$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/600196b3-f915-3667-b21c-8a8b400d6733.roa File: 600196b3-f915-3667-b21c-8a8b400d6733.roa (raw, json) Hash identifier: 11PyHTsL0vCnBH4sbWRI+s0pQJSXnezQLDIPNpgZetY= Subject key identifier: EE:A2:03:07:DE:72:57:5E:00:C5:BE:76:55:1C:4F:47:D7:84:2C:A7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25F94BB7D827637AB1600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/600196b3-f915-3667-b21c-8a8b400d6733.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5f:94:bb:7d:82:76:37:ab:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=944e728d-8943-448d-91b4-363b0eef60d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:5b:7d:1a:2c:dc:52:a5:90:6b:b8:9a:cc: e7:82:33:9e:d0:64:ac:0e:9c:53:b0:d7:ea:4d:44: b7:69:88:96:b7:ac:37:4f:91:d2:56:c4:18:0d:2c: 70:b6:c7:18:6e:44:42:60:68:fc:ac:7c:9e:66:20: 3e:01:9a:46:f1:01:a7:59:c3:d9:cf:ac:dc:59:eb: ad:f0:be:2d:45:67:60:4e:6a:7b:b8:67:4c:7e:51: ac:80:28:02:91:58:45:77:4e:68:4c:1b:cf:d3:3d: 05:30:6d:81:7e:58:2a:6f:21:b9:b2:a1:9e:30:49: f7:1c:a1:4c:1c:39:aa:c4:79:13:b3:2f:ad:1f:c9: e0:b6:f2:a9:e1:4b:a2:d7:45:38:12:b1:1e:c0:02: 13:ad:a2:b5:ac:96:d8:a3:f2:49:3a:0e:46:fb:1c: 23:8a:6c:85:ef:64:5a:17:63:93:fd:42:3a:3e:57: cb:92:e0:9d:c6:85:43:f9:0c:9a:2d:e2:79:6d:a3: e3:51:2b:cf:89:5a:c8:f0:76:2c:76:c1:94:74:40: 45:c5:d6:b7:7a:08:34:99:66:3a:21:45:c7:29:2d: 6c:4d:72:6c:6f:82:55:59:c0:47:19:be:48:bc:86: 85:72:03:08:ce:b6:c5:a5:ca:cc:76:b4:42:96:32: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:03:07:DE:72:57:5E:00:C5:BE:76:55:1C:4F:47:D7:84:2C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/600196b3-f915-3667-b21c-8a8b400d6733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a3:f4:3c:f6:65:a9:00:05:a2:ae:58:3c:2f:ee:4b:ab:c5: 54:6b:d0:7d:bd:2c:f8:ca:52:fb:68:e9:b7:a1:13:73:15:92: 8d:8a:27:e7:cc:aa:ff:51:61:67:c0:1a:91:d3:e6:fc:3f:c4: 70:40:15:aa:5d:59:0e:ff:7a:b1:ee:29:24:77:43:a4:df:7a: c6:80:f4:09:51:b8:ad:b3:f3:96:80:53:7b:71:20:8d:10:c2: fb:14:53:41:12:32:2f:77:61:5c:48:da:87:65:3a:65:fb:e8: 8d:7a:90:b2:ab:84:a5:64:c9:b9:ae:41:a4:32:f6:66:23:60: 48:4b:ee:e1:27:49:14:7f:04:45:20:bf:1f:8b:6c:4f:d9:d5: 4c:b1:30:e3:e0:f0:fb:fe:7e:4e:d4:91:9a:0b:82:4a:04:0b: 97:c0:35:20:e8:a9:f1:ce:52:de:fa:38:a4:ae:41:50:41:0e: da:58:dd:d2:97:d6:43:bc:b8:22:7e:7f:6b:05:bc:3b:96:06: 7b:82:10:f2:ad:2f:ab:0a:71:34:ba:77:9c:b9:48:c7:3b:ae: 35:c0:d6:be:c8:97:ef:2d:d3:fe:9f:42:3f:b5:ec:9e:87:ac: 03:a5:7f:91:ad:26:87:13:10:12:bc:94:11:46:6f:85:7b:d4: 68:f9:c9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl+Uu32CdjerFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OTQ0ZTcyOGQtODk0My00NDhkLTkxYjQtMzYzYjBlZWY2MGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hRbfRos3FKlkGu4mszngjOe0GSsDpxTsNfq TUS3aYiWt6w3T5HSVsQYDSxwtscYbkRCYGj8rHyeZiA+AZpG8QGnWcPZz6zcWeut 8L4tRWdgTmp7uGdMflGsgCgCkVhFd05oTBvP0z0FMG2BflgqbyG5sqGeMEn3HKFM HDmqxHkTsy+tH8ngtvKp4Uui10U4ErEewAITraK1rJbYo/JJOg5G+xwjimyF72Ra F2OT/UI6PlfLkuCdxoVD+QyaLeJ5baPjUSvPiVrI8HYsdsGUdEBFxda3egg0mWY6 IUXHKS1sTXJsb4JVWcBHGb5IvIaFcgMIzrbFpcrMdrRCljJOdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6iAwfecldeAMW+dlUcT0fXhCynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjAwMTk2YjMtZjkxNS0z NjY3LWIyMWMtOGE4YjQwMGQ2NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmj9Dz2ZakABaKuWDwv7kurxVRr0H29LPjKUvto6behE3MVko2KJ+fM qv9RYWfAGpHT5vw/xHBAFapdWQ7/erHuKSR3Q6TfesaA9AlRuK2z85aAU3txII0Q wvsUU0ESMi93YVxI2odlOmX76I16kLKrhKVkybmuQaQy9mYjYEhL7uEnSRR/BEUg vx+LbE/Z1UyxMOPg8Pv+fk7UkZoLgkoEC5fANSDoqfHOUt76OKSuQVBBDtpY3dKX 1kO8uCJ+f2sFvDuWBnuCEPKtL6sKcTS6d5y5SMc7rjXA1r7Il+8t0/6fQj+17J6H rAOlf5GtJocTEBK8lBFGb4V71Gj5ycU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:19:04 2025 by rpki-client