$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f4c377d-570b-32f8-900b-21ed951e8905.roa File: 4f4c377d-570b-32f8-900b-21ed951e8905.roa (raw, json) Hash identifier: HDeDsnb3WLMhg9uX8erSAliPBUoofn5K35Jm73jFNfc= Subject key identifier: D8:31:92:E5:49:4F:57:CD:B2:31:4C:B9:FE:79:EB:CD:4F:88:4C:33 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C26491F1D7BE51DAE60400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f4c377d-570b-32f8-900b-21ed951e8905.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:64:91:f1:d7:be:51:da:e6:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=0a8f5171-8b4f-43c9-88a8-fc1288be2fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:ad:1e:de:67:76:e1:70:88:14:3b:3c:c9: 9f:68:2e:b9:42:cc:c5:50:8c:a2:fa:48:b7:4f:3e: 79:f6:6b:94:3f:66:b6:b0:fd:c1:24:24:80:73:19: f6:4c:f8:f1:e9:ce:0a:e2:19:e1:44:2e:96:38:6d: 0c:40:6a:69:61:fe:22:a5:48:cb:bb:81:21:46:3e: d7:9b:92:c5:39:d7:55:ee:54:1e:ab:f9:71:5a:e7: 1a:42:60:ce:7f:a5:c0:1e:bf:13:7c:ca:f2:07:4c: 52:1b:38:dc:bf:ce:9e:f6:6a:22:6e:74:aa:b9:81: c1:ad:a5:af:70:65:de:2d:b1:6f:e1:00:86:ed:b2: 7b:9f:3d:c2:5f:25:55:cc:01:1b:28:17:b7:55:0e: f4:80:ce:5d:c1:35:5c:e6:c3:f2:61:e7:fb:ae:3f: ba:45:70:04:78:74:1d:5b:ec:d4:99:41:a5:18:ce: f8:36:5e:7d:8b:e7:38:b3:1f:49:6f:28:e4:1b:a4: 72:7e:f0:d9:55:17:41:a5:de:f2:3d:d8:49:8f:bc: 79:24:d1:56:a2:16:22:58:8b:08:97:95:3f:0d:5d: e2:cc:25:78:29:40:e3:38:1d:ff:d7:09:12:cd:95: a4:ab:47:26:94:16:bb:5c:d1:28:14:ab:5f:fd:90: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:31:92:E5:49:4F:57:CD:B2:31:4C:B9:FE:79:EB:CD:4F:88:4C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f4c377d-570b-32f8-900b-21ed951e8905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5b:3c:b0:93:2e:0e:56:66:d8:72:a2:d1:1f:b7:9b:dc:f9: e4:3f:d9:02:78:10:23:26:07:d4:6e:95:f5:93:26:b3:77:40: 8f:31:ea:a1:c8:b9:83:fd:da:bf:49:e1:27:cd:12:08:09:ed: f1:46:17:d7:58:f3:9e:1e:31:0c:8d:4b:c1:20:f9:11:14:ab: 81:c9:62:fe:33:4e:a4:13:de:41:1c:21:95:f7:50:48:cd:53: 55:8b:2f:66:0e:61:f6:d5:3f:0f:63:bb:9a:b3:29:74:91:a9: 84:df:9a:a7:ca:c9:2e:59:17:84:b6:77:c8:68:09:e0:52:0a: 92:7b:2d:0e:d3:ca:7f:d0:d4:5d:78:d3:77:f6:4f:49:e3:8e: 6e:26:21:fd:c5:3d:0e:ea:60:df:64:f2:25:e3:11:b1:3e:ac: a4:4a:a8:e4:ca:06:bb:56:15:8d:78:b0:3e:35:03:90:1a:bd: 71:52:29:fa:50:36:27:07:50:34:5a:0f:b7:eb:bc:45:7a:7e: 6f:76:10:28:04:05:ec:bf:b7:2a:e5:97:a5:24:18:5a:80:ca: 7c:0b:ca:81:fa:2d:58:05:ce:28:8d:0b:84:57:e5:3d:cc:2e: d2:54:cf:62:be:f4:a7:c8:fb:13:0d:d9:66:d9:bb:17:95:45: 3f:40:39:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmSR8de+UdrmBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MGE4ZjUxNzEtOGI0Zi00M2M5LTg4YTgtZmMxMjg4YmUyZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizStHt5nduFwiBQ7PMmfaC65QszFUIyi+ki3 Tz559muUP2a2sP3BJCSAcxn2TPjx6c4K4hnhRC6WOG0MQGppYf4ipUjLu4EhRj7X m5LFOddV7lQeq/lxWucaQmDOf6XAHr8TfMryB0xSGzjcv86e9moibnSquYHBraWv cGXeLbFv4QCG7bJ7nz3CXyVVzAEbKBe3VQ70gM5dwTVc5sPyYef7rj+6RXAEeHQd W+zUmUGlGM74Nl59i+c4sx9JbyjkG6RyfvDZVRdBpd7yPdhJj7x5JNFWohYiWIsI l5U/DV3izCV4KUDjOB3/1wkSzZWkq0cmlBa7XNEoFKtf/ZCWMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgxkuVJT1fNsjFMuf55681PiEwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGY0YzM3N2QtNTcwYi0z MmY4LTkwMGItMjFlZDk1MWU4OTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxbPLCTLg5WZthyotEft5vc+eQ/2QJ4ECMmB9RulfWTJrN3QI8x6qHI uYP92r9J4SfNEggJ7fFGF9dY854eMQyNS8Eg+REUq4HJYv4zTqQT3kEcIZX3UEjN U1WLL2YOYfbVPw9ju5qzKXSRqYTfmqfKyS5ZF4S2d8hoCeBSCpJ7LQ7Tyn/Q1F14 03f2T0njjm4mIf3FPQ7qYN9k8iXjEbE+rKRKqOTKBrtWFY14sD41A5AavXFSKfpQ NicHUDRaD7frvEV6fm92ECgEBey/tyrll6UkGFqAynwLyoH6LVgFziiNC4RX5T3M LtJUz2K+9KfI+xMN2WbZuxeVRT9AOYw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:00 2025 by rpki-client