96:b6:61:d0:9d:df:8e:cd:c5: 39:d8:11:5a:d8:50:a9:36:18:d2:a9:bf:b2:2c:16:d4:67:0f: 09:f4:20:5d:b7:62:f9:2e:59:82:81:0a:8a:cc:76:e4:71:d3: 53:f9:dd:03:e3:e9:c1:18:d0:f0:2a:01:d7:dd:b5:dd:ff:27: c3:c4:97:7f:1d:3e:f2:c5:89:d7:0e:c3:fe:3f:a0:ad:5e:16: 86:95:9e:22:1f:24:bf:f6:ac:9e:81:28:b3:70:0e:26:15:5b: 40:7c:d2:a3:06:21:ea:0c:60:f3:08:1d:97:92:77:71:27:3a: f0:e2:b6:a5:96:3a:4e:74:36:92:83:3d:42:65:7f:8e:2b:c2: 04:93:49:dc:e2:73:23:ac:b5:eb:3f:8a:2e:f7:c5:ea:97:6a: 06:2b:4b:7d:82:4e:cb:14:0b:fa:1f:44:d4:1a:21:43:b6:d1: 00:94:26:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmWpG8CI8hVDosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MTg5ZDhhNzAtMTk3MC00ODc5LTlhMmEtMzBmNWI1MGQyZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsxghob5lEUbzaAfwPV5mc/sl4F+K+e6nxZF FcGCqmuAT7sHAnm/DIFO9091YLkF5SPwyOPHCEvRSjEAun1nuCQwmzQW/i3v+Vo+ Lg+7ln114JXNaVDtyAt7O5rogSStMUn1PbI5wWG/jJe5c1ZfCqopAHaGyEFQpwKP DKlGjmiWbIEllcpIp4pzYsRQ2Z0rLJGZYs8DQ6sE3Rfa+P4Lq80DfYVEBXJyxaG2 jwcKRaTDp0la+GqvJraKsOVHAB1yvM7DMAEXKLjGI+kKOByecqZWcBNC1srQlzpF rmhaX1ogckd2DEmEgsVaHrT++AWaIW5ddCLEUbgHoNX+D+MjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcfKJqsxuZwZVolCLyNw3BwS6y7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDNiNzU2OGQtZjliNy0z YjdjLWE5YTMtYzIwYjM0ZDgyNWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOkhb1+S6Lh2igpuCdDDOv7QKlNbRr9lQLnIjWah6zFYTMBn8q4OZyu kshZ6tJkmpBg3W+2hR6LITsksaWCPkX/vEluwOHaPHW3KM4uA6Sul5a2YdCd347N xTnYEVrYUKk2GNKpv7IsFtRnDwn0IF23YvkuWYKBCorMduRx01P53QPj6cEY0PAq Adfdtd3/J8PEl38dPvLFidcOw/4/oK1eFoaVniIfJL/2rJ6BKLNwDiYVW0B80qMG IeoMYPMIHZeSd3EnOvDitqWWOk50NpKDPUJlf44rwgSTSdzicyOstes/ii73xeqX agYrS32CTssUC/ofRNQaIUO20QCUJjI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:32:44 2025 by rpki-client