$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa64b05d-a531-372f-aae8-ab6e91bb627b.roa File: aa64b05d-a531-372f-aae8-ab6e91bb627b.roa (raw, json) Hash identifier: cyDdcPixi7FPIKRczedfSYiyM4MFrAkLdQBoemU47Oc= Subject key identifier: D9:45:75:FE:85:81:A0:7E:16:C3:3D:31:A8:89:E1:AF:3A:98:84:0A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C26139EE858C5211088040 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa64b05d-a531-372f-aae8-ab6e91bb627b.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:61:39:ee:85:8c:52:11:08:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=d1869f71-02db-4f14-ae3f-8700951cbda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:d6:90:9d:c7:26:d5:de:89:f7:67:9b:bd: 03:73:2d:80:cf:5e:57:95:f2:92:12:50:ec:09:dc: 2a:8b:77:e4:3f:a9:a3:cf:04:3f:3c:46:1d:00:64: a4:bb:66:76:e8:7e:98:de:fa:0d:bd:a7:43:a5:f7: 69:d3:a0:86:52:15:c4:c4:7c:1b:20:cf:31:11:96: c8:a2:8e:d9:a8:33:e4:29:93:19:04:ab:ca:72:5b: c2:5f:a7:ad:f7:d2:a9:cf:03:f4:a1:81:88:54:0a: 86:9d:b3:9c:bb:a9:5f:5b:ae:34:27:a5:01:75:21: ef:b8:7c:c2:6b:81:ba:16:03:43:46:6e:d6:36:eb: bd:7e:33:51:e9:87:69:3e:05:16:c4:2f:d1:a8:74: 70:65:57:39:98:d1:f7:8e:65:f0:32:ac:4d:5d:66: 1b:c6:e5:cd:1e:ae:c7:5a:2a:40:df:85:c7:3f:17: df:09:68:f6:b4:38:73:c1:c7:0d:6e:c9:4e:64:dd: bc:31:95:2e:4e:68:4f:f4:de:60:33:b1:4d:af:de: e9:ba:13:80:14:fc:ac:da:72:0f:88:f3:95:e6:88: 5e:37:a9:aa:ba:9b:2e:da:e9:63:a4:eb:84:4d:74: 72:1a:a6:1b:4c:14:87:eb:24:36:f4:94:09:ee:83: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:45:75:FE:85:81:A0:7E:16:C3:3D:31:A8:89:E1:AF:3A:98:84:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa64b05d-a531-372f-aae8-ab6e91bb627b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d8:26:a4:0d:ba:f1:3a:23:75:68:63:d9:f0:d0:83:62:60: d8:bb:bf:4b:4b:dc:f7:88:49:a8:d1:82:35:10:88:bf:78:67: 82:5d:3e:d2:a9:1f:0f:71:76:14:fd:f9:04:fd:49:bc:89:64: e3:36:65:7d:8f:ba:ed:1e:80:05:3c:ee:83:f1:f4:1f:a9:c9: 61:10:f7:c0:23:e5:e3:8a:e4:58:6b:16:da:73:f3:e6:f0:6b: f3:6f:97:50:21:66:8c:ad:74:ae:2b:99:9c:1c:14:cd:0c:b8: a2:30:61:70:e0:8f:94:61:62:ee:a3:54:32:80:33:f6:91:ad: 2d:67:17:5e:ca:dc:2e:47:c8:d4:7e:b1:62:33:84:f6:5a:b4: 1a:48:a9:ba:27:3a:be:c1:af:81:29:11:aa:91:85:70:9c:9d: 2d:d3:46:b9:a6:b4:ab:ed:48:d1:5c:a5:e9:03:6e:f4:d1:bf: b8:6a:bd:c8:7b:b6:fd:67:81:01:75:ba:23:a2:b0:0b:c7:07: 9d:eb:8d:8c:4e:a6:fa:5e:ae:f8:a3:b8:6b:3a:3b:2f:77:b5: 95:59:88:8c:f2:c2:49:b3:b7:94:b5:fe:ea:02:58:95:11:e0: 48:d1:fa:a9:ff:1c:e3:80:19:cc:4b:53:cb:a0:af:c4:0a:f6: 26:78:33:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmE57oWMUhEIgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDE4NjlmNzEtMDJkYi00ZjE0LWFlM2YtODcwMDk1MWNiZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIvWkJ3HJtXeifdnm70Dcy2Az15XlfKSElDs Cdwqi3fkP6mjzwQ/PEYdAGSku2Z26H6Y3voNvadDpfdp06CGUhXExHwbIM8xEZbI oo7ZqDPkKZMZBKvKclvCX6et99KpzwP0oYGIVAqGnbOcu6lfW640J6UBdSHvuHzC a4G6FgNDRm7WNuu9fjNR6YdpPgUWxC/RqHRwZVc5mNH3jmXwMqxNXWYbxuXNHq7H WipA34XHPxffCWj2tDhzwccNbslOZN28MZUuTmhP9N5gM7FNr97puhOAFPys2nIP iPOV5oheN6mqupsu2uljpOuETXRyGqYbTBSH6yQ29JQJ7oNRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlFdf6FgaB+FsM9MaiJ4a86mIQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWE2NGIwNWQtYTUzMS0z NzJmLWFhZTgtYWI2ZTkxYmI2MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATYJqQNuvE6I3VoY9nw0INiYNi7v0tL3PeISajRgjUQiL94Z4JdPtKp Hw9xdhT9+QT9SbyJZOM2ZX2Puu0egAU87oPx9B+pyWEQ98Aj5eOK5FhrFtpz8+bw a/Nvl1AhZoytdK4rmZwcFM0MuKIwYXDgj5RhYu6jVDKAM/aRrS1nF17K3C5HyNR+ sWIzhPZatBpIqbonOr7Br4EpEaqRhXCcnS3TRrmmtKvtSNFcpekDbvTRv7hqvch7 tv1ngQF1uiOisAvHB53rjYxOpvpervijuGs6Oy93tZVZiIzywkmzt5S1/uoCWJUR 4EjR+qn/HOOAGcxLU8ugr8QK9iZ4M9Y= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:21 2025 by rpki-client