$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af815324-b022-30c1-bce1-719711f9daeb.roa File: af815324-b022-30c1-bce1-719711f9daeb.roa (raw, json) Hash identifier: IVQfC54GLR8ajtcv1kSBkN4oE9PInEFYUIZu28aV2lg= Subject key identifier: 8E:F3:75:C2:81:70:67:9D:47:47:81:9F:90:4A:DC:63:D5:8B:D9:C4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C262EDCE8049FDB0F4A880 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af815324-b022-30c1-bce1-719711f9daeb.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:62:ed:ce:80:49:fd:b0:f4:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=9939b695-8c2f-4401-872b-884808d8a98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:99:d9:2b:ba:67:2f:56:d4:e6:96:2f:e2: 6d:fb:9b:ad:6c:86:c3:f3:b3:5d:e3:f5:3c:0a:7c: db:1c:4d:1c:25:2a:c7:61:ed:eb:a6:95:56:1b:3e: 37:d5:94:b5:89:3a:cd:52:83:7f:1d:8b:c7:ba:44: 28:3a:29:21:b1:94:cd:24:14:27:eb:9e:85:d2:65: b5:b4:79:63:a2:86:5a:ef:d6:43:b9:d5:94:93:86: c8:73:ea:6e:2b:81:9c:ed:fe:f0:88:d0:84:de:c7: 09:f8:a4:07:0f:aa:30:88:83:27:f6:20:79:c3:75: 02:9d:56:f1:a8:99:d5:74:2d:cc:20:70:67:54:8e: 19:97:41:ca:38:82:c6:1a:eb:20:03:3d:d0:ec:d4: da:7a:5c:f0:04:1a:4f:fa:aa:e1:f1:7f:8e:71:6a: b7:32:35:55:38:ad:37:24:c3:4b:90:f4:e1:ad:51: 7a:1f:fd:34:a6:47:9e:7b:12:af:64:4b:68:b8:00: 3e:2c:6a:43:68:32:7d:b3:a1:c9:a2:23:72:c6:9e: a0:d4:42:12:6c:af:aa:02:03:b9:a9:8c:69:10:9c: e2:28:a1:ad:b5:77:c6:9e:99:6c:e7:f8:80:0a:a8: 3f:2a:2b:ca:4d:fd:72:d0:ac:81:ce:f1:d8:51:1f: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:75:C2:81:70:67:9D:47:47:81:9F:90:4A:DC:63:D5:8B:D9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af815324-b022-30c1-bce1-719711f9daeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fd:42:4c:a4:35:e8:00:c9:ae:12:e9:72:66:00:f9:bf:d5: b1:ba:b2:9e:47:29:dd:ad:f4:44:40:41:3b:d2:f3:0d:f0:e1: cf:c7:8f:83:85:15:73:b5:4d:3d:2f:2c:f2:c5:22:07:7e:e2: 5c:1e:cd:84:84:ff:30:cb:69:2c:52:be:f0:d0:18:11:f6:2e: 30:9d:52:9a:d4:7a:5e:69:87:43:5b:b1:f1:92:24:36:0a:8d: b3:f7:be:f0:e4:00:fe:3b:fe:11:6f:62:9d:7b:44:be:02:27: 6e:c7:48:fa:27:c0:9a:71:32:ad:71:c9:d4:56:72:e5:5e:c1: ba:cf:90:f0:77:1c:3d:f0:c4:3a:85:98:87:73:da:9a:67:bb: cb:ce:00:b9:aa:8e:78:3f:df:2e:65:76:4e:e1:d2:1c:cb:3c: 75:e2:20:ac:b0:c3:a8:e1:c8:87:3b:3b:84:29:12:f1:dd:39: 4a:08:7b:a7:cc:e7:fd:b5:3b:d7:d1:58:c1:ba:09:70:09:04: ce:a3:6f:63:37:22:9c:2f:95:c9:b4:cf:ad:a8:2d:48:b3:d4: 60:f5:ac:0c:f3:44:c8:53:44:87:4f:18:d2:83:c3:70:4d:4e: 61:8c:64:99:8d:82:4c:14:17:fb:18:07:ff:af:c5:4f:43:ad: 25:9e:59:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmLtzoBJ/bD0qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OTkzOWI2OTUtOGMyZi00NDAxLTg3MmItODg0ODA4ZDhhOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxeZ2Su6Zy9W1OaWL+Jt+5utbIbD87Nd4/U8 CnzbHE0cJSrHYe3rppVWGz431ZS1iTrNUoN/HYvHukQoOikhsZTNJBQn656F0mW1 tHljooZa79ZDudWUk4bIc+puK4Gc7f7wiNCE3scJ+KQHD6owiIMn9iB5w3UCnVbx qJnVdC3MIHBnVI4Zl0HKOILGGusgAz3Q7NTaelzwBBpP+qrh8X+OcWq3MjVVOK03 JMNLkPThrVF6H/00pkeeexKvZEtouAA+LGpDaDJ9s6HJoiNyxp6g1EISbK+qAgO5 qYxpEJziKKGttXfGnpls5/iACqg/KivKTf1y0KyBzvHYUR8Y3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7zdcKBcGedR0eBn5BK3GPVi9nEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWY4MTUzMjQtYjAyMi0z MGMxLWJjZTEtNzE5NzExZjlkYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX9QkykNegAya4S6XJmAPm/1bG6sp5HKd2t9ERAQTvS8w3w4c/Hj4OF FXO1TT0vLPLFIgd+4lwezYSE/zDLaSxSvvDQGBH2LjCdUprUel5ph0NbsfGSJDYK jbP3vvDkAP47/hFvYp17RL4CJ27HSPonwJpxMq1xydRWcuVewbrPkPB3HD3wxDqF mIdz2ppnu8vOALmqjng/3y5ldk7h0hzLPHXiIKyww6jhyIc7O4QpEvHdOUoIe6fM 5/21O9fRWMG6CXAJBM6jb2M3Ipwvlcm0z62oLUiz1GD1rAzzRMhTRIdPGNKDw3BN TmGMZJmNgkwUF/sYB/+vxU9DrSWeWas= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:56 2025 by rpki-client