$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa File: 7510a13a-70eb-3389-909c-aa4e19e2962d.roa (raw, json) Hash identifier: 9vVD0qsjnm4r2T5JNvODC9UjMKaqzzZa5BUCmLocHwM= Subject key identifier: E2:86:68:4B:ED:B5:75:3B:60:04:A1:D2:31:26:CE:E0:FC:35:AE:67 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584AE5C680AFEE91857CAB6DCF80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 204.195.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:80:af:ee:91:85:7c:ab:6d:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=da390211-c127-4e04-af6e-5a1dd685113e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:60:58:de:0d:63:cb:ca:0f:17:00:49:f8: e7:77:a1:33:55:45:e3:64:11:1d:39:f2:86:c7:56: 13:cd:b3:23:74:1e:50:ae:82:a8:05:19:f4:21:3e: fd:e4:03:25:f4:34:43:5d:b7:7f:83:1f:2a:c2:07: 1f:51:0e:29:c8:e8:10:a5:b7:e3:29:20:89:f5:74: 92:91:8f:95:fd:ec:54:0d:51:6f:4b:76:79:bd:82: b0:2b:1f:28:1f:5a:f7:e1:5e:be:14:ae:70:f2:71: 60:5a:34:63:4e:7b:8e:47:ed:a9:7c:74:fc:3a:32: 94:38:f6:f6:69:f7:fa:b4:29:eb:76:7f:61:01:1b: c6:a1:37:94:4c:15:5c:76:3a:04:46:a1:4c:fc:e3: 49:91:b8:a3:68:50:67:ab:90:fa:b9:75:06:9e:5e: 94:84:39:ca:5e:37:8e:c5:11:26:f6:dd:21:d1:e4: b1:c6:c8:ec:ac:e4:c7:2a:f0:e0:d0:3c:94:6f:47: 4b:70:b4:36:c2:bf:85:6f:58:40:13:6e:6a:83:3f: 50:6a:51:a2:a5:9f:af:49:39:51:f1:c0:b1:ec:56: 70:c1:c4:e8:64:94:e9:28:4c:82:48:ef:d7:41:82: 21:bf:fe:49:95:2a:7f:e5:ec:c5:b0:4e:cb:a1:5f: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:86:68:4B:ED:B5:75:3B:60:04:A1:D2:31:26:CE:E0:FC:35:AE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d2:40:86:f1:8d:7c:03:01:fb:eb:89:12:ad:8f:9a:e7:88: 96:27:f6:ab:fc:1a:ee:0b:94:9a:13:9a:0c:5e:02:52:d7:7a: 2e:a3:63:e9:72:4c:43:c0:65:44:15:d2:89:28:6e:55:2e:c4: 00:bd:67:cf:64:b0:89:c5:6b:6b:f5:f5:95:71:1e:3a:e2:65: ab:17:ef:da:f0:d5:5a:08:15:29:21:8f:c2:f7:53:ac:49:e0: a1:ce:39:f0:46:2c:a0:f1:4d:60:51:55:03:b4:cf:e9:17:31: bd:41:e1:67:b4:0b:96:b5:fe:5a:70:ec:54:d0:61:4e:f9:1c: f1:d1:37:a8:c6:c7:e1:f5:fc:d6:a1:33:35:f3:a1:c2:95:d8: 3a:4a:c7:22:b2:1c:ce:39:23:75:11:cb:60:e0:ee:a6:5f:a4: 28:a1:b9:53:df:16:96:23:6e:c3:77:73:bf:51:ff:75:01:15: 73:34:15:22:8b:07:9a:83:a3:21:b3:4d:32:cb:04:4b:e2:aa: a3:56:5b:42:f0:d0:de:eb:86:b3:1d:da:74:26:44:38:9b:5a: 74:cc:2d:52:5f:be:46:62:ff:3a:0d:31:8d:de:6d:47:b9:78: 94:46:d1:a3:53:0b:f7:ad:50:06:84:0a:26:d1:2c:72:63:30: 7d:28:e5:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxoCv7pGFfKttz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk ZGEzOTAyMTEtYzEyNy00ZTA0LWFmNmUtNWExZGQ2ODUxMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv1gWN4NY8vKDxcASfjnd6EzVUXjZBEdOfKG x1YTzbMjdB5QroKoBRn0IT795AMl9DRDXbd/gx8qwgcfUQ4pyOgQpbfjKSCJ9XSS kY+V/exUDVFvS3Z5vYKwKx8oH1r34V6+FK5w8nFgWjRjTnuOR+2pfHT8OjKUOPb2 aff6tCnrdn9hARvGoTeUTBVcdjoERqFM/ONJkbijaFBnq5D6uXUGnl6UhDnKXjeO xREm9t0h0eSxxsjsrOTHKvDg0DyUb0dLcLQ2wr+Fb1hAE25qgz9QalGipZ+vSTlR 8cCx7FZwwcToZJTpKEyCSO/XQYIhv/5JlSp/5ezFsE7LoV8qWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKGaEvttXU7YASh0jEmzuD8Na5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzUxMGExM2EtNzBlYi0z Mzg5LTkwOWMtYWE0ZTE5ZTI5NjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzMPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLSQIbxjXwDAfvriRKtj5rniJYn9qv8Gu4LlJoTmgxeAlLXei6jY+ly TEPAZUQV0okoblUuxAC9Z89ksInFa2v19ZVxHjriZasX79rw1VoIFSkhj8L3U6xJ 4KHOOfBGLKDxTWBRVQO0z+kXMb1B4We0C5a1/lpw7FTQYU75HPHRN6jGx+H1/Nah MzXzocKV2DpKxyKyHM45I3URy2Dg7qZfpCihuVPfFpYjbsN3c79R/3UBFXM0FSKL B5qDoyGzTTLLBEviqqNWW0Lw0N7rhrMd2nQmRDibWnTMLVJfvkZi/zoNMY3ebUe5 eJRG0aNTC/etUAaECibRLHJjMH0o5Wg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:34 2025 by rpki-client