$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa File: e3da3962-a423-3a05-a507-30064af54fd3.roa (raw, json) Hash identifier: VJq8xCizbmWL11+6W7cZ+gNXHdWE0hBsZd5EGD/t6Y8= Subject key identifier: 40:7D:0A:78:A7:4B:64:2B:37:EA:B9:60:3A:0D:10:CF:35:77:D6:35 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25E275F4D48F508337B80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5e:27:5f:4d:48:f5:08:33:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=2474ef07-3485-4045-b7be-ce7adb353e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:d4:62:48:bf:cc:2b:cf:51:bd:37:b7:3f: 1c:13:a2:39:da:34:bf:cf:5a:24:b1:df:b6:19:cb: 54:41:3b:69:05:94:ca:70:1b:f5:e1:d7:a9:ad:d3: 21:f0:82:49:9a:5b:21:b1:ca:1e:77:34:8b:8c:2f: 92:18:12:c3:32:af:9a:2f:61:58:57:f0:18:fc:2f: 26:91:2f:ff:15:4b:8e:72:00:7b:56:8a:45:b9:41: b4:0c:83:cc:53:1f:a6:30:ca:ef:bd:df:d7:fa:7c: 42:88:0c:30:85:86:83:63:17:9c:ea:6f:0d:56:f1: 1f:6c:bb:df:45:ec:53:65:58:7c:7e:65:3b:cc:bc: 08:0a:40:00:70:10:df:56:73:c2:68:0f:58:f7:00: 34:21:67:37:8b:39:43:8b:28:84:cf:15:a0:84:76: fc:f4:a4:51:ea:ba:04:00:ff:8f:0c:5f:f6:0a:8e: 1e:31:e1:0c:54:09:c4:ac:5d:a0:9e:ce:1e:17:cf: 8f:4f:93:5c:e2:77:ea:fb:a4:63:4b:14:ce:74:97: 2f:0a:a0:e2:e3:32:8f:c9:d4:da:47:20:4b:ce:03: f1:28:a4:e3:22:43:0f:03:bc:0e:a4:e6:c3:b2:70: 77:4e:a2:a4:7b:5e:e9:9f:66:70:ea:0c:90:96:f0: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:0A:78:A7:4B:64:2B:37:EA:B9:60:3A:0D:10:CF:35:77:D6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:84:c0:8e:2e:66:78:4e:aa:7d:75:24:45:a3:6d:82:37:ff: b8:f9:04:e9:6e:3b:dd:50:9c:65:8c:dd:50:ad:3a:1e:14:c6: cb:d3:27:25:74:ba:16:cf:c1:5a:3b:c4:94:3a:0b:be:21:97: e2:4d:76:a9:b8:d4:a2:8d:b7:e3:07:3e:e4:9e:67:3b:fd:ae: 7b:39:81:51:1c:9a:cd:02:7f:bd:0b:4f:36:1f:05:af:63:8b: 94:00:82:c5:ee:02:86:57:51:e6:d0:df:73:26:6d:94:58:21: 41:86:3b:e5:a6:7d:e6:4f:81:d7:1e:d1:57:1d:ee:bf:55:19: c9:18:d0:e1:fa:ea:a3:e1:d3:10:d0:30:0b:5a:a2:5b:86:46: 94:c0:24:5a:fd:0c:d7:e7:44:55:31:4c:f2:34:a8:aa:08:d0: 65:c6:f4:af:75:fd:71:87:0e:e6:d7:7c:2a:40:35:d0:b3:87: cd:b7:1a:15:5e:82:31:ee:af:bc:cb:6a:7c:6e:ab:f7:ee:54: 34:cb:fb:41:2e:55:d6:0a:dd:89:14:86:16:6a:07:8c:f0:e7: 59:78:ba:3a:2c:fb:55:7e:77:13:30:23:f1:e3:4f:c2:5c:9c: 85:64:c4:c7:e9:f5:6c:33:7c:82:9d:e5:3e:06:6b:77:0c:54: f6:f6:4b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl4nX01I9Qgze4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MjQ3NGVmMDctMzQ4NS00MDQ1LWI3YmUtY2U3YWRiMzUzZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUTUYki/zCvPUb03tz8cE6I52jS/z1oksd+2 GctUQTtpBZTKcBv14deprdMh8IJJmlshscoedzSLjC+SGBLDMq+aL2FYV/AY/C8m kS//FUuOcgB7VopFuUG0DIPMUx+mMMrvvd/X+nxCiAwwhYaDYxec6m8NVvEfbLvf RexTZVh8fmU7zLwICkAAcBDfVnPCaA9Y9wA0IWc3izlDiyiEzxWghHb89KRR6roE AP+PDF/2Co4eMeEMVAnErF2gns4eF8+PT5Nc4nfq+6RjSxTOdJcvCqDi4zKPydTa RyBLzgPxKKTjIkMPA7wOpObDsnB3TqKke17pn2Zw6gyQlvCCNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB9CninS2QrN+q5YDoNEM81d9Y1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTNkYTM5NjItYTQyMy0z YTA1LWE1MDctMzAwNjRhZjU0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmEwI4uZnhOqn11JEWjbYI3/7j5BOluO91QnGWM3VCtOh4UxsvTJyV0 uhbPwVo7xJQ6C74hl+JNdqm41KKNt+MHPuSeZzv9rns5gVEcms0Cf70LTzYfBa9j i5QAgsXuAoZXUebQ33MmbZRYIUGGO+WmfeZPgdce0Vcd7r9VGckY0OH66qPh0xDQ MAtaoluGRpTAJFr9DNfnRFUxTPI0qKoI0GXG9K91/XGHDubXfCpANdCzh823GhVe gjHur7zLanxuq/fuVDTL+0EuVdYK3YkUhhZqB4zw51l4ujos+1V+dxMwI/HjT8Jc nIVkxMfp9WwzfIKd5T4Ga3cMVPb2S+o= -----END CERTIFICATE-----Generated at Wed Nov 5 09:00:11 2025 by rpki-client