$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa File: d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa (raw, json) Hash identifier: HvH0dWvtCht5aj+zNPcm/S3d+zmdMkhPYAlnaYm+zG8= Subject key identifier: 4E:48:2D:AC:D2:4A:A0:5F:9C:C0:CC:B7:10:45:48:C3:E5:04:B6:C4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25EF44347E35371DDC300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5e:f4:43:47:e3:53:71:dd:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=36c294e1-082d-4758-b865-5f6386c4f356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:98:dc:85:1c:5c:1b:f5:e2:c8:ed:3c:97:0b: b8:34:04:16:a4:9c:03:d1:84:99:37:e9:13:cd:df: 1d:cb:32:da:ce:ef:93:00:2a:b8:af:db:d3:0f:e2: 42:60:1c:04:55:05:23:e5:c0:0e:e1:79:81:1f:a1: 7a:5d:69:cd:99:09:8b:77:be:9b:c6:cc:96:04:75: bb:f0:2d:69:0d:57:40:5a:75:3f:f2:47:ae:74:d0: 26:61:0e:84:88:4c:84:4f:5b:c3:a7:ca:69:10:80: 97:f5:3e:95:10:51:0b:e8:b9:1a:12:ba:ec:35:5d: 7d:b2:84:cc:c5:85:aa:41:61:4f:25:02:5e:9c:cd: b3:10:8e:be:bc:73:f0:6a:5b:71:e1:4d:53:5f:0c: 0e:98:2f:7a:64:0b:64:98:8f:b6:65:94:3c:6d:a5: 93:cc:fc:1d:ba:88:37:2d:02:09:d2:56:01:6b:88: 96:73:64:4c:5d:f8:90:83:1c:81:7a:44:f1:34:66: ab:15:b6:38:e3:36:98:22:2a:4c:5d:30:24:99:5b: 21:e6:52:13:bb:04:f3:d8:3a:07:7c:ed:44:97:b8: eb:3b:cc:96:9e:97:41:45:90:f1:b4:8f:57:e3:11: 55:39:6f:e4:65:55:e2:13:4f:db:96:5c:05:85:02: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:2D:AC:D2:4A:A0:5F:9C:C0:CC:B7:10:45:48:C3:E5:04:B6:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:83:33:09:95:fb:de:82:67:a5:0a:39:77:29:e4:f8:f7:e8: 84:c3:06:34:21:dc:b0:97:33:d2:fc:f7:ba:58:bb:2a:45:5e: c4:e5:cb:1c:fd:c4:d8:1a:ca:1c:8f:8f:96:f0:15:7d:99:1c: 36:df:f1:cb:c8:3b:9b:03:54:3c:16:b1:b2:eb:6e:8a:54:95: f5:7e:58:46:53:1e:63:62:e0:64:01:fe:68:b4:bc:7c:9b:7b: 4a:98:8c:01:56:cc:07:79:5d:b0:2d:32:f7:a7:47:8c:79:a2: ce:6c:95:0f:3c:8c:b7:0f:f3:bc:06:d2:b4:8b:90:b1:0d:b7: a5:a5:36:1e:88:ce:8b:35:1f:46:7a:93:2a:ec:30:18:d1:a5: 9f:7c:7c:be:cb:dc:4a:0c:aa:a5:16:86:21:4a:8d:36:31:be: c1:a2:0b:a1:bc:87:ff:fb:01:20:46:e6:88:69:94:fc:50:91: 06:4d:26:1f:54:18:99:b5:ab:0b:a9:db:66:a1:43:70:44:48: 19:5b:c4:32:73:65:32:1b:c8:c1:00:8d:fa:50:3e:41:85:db: c9:9a:87:a8:71:66:66:9b:ce:80:b1:07:a4:48:50:bd:3b:0e: 71:f7:68:79:25:ea:3b:18:9b:72:6f:26:83:58:ea:87:ed:96: 2a:e5:87:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl70Q0fjU3HdwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MzZjMjk0ZTEtMDgyZC00NzU4LWI4NjUtNWY2Mzg2YzRmMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipjchRxcG/XiyO08lwu4NAQWpJwD0YSZN+kT zd8dyzLazu+TACq4r9vTD+JCYBwEVQUj5cAO4XmBH6F6XWnNmQmLd76bxsyWBHW7 8C1pDVdAWnU/8keudNAmYQ6EiEyET1vDp8ppEICX9T6VEFEL6LkaErrsNV19soTM xYWqQWFPJQJenM2zEI6+vHPwaltx4U1TXwwOmC96ZAtkmI+2ZZQ8baWTzPwduog3 LQIJ0lYBa4iWc2RMXfiQgxyBekTxNGarFbY44zaYIipMXTAkmVsh5lITuwTz2DoH fO1El7jrO8yWnpdBRZDxtI9X4xFVOW/kZVXiE0/bllwFhQKNXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5ILazSSqBfnMDMtxBFSMPlBLbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDllOTJkZjMtMzJmZS0z NWNiLWFkN2QtZWVmZmViODdkZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaDMwmV+96CZ6UKOXcp5Pj36ITDBjQh3LCXM9L897pYuypFXsTlyxz9 xNgayhyPj5bwFX2ZHDbf8cvIO5sDVDwWsbLrbopUlfV+WEZTHmNi4GQB/mi0vHyb e0qYjAFWzAd5XbAtMvenR4x5os5slQ88jLcP87wG0rSLkLENt6WlNh6Izos1H0Z6 kyrsMBjRpZ98fL7L3EoMqqUWhiFKjTYxvsGiC6G8h//7ASBG5ohplPxQkQZNJh9U GJm1qwup22ahQ3BESBlbxDJzZTIbyMEAjfpQPkGF28mah6hxZmabzoCxB6RIUL07 DnH3aHkl6jsYm3JvJoNY6oftlirlhzw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:22 2025 by rpki-client