$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa File: cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa (raw, json) Hash identifier: aPUpoe/4SbE+/PM9wzFJSQZ3rPKh9oaKqjPFEz78rdQ= Subject key identifier: 8D:91:5B:7B:73:5E:F0:EC:B1:E9:E7:BD:1C:F4:78:42:1F:B3:D8:24 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C262A304BF958C1639A980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:62:a3:04:bf:95:8c:16:39:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=8612c2c1-d83a-4bf3-b036-7cbaca7347e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:55:93:23:c6:31:da:83:b2:d8:96:94:bf: 02:0f:0d:c7:53:3f:93:23:54:86:bc:45:31:a0:9b: f6:0f:b5:47:bc:bf:45:c2:35:dc:9d:a2:94:7e:c9: 11:be:51:6b:47:6c:eb:93:90:28:c2:69:8a:b9:7f: e2:ee:e1:a9:87:75:59:80:61:5c:80:2f:07:80:43: 05:cb:14:3f:bd:c1:52:58:d9:f1:9d:69:0a:55:05: 21:27:82:f0:8e:06:15:ed:cf:87:58:8f:e3:06:91: 05:45:fb:bd:21:41:2b:0f:dc:f3:21:4c:5d:83:f5: a5:41:51:9b:e3:8a:3f:ff:e9:a4:b4:8f:75:8a:56: 38:d9:1d:04:d2:09:0b:98:74:cb:b4:25:a4:e9:8b: f6:81:21:22:8c:77:07:a2:f8:13:18:d9:6c:18:13: b1:10:67:90:ab:33:e0:b1:52:c7:bf:56:65:86:fb: 4d:08:5f:72:f3:02:63:b0:70:d6:ec:f3:ef:f4:dd: 99:8f:2e:e4:75:06:2b:ae:d0:66:6b:c5:ca:a0:67: 6e:34:a7:d4:57:a8:57:53:0f:04:71:bd:b4:e3:41: ca:60:86:e3:c4:f1:f8:ee:87:98:63:a8:e3:99:50: f1:40:15:f3:a5:4e:75:8d:47:68:09:f1:04:94:34: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:5B:7B:73:5E:F0:EC:B1:E9:E7:BD:1C:F4:78:42:1F:B3:D8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:5b:1c:44:e6:2e:0a:63:36:3a:26:47:b1:53:72:9f:d5:8e: 22:36:33:9f:45:46:14:da:47:0c:37:29:d0:34:74:31:67:ad: 39:22:fb:cc:e3:ad:4d:c8:54:52:82:12:9f:7a:76:7f:8b:a8: 4b:b6:00:86:ff:c8:23:f6:df:1b:ab:44:db:fb:77:aa:87:6c: 35:a2:06:ae:32:31:a7:a3:17:c1:79:09:ac:74:6e:8d:63:0a: f1:93:ce:2a:47:3b:a8:5a:d0:17:29:60:96:6c:39:16:6b:a0: 69:a4:74:85:13:03:e7:43:20:1d:7a:d3:ad:9c:14:d6:e6:37: c0:58:15:b3:0d:65:4d:4b:a3:58:58:d0:57:0c:3f:dc:11:d8: 6d:16:eb:c9:1d:f8:83:cc:03:d5:09:b1:7c:f3:77:77:0c:66: 8e:50:25:95:9f:f7:5b:8f:85:27:06:62:00:a0:b4:f3:1b:b6: 5e:49:12:80:a1:bc:1a:9a:05:02:dd:af:ce:58:e7:be:2b:b6: 92:6a:ff:0e:ac:b8:38:d2:22:f8:41:de:76:84:c0:32:50:e2: d5:00:07:27:f0:d7:b8:cc:aa:19:b1:bb:18:99:ff:2c:5f:03: 3a:52:ea:b0:b9:fa:6a:87:34:4d:d5:68:6c:f6:e4:e3:52:a9: 13:83:73:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmKjBL+VjBY5qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ODYxMmMyYzEtZDgzYS00YmYzLWIwMzYtN2NiYWNhNzM0N2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqipVkyPGMdqDstiWlL8CDw3HUz+TI1SGvEUx oJv2D7VHvL9FwjXcnaKUfskRvlFrR2zrk5AowmmKuX/i7uGph3VZgGFcgC8HgEMF yxQ/vcFSWNnxnWkKVQUhJ4LwjgYV7c+HWI/jBpEFRfu9IUErD9zzIUxdg/WlQVGb 44o//+mktI91ilY42R0E0gkLmHTLtCWk6Yv2gSEijHcHovgTGNlsGBOxEGeQqzPg sVLHv1ZlhvtNCF9y8wJjsHDW7PPv9N2Zjy7kdQYrrtBma8XKoGduNKfUV6hXUw8E cb2040HKYIbjxPH47oeYY6jjmVDxQBXzpU51jUdoCfEElDRPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2RW3tzXvDssennvRz0eEIfs9gkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2NlM2RmNzQtYjQ5NC0z ZjI0LWJiNzctYTVlZWI1ZDNlNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlbHETmLgpjNjomR7FTcp/VjiI2M59FRhTaRww3KdA0dDFnrTki+8zj rU3IVFKCEp96dn+LqEu2AIb/yCP23xurRNv7d6qHbDWiBq4yMaejF8F5Cax0bo1j CvGTzipHO6ha0BcpYJZsORZroGmkdIUTA+dDIB16062cFNbmN8BYFbMNZU1Lo1hY 0FcMP9wR2G0W68kd+IPMA9UJsXzzd3cMZo5QJZWf91uPhScGYgCgtPMbtl5JEoCh vBqaBQLdr85Y574rtpJq/w6suDjSIvhB3naEwDJQ4tUAByfw17jMqhmxuxiZ/yxf AzpS6rC5+mqHNE3VaGz25ONSqRODc04= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:20 2025 by rpki-client