$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa File: ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa (raw, json) Hash identifier: wMMPkfYYhq+75m35cZro52H4WZxyVYePeoPkwjWxKIc= Subject key identifier: 30:DD:4E:FB:F1:3A:FB:02:73:70:59:69:F4:39:A3:DE:27:6D:3A:EE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25F2ECF27E0CD7E6F2120 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5f:2e:cf:27:e0:cd:7e:6f:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=75a458a6-4941-4278-b4a7-951a61ca6650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:7e:62:92:cb:5d:c9:8e:31:45:db:2d:ae: 7a:17:8a:74:c5:31:0f:91:6d:7b:61:4f:ce:c9:07: 13:f3:78:c1:66:06:8d:fe:c6:05:f4:b8:a1:a8:76: 5d:05:c6:83:15:15:fd:53:f8:9b:cb:4d:aa:41:f5: 21:78:2e:bf:b1:22:11:c6:87:67:bc:85:c0:32:ca: e2:6f:06:cc:e3:41:24:bd:63:39:bd:4b:d6:12:2d: 6e:cc:92:9c:50:b7:c9:fc:43:93:16:20:4a:9f:42: dd:6e:c9:1a:92:f0:06:96:c5:57:c2:08:a6:41:3e: 57:8f:66:f2:30:0b:7e:3a:bd:74:1d:7f:76:89:99: 01:01:77:4b:25:83:c0:4c:86:34:86:06:53:6c:ca: 57:9d:4b:db:64:fe:a1:44:1a:96:56:fe:90:c9:8d: c5:7b:52:6a:e6:47:20:7c:a1:9b:0f:e2:2c:ac:b5: 4e:39:d6:f2:77:cb:2b:eb:79:d2:4a:8b:0f:e3:60: 6e:3a:29:55:5b:f9:af:57:06:e6:6f:9e:ab:88:f3: 5f:4a:b3:14:17:2f:b4:2b:14:30:c4:e2:87:33:36: 99:10:34:e3:c0:8d:a2:b2:02:9a:c4:9e:df:d7:d3: eb:8e:0e:d8:5f:3e:46:90:12:b2:52:c9:ad:77:28: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DD:4E:FB:F1:3A:FB:02:73:70:59:69:F4:39:A3:DE:27:6D:3A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:45:a1:e0:af:5f:2d:6b:e6:5c:9b:6c:9d:8f:05:02:73:e6: 87:15:22:e0:43:d4:e7:94:c6:9a:b8:33:8c:17:99:a2:66:a3: 44:b7:6b:4d:a8:96:79:0a:d1:c3:a8:4b:25:f5:17:be:e4:74: 81:21:de:f8:41:e3:32:9d:fe:0b:06:22:e9:5c:c7:16:b8:28: eb:75:01:37:f5:57:4b:ed:3e:fe:94:c2:10:92:e6:d3:89:a3: f7:fb:c8:f5:11:8b:0f:a8:31:12:d6:2e:b0:73:81:1e:5d:20: 0b:09:e7:b6:1a:5a:c3:48:6b:f6:65:ef:00:5a:5f:a5:be:b3: 5f:89:fd:d8:96:44:43:a2:77:1d:08:1c:14:6b:58:14:43:45: e5:92:4a:32:dd:3c:c1:19:bb:4f:e7:8f:5f:22:3e:3d:50:7a: 73:80:4c:99:45:09:c1:22:00:2d:39:41:ff:11:70:5a:ab:7d: b5:74:67:47:5d:2d:d5:13:69:04:e6:28:6f:8f:94:33:d9:e3: 46:81:a5:b2:82:72:b4:69:a9:c5:28:06:31:e0:8e:36:a8:e7: be:14:91:ba:03:d9:9a:29:21:a7:53:66:65:c6:cf:21:ed:b3: b8:34:8b:51:81:28:b3:e6:43:4b:d8:ba:1b:c9:31:83:c7:e3: 8e:5c:e2:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl8uzyfgzX5vISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NzVhNDU4YTYtNDk0MS00Mjc4LWI0YTctOTUxYTYxY2E2NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAp+YpLLXcmOMUXbLa56F4p0xTEPkW17YU/O yQcT83jBZgaN/sYF9LihqHZdBcaDFRX9U/iby02qQfUheC6/sSIRxodnvIXAMsri bwbM40EkvWM5vUvWEi1uzJKcULfJ/EOTFiBKn0LdbskakvAGlsVXwgimQT5Xj2by MAt+Or10HX92iZkBAXdLJYPATIY0hgZTbMpXnUvbZP6hRBqWVv6QyY3Fe1Jq5kcg fKGbD+IsrLVOOdbyd8sr63nSSosP42BuOilVW/mvVwbmb56riPNfSrMUFy+0KxQw xOKHMzaZEDTjwI2isgKaxJ7f19Prjg7YXz5GkBKyUsmtdyiDbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDdTvvxOvsCc3BZafQ5o94nbTruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZWYzMmIxZWItNWExNC0z NGU0LWFmYmUtYTdkY2VlOWI2MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZFoeCvXy1r5lybbJ2PBQJz5ocVIuBD1OeUxpq4M4wXmaJmo0S3a02o lnkK0cOoSyX1F77kdIEh3vhB4zKd/gsGIulcxxa4KOt1ATf1V0vtPv6UwhCS5tOJ o/f7yPURiw+oMRLWLrBzgR5dIAsJ57YaWsNIa/Zl7wBaX6W+s1+J/diWREOidx0I HBRrWBRDReWSSjLdPMEZu0/nj18iPj1QenOATJlFCcEiAC05Qf8RcFqrfbV0Z0dd LdUTaQTmKG+PlDPZ40aBpbKCcrRpqcUoBjHgjjao574UkboD2ZopIadTZmXGzyHt s7g0i1GBKLPmQ0vYuhvJMYPH445c4so= -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:00 2025 by rpki-client