$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d4973c18-b7c6-3f90-8222-e4f60c025675.roa File: d4973c18-b7c6-3f90-8222-e4f60c025675.roa (raw, json) Hash identifier: 8Nc4G/Vut3mhPmVxQLFcYXqXvuL81vpSUHDNKsUuxM0= Subject key identifier: 9A:15:AA:1C:30:7D:94:96:46:AD:AE:FF:1C:04:97:01:B0:3F:A7:1C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C264D41366E818BED65E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d4973c18-b7c6-3f90-8222-e4f60c025675.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:64:d4:13:66:e8:18:be:d6:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=009cc143-542e-4902-a1c3-0204229987c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:e4:a6:27:b1:55:9f:9a:35:85:e8:e9:12: c5:83:1b:6e:2e:a0:c3:7b:f4:60:d9:f8:f2:3c:ff: c7:8e:a3:16:93:c2:e0:61:ba:12:db:68:76:0e:d8: e5:34:e8:e7:3f:68:6b:8e:96:f2:37:7e:e2:15:3a: c0:d9:52:13:95:bc:20:a2:dc:46:2a:dc:33:87:62: ef:a1:e4:14:4f:cb:14:1f:d4:0d:f8:c9:a3:69:93: e8:d2:99:30:cf:fe:5c:b2:63:3e:ef:03:3b:a1:8a: a3:5f:a6:17:76:47:c7:df:14:0a:6d:0b:10:f1:10: 78:18:b8:5b:6b:e7:cd:1c:6b:c1:7f:cc:8a:8f:a3: 3c:c4:53:cc:f5:b0:48:6a:e6:31:46:b5:fb:e5:af: 01:79:30:79:93:45:a9:c0:c1:c9:37:55:8a:c9:6b: fb:8d:db:8f:32:72:40:49:a2:26:e1:20:be:0c:b8: fc:52:1d:1e:42:f8:c4:c3:09:45:de:26:32:ef:ca: 96:bb:f7:c8:93:54:8f:40:a9:61:85:42:79:07:d5: 7b:aa:8d:6d:9b:75:0f:4a:e8:01:5e:db:03:c6:d4: 91:2e:80:b3:69:7b:a7:8e:f0:ff:39:a0:b9:a1:fe: 95:71:c6:5d:3f:d0:de:c5:f6:23:09:02:97:5c:12: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:15:AA:1C:30:7D:94:96:46:AD:AE:FF:1C:04:97:01:B0:3F:A7:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d4973c18-b7c6-3f90-8222-e4f60c025675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a6:22:9f:e8:30:fc:0e:b0:6e:37:68:d2:47:d7:ec:8f:23: 59:d7:06:b8:d0:e2:8d:ab:28:6b:02:4c:ca:c1:bc:f8:c6:82: e7:eb:a6:bd:0a:6f:ce:01:dc:d4:ee:35:a3:99:af:a4:fa:35: 10:a6:4a:ac:7b:18:1e:e9:0c:98:a3:0d:89:5e:59:cf:f5:06: 94:95:2c:25:df:d6:06:26:46:04:ee:25:9d:67:d8:fe:76:d4: a5:b2:5d:b8:36:a7:73:fe:f9:14:ef:28:b5:45:b8:a8:e4:07: 7f:d4:fe:2a:01:57:3d:00:2f:1b:c7:7c:97:2a:97:82:57:1d: 8c:eb:3b:cc:77:9d:ad:34:78:13:4a:da:ba:3f:6c:d7:a4:82: dd:c4:07:dd:a4:e3:67:db:14:ae:42:18:89:6a:4d:c8:fc:ad: 76:fa:2b:24:13:84:8d:2f:8c:95:68:bd:3b:91:1e:e2:dc:71: ea:55:39:de:46:d8:c6:46:c1:fd:ee:4b:90:22:2d:dd:29:89: 57:c1:65:a2:b8:04:59:dc:79:4e:25:c7:f9:f3:71:92:af:7e: 8d:25:b5:15:26:a3:1d:1a:39:f9:c3:33:15:e8:de:2e:e3:67: f5:d6:cc:bc:a4:ea:d9:32:80:ab:be:af:96:d2:32:6a:b3:4c: 3e:27:82:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmTUE2boGL7WXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MDA5Y2MxNDMtNTQyZS00OTAyLWExYzMtMDIwNDIyOTk4N2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrHkpiexVZ+aNYXo6RLFgxtuLqDDe/Rg2fjy PP/HjqMWk8LgYboS22h2DtjlNOjnP2hrjpbyN37iFTrA2VITlbwgotxGKtwzh2Lv oeQUT8sUH9QN+MmjaZPo0pkwz/5csmM+7wM7oYqjX6YXdkfH3xQKbQsQ8RB4GLhb a+fNHGvBf8yKj6M8xFPM9bBIauYxRrX75a8BeTB5k0WpwMHJN1WKyWv7jduPMnJA SaIm4SC+DLj8Uh0eQvjEwwlF3iYy78qWu/fIk1SPQKlhhUJ5B9V7qo1tm3UPSugB XtsDxtSRLoCzaXunjvD/OaC5of6VccZdP9DexfYjCQKXXBIoBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoVqhwwfZSWRq2u/xwElwGwP6ccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDQ5NzNjMTgtYjdjNi0z ZjkwLTgyMjItZTRmNjBjMDI1Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmmIp/oMPwOsG43aNJH1+yPI1nXBrjQ4o2rKGsCTMrBvPjGgufrpr0K b84B3NTuNaOZr6T6NRCmSqx7GB7pDJijDYleWc/1BpSVLCXf1gYmRgTuJZ1n2P52 1KWyXbg2p3P++RTvKLVFuKjkB3/U/ioBVz0ALxvHfJcql4JXHYzrO8x3na00eBNK 2ro/bNekgt3EB92k42fbFK5CGIlqTcj8rXb6KyQThI0vjJVovTuRHuLccepVOd5G 2MZGwf3uS5AiLd0piVfBZaK4BFnceU4lx/nzcZKvfo0ltRUmox0aOfnDMxXo3i7j Z/XWzLyk6tkygKu+r5bSMmqzTD4ngqQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:48 2025 by rpki-client