$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63fb2fba-b92c-3900-bd26-82410e4c95e6.roa File: 63fb2fba-b92c-3900-bd26-82410e4c95e6.roa (raw, json) Hash identifier: PJy61mBTgQpkUg5fC+x9YJj3CfQNV81GfZshgdWag6w= Subject key identifier: 84:B5:6D:43:0C:24:AE:22:98:C6:5E:41:64:D1:E2:B4:D1:86:F8:7D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C264C22FD832ADBA349D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63fb2fba-b92c-3900-bd26-82410e4c95e6.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:64:c2:2f:d8:32:ad:ba:34:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=b8675e43-4ad3-42e4-b83c-76d497b38fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:d6:ba:d3:a6:70:74:e7:d7:d1:7c:a3:dd: 81:75:57:d2:8c:85:8d:55:b9:41:da:25:ad:ab:ba: fb:c6:2e:02:9d:fc:48:c7:f4:d3:f8:68:2a:36:2e: 5b:d9:a6:d7:88:d4:ab:b6:b2:73:53:9b:21:5d:5d: 23:59:cf:94:8d:de:44:83:7e:7e:a4:53:5d:92:8d: 48:d3:6a:8f:82:5b:e4:17:d0:17:21:3f:87:6c:98: 7e:da:26:67:dd:2e:49:37:4a:94:98:55:e6:af:17: d5:64:41:c0:a8:d6:a9:29:78:2e:0d:b9:4d:3a:ad: ae:ea:98:20:ab:65:1e:88:33:32:a5:d9:d9:4a:6d: a4:c8:58:d1:75:41:b7:b5:7b:d8:bf:a8:2d:3e:57: 3a:cd:bd:c4:67:ad:4e:79:49:77:85:8d:0a:f0:4c: b2:64:33:e1:de:45:67:51:89:64:da:8f:c0:dd:4f: 01:f3:7a:49:9a:72:38:07:ea:7b:c6:75:f6:71:ea: 50:36:b6:c6:ad:b0:5c:3e:ed:76:4f:af:17:c3:d1: 59:3f:07:41:3c:99:bc:c5:39:fa:d1:11:4d:6e:be: 9b:ce:c6:31:11:5f:86:a8:6f:12:32:86:9f:92:c0: 29:21:87:9d:f6:bc:a3:17:6f:76:b5:33:55:40:40: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:6D:43:0C:24:AE:22:98:C6:5E:41:64:D1:E2:B4:D1:86:F8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63fb2fba-b92c-3900-bd26-82410e4c95e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a2:c4:fe:5e:54:b7:d2:ad:1f:3f:9a:21:d6:81:b9:41:bf: a2:31:a0:ad:b7:8b:8e:54:21:be:9d:fd:9e:f1:91:72:dd:1d: 8c:01:de:19:91:2b:ad:77:5b:45:dc:da:9a:31:79:3f:6b:f6: 4f:97:ee:28:9a:ba:85:1d:53:c2:ac:a4:91:44:14:a5:cd:19: 66:8f:36:c1:b0:d3:f6:dd:43:7a:d0:2b:70:36:b5:d1:5e:b1: ed:13:1d:f9:9a:a6:5f:b6:cd:83:4d:d8:6f:c0:bc:22:6d:db: ef:3e:c7:ec:46:cc:8e:63:c5:9d:35:8c:f7:d5:f0:ef:ca:e9: 27:92:6f:81:34:ea:cc:43:04:c5:a1:6d:2d:6f:0d:7b:a4:0e: d7:dd:67:1e:08:d1:ea:76:e8:9c:42:12:73:13:54:31:e8:f7: 14:da:69:05:c5:3d:18:7e:53:55:a7:06:c8:b3:30:52:2c:98: a0:0e:7d:ba:2e:9a:6b:12:8c:9d:b7:46:65:93:e0:aa:d7:ba: 07:a2:c6:1b:02:5c:d1:d3:a9:aa:60:40:a7:c2:17:8d:1b:63: 58:70:a1:53:ae:f8:fa:8a:e8:ed:47:a8:09:27:87:ae:f4:d7: 4a:24:0c:5b:52:7e:99:a2:e5:85:00:10:61:ca:64:9c:9d:eb: f3:ee:66:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmTCL9gyrbo0nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk Yjg2NzVlNDMtNGFkMy00MmU0LWI4M2MtNzZkNDk3YjM4ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ/WutOmcHTn19F8o92BdVfSjIWNVblB2iWt q7r7xi4CnfxIx/TT+GgqNi5b2abXiNSrtrJzU5shXV0jWc+Ujd5Eg35+pFNdko1I 02qPglvkF9AXIT+HbJh+2iZn3S5JN0qUmFXmrxfVZEHAqNapKXguDblNOq2u6pgg q2UeiDMypdnZSm2kyFjRdUG3tXvYv6gtPlc6zb3EZ61OeUl3hY0K8EyyZDPh3kVn UYlk2o/A3U8B83pJmnI4B+p7xnX2cepQNrbGrbBcPu12T68Xw9FZPwdBPJm8xTn6 0RFNbr6bzsYxEV+GqG8SMoafksApIYed9ryjF292tTNVQEATDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS1bUMMJK4imMZeQWTR4rTRhvh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjNmYjJmYmEtYjkyYy0z OTAwLWJkMjYtODI0MTBlNGM5NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ixP5eVLfSrR8/miHWgblBv6IxoK23i45UIb6d/Z7xkXLdHYwB3hmR K613W0Xc2poxeT9r9k+X7iiauoUdU8KspJFEFKXNGWaPNsGw0/bdQ3rQK3A2tdFe se0THfmapl+2zYNN2G/AvCJt2+8+x+xGzI5jxZ01jPfV8O/K6SeSb4E06sxDBMWh bS1vDXukDtfdZx4I0ep26JxCEnMTVDHo9xTaaQXFPRh+U1WnBsizMFIsmKAOfbou mmsSjJ23RmWT4KrXugeixhsCXNHTqapgQKfCF40bY1hwoVOu+PqK6O1HqAknh670 10okDFtSfpmi5YUAEGHKZJyd6/PuZiw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:57 2025 by rpki-client