$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4d7ba16c-84e6-3871-86ab-30e4e0d1f8e9.roa File: 4d7ba16c-84e6-3871-86ab-30e4e0d1f8e9.roa (raw, json) Hash identifier: Ilekf2mohBcpt4YLez7CWZDsLbxfbGOqVLeqi+KPy1I= Subject key identifier: 09:CA:98:C4:B6:23:A6:C5:C6:E1:61:D3:94:B7:BB:00:2F:F6:20:E9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C260E9B5BEF88CEA24D0E0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4d7ba16c-84e6-3871-86ab-30e4e0d1f8e9.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:60:e9:b5:be:f8:8c:ea:24:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=65693bc9-3990-4a33-9842-07f36fbde41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:30:5e:3b:27:8e:02:33:eb:57:82:eb:b1: 57:3b:3e:49:7f:59:22:d9:2c:57:17:32:c5:45:c5: 73:f1:ae:2d:f5:01:91:c1:29:c4:8d:95:52:9d:13: bd:af:7b:40:52:70:47:eb:29:2e:a2:53:90:8b:71: 7b:b7:f8:1c:12:27:66:1a:6e:ec:29:bd:e8:1b:6d: 69:a4:9f:69:1d:f9:f3:99:86:cd:b2:e7:38:c5:e2: 99:4e:b0:95:b0:27:1c:ba:87:c3:69:d1:47:a5:d2: dd:4e:7a:75:f7:56:cb:93:4f:33:ab:23:72:04:aa: 00:a8:50:f6:79:0b:c8:c4:22:ae:34:08:d3:b8:f0: a5:0d:7b:c7:85:f4:4e:a5:29:15:00:86:8c:86:54: af:ff:f0:10:ed:ea:9e:f1:33:ca:d1:05:ea:03:65: 4d:b4:87:af:a1:de:bc:4d:0d:f6:4d:21:97:99:61: 9a:4f:18:54:91:cf:ba:2e:64:df:24:4f:c5:04:50: 99:cb:b5:1f:50:16:e1:dc:eb:89:55:69:8c:58:1a: 8c:b1:eb:09:b4:14:96:95:d2:d1:ea:f8:d4:d0:81: 13:b1:0b:84:27:2e:38:87:43:31:9c:97:e7:3e:d8: 84:df:f9:57:25:57:55:db:dd:48:09:71:00:49:3f: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:98:C4:B6:23:A6:C5:C6:E1:61:D3:94:B7:BB:00:2F:F6:20:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4d7ba16c-84e6-3871-86ab-30e4e0d1f8e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ed:40:18:cb:54:10:2c:de:73:56:c9:82:23:db:51:f2:22: 8c:08:d1:71:f4:45:45:2c:1d:63:7f:b7:9d:c3:c6:9c:9a:a6: c7:ae:20:7c:b0:3c:22:07:91:53:2a:a8:6e:61:5a:8c:d8:f6: ee:37:ba:79:b0:d7:36:b0:2e:67:9f:f6:d3:cf:5b:4d:af:c2: b1:1b:fc:c5:89:63:0e:8c:f7:7e:7a:eb:cd:ff:33:b9:fc:48: 24:b6:e3:61:df:3a:db:f2:d4:6e:53:ca:35:36:63:0a:99:b4: f7:3a:19:78:85:c2:c6:34:c1:43:96:cb:4c:93:52:14:e7:96: 39:37:c1:48:23:e9:88:f0:80:7e:98:39:12:c3:ef:28:54:ce: 5f:70:96:71:0f:e0:f7:23:57:5d:a4:9c:af:3c:be:7c:b5:ee: 66:37:b9:00:f4:67:e5:0c:79:a0:a9:26:ee:2e:8c:28:83:26: 20:39:53:0c:74:b8:49:f7:f8:a9:17:ae:29:48:e1:98:1c:ed: c1:b6:ac:7a:f9:d5:df:73:58:c4:ec:9b:d2:d9:a3:44:8a:82: fd:09:89:1a:bb:94:60:73:2f:84:34:89:ff:90:e6:dc:a7:83: f3:f3:63:f7:9d:67:3b:c4:2a:d6:fa:10:26:d5:84:1b:3d:30: c2:87:c8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmDptb74jOok0OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NjU2OTNiYzktMzk5MC00YTMzLTk4NDItMDdmMzZmYmRlNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT8wXjsnjgIz61eC67FXOz5Jf1ki2SxXFzLF RcVz8a4t9QGRwSnEjZVSnRO9r3tAUnBH6ykuolOQi3F7t/gcEidmGm7sKb3oG21p pJ9pHfnzmYbNsuc4xeKZTrCVsCccuofDadFHpdLdTnp191bLk08zqyNyBKoAqFD2 eQvIxCKuNAjTuPClDXvHhfROpSkVAIaMhlSv//AQ7eqe8TPK0QXqA2VNtIevod68 TQ32TSGXmWGaTxhUkc+6LmTfJE/FBFCZy7UfUBbh3OuJVWmMWBqMsesJtBSWldLR 6vjU0IETsQuEJy44h0MxnJfnPtiE3/lXJVdV291ICXEAST8cvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnKmMS2I6bFxuFh05S3uwAv9iDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGQ3YmExNmMtODRlNi0z ODcxLTg2YWItMzBlNGUwZDFmOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3tQBjLVBAs3nNWyYIj21HyIowI0XH0RUUsHWN/t53DxpyapseuIHyw PCIHkVMqqG5hWozY9u43unmw1zawLmef9tPPW02vwrEb/MWJYw6M9356683/M7n8 SCS242HfOtvy1G5TyjU2YwqZtPc6GXiFwsY0wUOWy0yTUhTnljk3wUgj6YjwgH6Y ORLD7yhUzl9wlnEP4PcjV12knK88vny17mY3uQD0Z+UMeaCpJu4ujCiDJiA5Uwx0 uEn3+KkXrilI4Zgc7cG2rHr51d9zWMTsm9LZo0SKgv0JiRq7lGBzL4Q0if+Q5tyn g/PzY/edZzvEKtb6ECbVhBs9MMKHyCw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:00:53 2025 by rpki-client