$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dc757cc-2e7c-3ecd-8132-1403dda68224.roa File: 9dc757cc-2e7c-3ecd-8132-1403dda68224.roa (raw, json) Hash identifier: ZKiM7dR+ee8nkECoXxcSKlScj3VK+0yO2ET9SDye6GE= Subject key identifier: C8:E5:57:02:19:BB:E6:5A:49:DB:C6:71:EA:2C:8F:F7:57:B6:D1:90 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C26340367AF2BD5AAC3000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dc757cc-2e7c-3ecd-8132-1403dda68224.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:63:40:36:7a:f2:bd:5a:ac:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=987b80a0-0525-4526-9714-e163c0b2b176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:a9:76:98:90:7e:a5:24:26:4d:ee:1c:66: 39:e8:01:df:7c:88:3f:99:47:e7:69:b7:4b:1d:9c: 70:28:84:da:1d:34:cf:37:0f:88:f0:17:43:7a:1b: f6:b3:13:c5:10:a7:e7:49:7e:eb:b6:15:01:3d:ba: 58:44:d8:5d:3a:e7:35:72:83:ee:e7:f9:ab:5c:6e: b2:af:17:8c:0c:59:51:93:ba:4f:03:a3:ad:f9:63: 13:5d:f2:0b:0a:c9:4d:75:10:e1:99:53:07:74:88: 47:51:c7:7f:26:e4:f1:53:d2:81:bc:db:3e:10:3d: 88:34:54:fb:c5:c5:a8:4c:47:dc:cd:ec:67:f6:55: f5:08:66:eb:82:fd:5a:4e:04:08:d0:da:f3:89:04: 7a:3f:2c:3b:f9:a9:d8:96:c7:eb:e7:a2:56:b9:4a: 0f:7c:ed:ad:52:d4:2f:af:84:21:05:60:81:fe:51: 05:4a:26:95:59:56:82:02:9d:c6:a2:0e:93:ba:58: bd:ed:76:22:99:3a:e0:c7:55:21:03:f8:13:6e:3c: 96:20:8e:de:d3:f6:3b:1c:ab:c0:d4:04:33:87:c0: 86:43:ea:be:0a:28:49:18:ac:29:f7:c5:93:4f:78: 1c:5f:7e:c0:f7:cb:cb:ff:1c:28:78:b5:a1:de:cb: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E5:57:02:19:BB:E6:5A:49:DB:C6:71:EA:2C:8F:F7:57:B6:D1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dc757cc-2e7c-3ecd-8132-1403dda68224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d2:27:a8:50:e2:cb:88:aa:ab:12:29:f6:70:6d:11:79:a4: c4:73:ad:ed:aa:79:4d:c3:a1:3f:0c:f8:5f:53:cc:f1:c6:81: 50:7c:77:34:c3:31:ae:96:8a:4c:e8:3b:2c:a1:44:96:79:9c: 84:a5:d0:37:11:89:e3:1a:00:21:30:b8:c7:5c:b4:0a:1b:67: 73:bb:85:c4:17:f2:42:cd:05:cf:c2:8d:f1:c0:37:66:d2:f8: 98:93:86:8f:18:b2:0d:83:62:5a:e1:d2:a6:bf:a9:44:a7:5c: 19:9b:b0:b3:0e:57:b4:3f:40:3e:06:0f:94:2d:72:07:e4:19: ce:61:99:df:9b:cd:9d:ba:f9:1c:f9:a7:61:d3:54:69:e5:c8: b5:65:71:ad:70:e9:89:dc:21:d5:aa:14:9e:5f:a3:d8:fa:6d: 69:29:82:23:4c:82:3c:9d:0b:b3:e5:9f:86:18:f2:4a:21:98: 09:b1:de:7a:bb:28:28:73:01:a4:b8:73:de:aa:c6:1c:e0:38: 56:b2:56:85:12:de:35:20:79:b4:2c:10:3b:a0:62:88:eb:ac: fd:32:2b:28:6b:55:7d:5d:37:cd:0b:94:88:7f:a4:df:53:e9: c3:2e:5c:7f:9d:87:5b:60:2f:d4:27:45:b8:9e:20:1f:db:ba: d0:fc:2a:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmNANnryvVqsMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OTg3YjgwYTAtMDUyNS00NTI2LTk3MTQtZTE2M2MwYjJiMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxOpdpiQfqUkJk3uHGY56AHffIg/mUfnabdL HZxwKITaHTTPNw+I8BdDehv2sxPFEKfnSX7rthUBPbpYRNhdOuc1coPu5/mrXG6y rxeMDFlRk7pPA6Ot+WMTXfILCslNdRDhmVMHdIhHUcd/JuTxU9KBvNs+ED2INFT7 xcWoTEfczexn9lX1CGbrgv1aTgQI0NrziQR6Pyw7+anYlsfr56JWuUoPfO2tUtQv r4QhBWCB/lEFSiaVWVaCAp3Gog6Tuli97XYimTrgx1UhA/gTbjyWII7e0/Y7HKvA 1AQzh8CGQ+q+CihJGKwp98WTT3gcX37A98vL/xwoeLWh3ssfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjlVwIZu+ZaSdvGceosj/dXttGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWRjNzU3Y2MtMmU3Yy0z ZWNkLTgxMzItMTQwM2RkYTY4MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInSJ6hQ4suIqqsSKfZwbRF5pMRzre2qeU3DoT8M+F9TzPHGgVB8dzTD Ma6WikzoOyyhRJZ5nISl0DcRieMaACEwuMdctAobZ3O7hcQX8kLNBc/CjfHAN2bS +JiTho8Ysg2DYlrh0qa/qUSnXBmbsLMOV7Q/QD4GD5QtcgfkGc5hmd+bzZ26+Rz5 p2HTVGnlyLVlca1w6YncIdWqFJ5fo9j6bWkpgiNMgjydC7Pln4YY8kohmAmx3nq7 KChzAaS4c96qxhzgOFayVoUS3jUgebQsEDugYojrrP0yKyhrVX1dN80LlIh/pN9T 6cMuXH+dh1tgL9QnRbieIB/butD8KnE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:22:17 2025 by rpki-client