$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa File: c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa (raw, json) Hash identifier: rQdMfGRntQO57I8vibRGXmMm0Cnw7nRo5ah0HkkEi4s= Subject key identifier: 49:44:0F:16:CA:1C:1B:A0:84:60:BC:E0:E2:93:C5:AC:A8:13:9B:86 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C263189A2F6D55EAEEBEF4 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:63:18:9a:2f:6d:55:ea:ee:be:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=40f9b3df-d5fd-427d-a02c-51b03fd75433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:dc:b9:d7:f7:d5:d9:da:82:7f:72:83:51: 31:86:ad:78:f8:ea:3b:06:85:fc:b7:a2:c5:e5:b4: 59:7e:bb:79:fa:e8:31:aa:81:ea:27:7f:d2:b6:98: 6c:b6:18:7a:34:8b:35:1b:25:46:de:19:5f:dd:d6: 00:01:66:fc:53:32:d5:ed:49:f4:fc:07:93:e9:a5: 13:25:00:c1:5d:18:0e:42:56:25:25:77:6f:a8:d9: 3b:75:11:cd:af:5c:7c:a2:eb:04:bf:c3:cb:4e:73: 9e:04:ad:ba:e5:64:a5:9d:c4:9a:aa:3c:6e:b9:e9: 78:50:10:7d:27:00:9d:b6:29:ba:73:c1:1e:b3:86: 84:9e:bc:c4:98:40:fc:78:7a:b3:8e:16:d6:4e:81: 6c:54:34:9a:71:42:50:0e:df:27:a2:c5:f6:73:d6: 1b:23:6c:74:bb:53:d6:ec:da:fc:6f:15:02:17:72: c0:4e:9e:72:09:63:13:6e:d3:ae:e8:32:ce:d7:cb: 9a:22:4a:da:4a:6f:4b:6f:ef:07:23:17:a9:43:03: 98:64:88:fd:4b:f2:03:d4:09:1c:64:b9:78:b7:0a: 2c:71:3b:85:3e:f3:38:f3:3b:0b:89:70:56:fa:fe: e1:7c:f4:dd:43:8e:c3:ba:d1:ff:8b:57:68:28:79: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:44:0F:16:CA:1C:1B:A0:84:60:BC:E0:E2:93:C5:AC:A8:13:9B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:90:50:a3:bd:88:02:18:d3:07:a9:0b:6c:ab:e2:90:b4:91: 80:b8:89:87:d4:19:f2:8d:2b:89:18:45:28:3a:ae:fa:f1:c6: 2d:43:71:c0:75:d8:ac:50:9c:94:7c:77:95:e2:68:fc:4f:42: 96:2c:65:b2:35:eb:45:5d:9a:f1:a6:c8:f8:0d:31:3f:33:eb: 9b:8e:10:a9:e1:ae:a9:c2:18:12:9c:5a:f2:83:6c:1f:47:0f: 08:1d:ce:ce:33:88:43:db:47:f2:1f:79:a1:82:d7:b4:0f:64: 6f:58:06:ed:9f:10:ce:35:25:4a:4f:2b:b6:35:cd:db:0a:aa: 0d:df:18:88:e7:f2:2c:44:59:43:4b:44:6b:65:28:11:13:34: d7:e7:46:d6:d4:b4:06:14:26:d0:ef:3c:c7:4f:58:7f:48:af: 60:33:d8:aa:04:a9:8f:43:c4:15:5e:49:94:b1:3f:c0:0a:b2: f7:c7:90:cb:c5:66:67:8b:c3:4c:ae:f0:8a:3d:ae:dc:b8:e8: 58:c1:0f:16:ac:2a:7a:b7:b3:6a:04:49:dd:f8:1d:0f:ef:4e: ae:28:3c:40:f8:10:71:80:71:27:48:66:d4:76:5d:d0:92:a9: 11:16:89:cc:31:f5:80:94:f3:72:3e:e8:55:7e:ce:e8:e8:52: 65:7f:d1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmMYmi9tVeruvvQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NDBmOWIzZGYtZDVmZC00MjdkLWEwMmMtNTFiMDNmZDc1NDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilLcudf31dnagn9yg1Exhq14+Oo7BoX8t6LF 5bRZfrt5+ugxqoHqJ3/Stphsthh6NIs1GyVG3hlf3dYAAWb8UzLV7Un0/AeT6aUT JQDBXRgOQlYlJXdvqNk7dRHNr1x8ousEv8PLTnOeBK265WSlncSaqjxuuel4UBB9 JwCdtim6c8Ees4aEnrzEmED8eHqzjhbWToFsVDSacUJQDt8nosX2c9YbI2x0u1PW 7Nr8bxUCF3LATp5yCWMTbtOu6DLO18uaIkraSm9Lb+8HIxepQwOYZIj9S/ID1Akc ZLl4twoscTuFPvM48zsLiXBW+v7hfPTdQ47DutH/i1doKHlS7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElEDxbKHBughGC84OKTxayoE5uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzMxZGZjYjAtNmViYi0z MzQwLWI1ZWYtZGI3YmU5Zjk1MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2QUKO9iAIY0wepC2yr4pC0kYC4iYfUGfKNK4kYRSg6rvrxxi1DccB1 2KxQnJR8d5XiaPxPQpYsZbI160VdmvGmyPgNMT8z65uOEKnhrqnCGBKcWvKDbB9H Dwgdzs4ziEPbR/IfeaGC17QPZG9YBu2fEM41JUpPK7Y1zdsKqg3fGIjn8ixEWUNL RGtlKBETNNfnRtbUtAYUJtDvPMdPWH9Ir2Az2KoEqY9DxBVeSZSxP8AKsvfHkMvF ZmeLw0yu8Io9rty46FjBDxasKnq3s2oESd34HQ/vTq4oPED4EHGAcSdIZtR2XdCS qREWicwx9YCU83I+6FV+zujoUmV/0aQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:58 2025 by rpki-client