$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9762a18d-e300-321e-9fcf-851f446c27d2.roa File: 9762a18d-e300-321e-9fcf-851f446c27d2.roa (raw, json) Hash identifier: LTKzIeNHHCNMYpPs5jMzsKR0AxpU6izbMUQb9XS4Vn0= Subject key identifier: C6:70:C5:20:C8:0F:52:40:C0:C2:12:8D:B8:31:63:3F:24:47:66:C7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C260FD375750A9A1C0DF90 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9762a18d-e300-321e-9fcf-851f446c27d2.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:60:fd:37:57:50:a9:a1:c0:df:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=f5f3228e-336e-47b6-95a2-ddc37ad97a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:5c:cf:52:78:65:1a:38:8f:e0:99:99:6e: 1c:a9:b4:60:f3:95:c0:4e:0a:a2:df:50:ec:6a:56: a4:a8:eb:5b:4e:f0:ae:9f:52:89:f1:59:f2:37:10: 54:ae:7c:b5:7c:fd:55:18:a4:51:01:8a:fe:aa:42: a9:1b:6b:25:ff:d4:b1:15:04:ba:dc:bb:46:6a:00: 1d:0d:30:91:17:c8:a4:db:f5:25:1d:e7:69:06:fa: 70:e5:fa:87:78:d4:27:a4:d8:8a:6a:d3:b0:f6:92: c7:6c:61:ed:83:28:50:22:df:33:83:cd:7c:79:6f: f8:0d:39:a0:d1:d0:56:0f:d4:35:f7:e9:ff:f4:dc: aa:c7:53:85:7a:c0:b0:94:15:20:b5:7d:ef:f1:5b: 5a:03:56:4f:67:4f:2a:20:80:e1:b9:aa:56:65:32: 64:f0:e3:2d:0c:ae:fc:ed:5a:a7:e5:49:87:e4:a1: ca:d7:db:80:2c:c5:54:46:c7:c5:a6:21:8e:d7:c2: 29:30:3d:6a:60:b9:99:7d:82:12:7a:73:df:ed:6e: bf:2b:d6:8f:8c:eb:78:a6:38:5d:c8:42:d7:aa:44: 92:03:86:98:9e:87:7b:96:6a:85:a6:45:6b:f7:26: 8c:55:78:95:db:e9:cb:59:2a:60:41:fd:88:cb:fb: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:70:C5:20:C8:0F:52:40:C0:C2:12:8D:B8:31:63:3F:24:47:66:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9762a18d-e300-321e-9fcf-851f446c27d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:39:a3:8b:c1:ab:aa:55:53:e0:93:6c:09:ce:e1:ab:62:44: d5:e5:4b:8b:4f:1d:b2:e8:b3:b3:95:fe:e7:be:a4:d9:02:1c: 0d:f0:4f:53:ee:4c:dc:18:36:ef:d0:1f:33:41:76:71:50:2b: ee:33:44:3f:2d:16:d8:46:de:a4:12:a1:d6:71:ba:72:ac:45: 7c:27:aa:d9:a8:f9:a7:e5:00:60:d6:0b:b3:ab:d8:48:c9:18: 53:52:e1:7b:97:65:b4:8e:18:53:41:7a:1d:db:75:f1:31:70: 7b:b5:f0:05:8a:1f:c4:4c:9a:65:30:1d:ba:38:2d:2a:26:e7: f6:1d:a4:7c:cf:b1:d9:21:8c:d2:aa:12:cc:44:6c:cb:e3:48: c1:d8:3f:6e:1f:80:4d:82:2e:58:68:6e:53:5c:b8:fa:33:e1: fe:9a:13:b7:ce:97:9e:4d:4c:2d:32:77:1c:d8:0e:0f:34:72: 4d:97:7f:1e:e8:2e:c3:ae:47:f9:ee:d4:c1:9e:b7:bd:ff:19: b2:66:e2:3f:35:43:61:f8:d5:38:16:2a:a8:25:98:62:1e:52: c5:e8:45:b4:e7:0b:f4:d1:cc:cb:3d:bd:10:4d:1c:c1:45:e7: 94:2a:00:f8:6c:a6:d9:68:e4:9d:08:1c:b8:f2:95:c4:0b:8f: 9b:ae:0a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmD9N1dQqaHA35AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjVmMzIyOGUtMzM2ZS00N2I2LTk1YTItZGRjMzdhZDk3YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1pcz1J4ZRo4j+CZmW4cqbRg85XATgqi31Ds alakqOtbTvCun1KJ8VnyNxBUrny1fP1VGKRRAYr+qkKpG2sl/9SxFQS63LtGagAd DTCRF8ik2/UlHedpBvpw5fqHeNQnpNiKatOw9pLHbGHtgyhQIt8zg818eW/4DTmg 0dBWD9Q19+n/9Nyqx1OFesCwlBUgtX3v8VtaA1ZPZ08qIIDhuapWZTJk8OMtDK78 7Vqn5UmH5KHK19uALMVURsfFpiGO18IpMD1qYLmZfYISenPf7W6/K9aPjOt4pjhd yELXqkSSA4aYnod7lmqFpkVr9yaMVXiV2+nLWSpgQf2Iy/sGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZwxSDID1JAwMISjbgxYz8kR2bHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTc2MmExOGQtZTMwMC0z MjFlLTlmY2YtODUxZjQ0NmMyN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg5o4vBq6pVU+CTbAnO4atiRNXlS4tPHbLos7OV/ue+pNkCHA3wT1Pu TNwYNu/QHzNBdnFQK+4zRD8tFthG3qQSodZxunKsRXwnqtmo+aflAGDWC7Or2EjJ GFNS4XuXZbSOGFNBeh3bdfExcHu18AWKH8RMmmUwHbo4LSom5/YdpHzPsdkhjNKq EsxEbMvjSMHYP24fgE2CLlhoblNcuPoz4f6aE7fOl55NTC0ydxzYDg80ck2Xfx7o LsOuR/nu1MGet73/GbJm4j81Q2H41TgWKqglmGIeUsXoRbTnC/TRzMs9vRBNHMFF 55QqAPhsptlo5J0IHLjylcQLj5uuCoY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:35 2025 by rpki-client