$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa File: a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa (raw, json) Hash identifier: Wz5wi9m0goZ3VDPcyY3AI9vZZhOPC0pjenadpsOivJU= Subject key identifier: 42:95:BD:2E:87:7F:3D:EF:51:DB:70:DA:0C:84:EC:24:EC:DC:AC:AA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25D70A8F9AD7D3E17FD00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5d:70:a8:f9:ad:7d:3e:17:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=c074315a-2c03-450a-a284-8bcdbcf226e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:48:eb:77:2b:fc:36:0c:e4:a1:0e:27:20: 35:79:64:e7:e8:23:56:b6:08:1d:f2:8f:34:c3:e9: de:15:81:09:21:ad:01:93:16:ee:d4:2a:68:f2:af: 60:a9:45:32:ba:92:85:1c:80:e7:53:fa:4b:dc:ce: 0f:d2:4b:36:3c:43:67:1e:b3:54:e3:41:c0:c5:83: 69:a3:fa:62:06:ce:73:b1:65:ef:c9:bc:76:e4:cb: 57:e4:c6:93:1b:49:96:f3:20:81:d3:8a:e7:10:43: 8e:c3:51:64:2e:de:c6:e3:84:03:37:91:88:86:9d: 73:78:ee:cf:d9:b9:4c:6a:3d:2a:eb:03:11:b3:39: 3f:dc:eb:e3:70:70:0d:47:fc:b3:19:72:d9:8a:29: dd:32:12:f0:21:8a:82:fd:82:0d:e0:ff:8f:0b:f8: 23:a2:7e:09:cd:5a:1e:8a:63:71:da:1d:06:b7:88: 5b:f2:c7:fc:f7:3d:8d:d4:2f:e3:02:ca:9a:9e:14: 6b:64:9a:08:10:c6:b3:af:25:28:8a:bd:54:72:3d: 2f:d9:67:fc:b2:38:40:89:9e:d0:e9:1c:82:36:63: f3:50:fe:7b:aa:e4:b1:4d:27:f6:ed:59:be:73:d6: 57:92:d6:d2:7f:eb:ea:c2:ef:43:c0:e0:1f:d6:fe: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:95:BD:2E:87:7F:3D:EF:51:DB:70:DA:0C:84:EC:24:EC:DC:AC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a7ae943a-7f0d-3044-8f95-fb88a3dd6ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:60:60:0a:18:b2:da:3f:0f:bd:f4:df:5e:0d:0a:61:68:5b: 4c:9b:69:58:69:50:c9:fa:03:23:ba:c1:2a:65:26:5a:78:01: 92:66:55:03:3d:53:68:d3:2d:32:2e:97:eb:ae:41:93:36:85: cb:66:36:7e:05:d0:56:4e:f1:8b:b8:be:c4:90:2e:95:bc:ea: 3c:07:c6:68:82:28:a7:ef:50:b5:20:88:38:d8:e5:2b:d2:fa: 4f:b6:b5:b6:28:b5:74:c6:ab:4b:fa:b3:0e:2f:6c:d5:b7:ff: 66:5d:38:e3:38:a0:da:47:87:dd:2e:df:8a:28:48:fa:c6:ef: 9b:09:da:88:ef:f2:e5:93:8a:9b:70:50:b1:31:09:3a:7c:36: 95:f5:a8:a2:05:8b:08:ce:78:48:7c:59:50:49:f4:34:b0:c2: 13:da:6c:92:1f:c4:10:0e:ee:74:13:b2:0f:f8:50:9f:95:9c: 01:2a:cf:be:68:0c:56:9e:25:f9:cf:5c:9d:d9:16:47:47:4a: 4e:27:a8:f7:7d:12:35:ae:66:9a:51:8a:e3:f1:3b:22:15:03: d9:d2:77:87:f6:b4:d2:6d:51:9d:c9:d6:d6:01:4f:2e:74:52: 7f:9a:5a:47:96:c2:40:44:09:30:17:fe:fc:9a:e3:af:6f:82: ac:7e:15:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl1wqPmtfT4X/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YzA3NDMxNWEtMmMwMy00NTBhLWEyODQtOGJjZGJjZjIyNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTRI63cr/DYM5KEOJyA1eWTn6CNWtggd8o80 w+neFYEJIa0Bkxbu1Cpo8q9gqUUyupKFHIDnU/pL3M4P0ks2PENnHrNU40HAxYNp o/piBs5zsWXvybx25MtX5MaTG0mW8yCB04rnEEOOw1FkLt7G44QDN5GIhp1zeO7P 2blMaj0q6wMRszk/3OvjcHANR/yzGXLZiindMhLwIYqC/YIN4P+PC/gjon4JzVoe imNx2h0Gt4hb8sf89z2N1C/jAsqanhRrZJoIEMazryUoir1Ucj0v2Wf8sjhAiZ7Q 6RyCNmPzUP57quSxTSf27Vm+c9ZXktbSf+vqwu9DwOAf1v4Q/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKVvS6Hfz3vUdtw2gyE7CTs3KyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTdhZTk0M2EtN2YwZC0z MDQ0LThmOTUtZmI4OGEzZGQ2ZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdgYAoYsto/D730314NCmFoW0ybaVhpUMn6AyO6wSplJlp4AZJmVQM9 U2jTLTIul+uuQZM2hctmNn4F0FZO8Yu4vsSQLpW86jwHxmiCKKfvULUgiDjY5SvS +k+2tbYotXTGq0v6sw4vbNW3/2ZdOOM4oNpHh90u34ooSPrG75sJ2ojv8uWTiptw ULExCTp8NpX1qKIFiwjOeEh8WVBJ9DSwwhPabJIfxBAO7nQTsg/4UJ+VnAEqz75o DFaeJfnPXJ3ZFkdHSk4nqPd9EjWuZppRiuPxOyIVA9nSd4f2tNJtUZ3J1tYBTy50 Un+aWkeWwkBECTAX/vya469vgqx+FZs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:32 2025 by rpki-client