$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa File: f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa (raw, json) Hash identifier: bKINxRBR9EuPh10PxSpiY9uBwCr7yPNWOtcb+NyNjlk= Subject key identifier: 8A:AD:F7:9E:4A:71:2E:97:7F:04:9B:0C:AC:86:3A:D2:35:C7:43:56 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C25D33667D4E6D8457C070 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5d:33:66:7d:4e:6d:84:57:c0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=dbd1b3f2-3e86-4d3e-b090-e23800eaa4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:91:ae:a4:9e:52:8f:b1:fe:f6:32:0e:dd: a1:3a:be:99:9b:3b:14:42:37:06:fb:4a:ab:75:1e: 98:de:75:cd:cb:84:70:67:f7:d3:8b:50:76:e6:dd: c1:fa:71:d2:52:eb:7d:d9:c8:65:e9:84:08:9d:55: 9e:ac:f1:10:96:9d:7c:3f:ba:5e:a3:cf:da:a2:8f: 26:76:49:64:2a:43:a9:b4:3e:d5:c8:cb:d4:ef:83: 5c:a9:e8:37:51:74:f7:f3:5d:54:4d:8a:cf:cc:df: e9:92:30:f0:d0:a5:54:34:44:b0:6a:30:f9:8b:f4: af:91:80:01:ef:91:a6:77:fc:a3:ca:54:ca:e3:d6: 77:db:aa:35:9f:0a:b9:9d:a6:6a:eb:41:d4:93:72: 46:1c:2d:9e:b5:35:d6:40:51:de:52:ac:2b:fd:1c: c7:be:cf:e9:88:16:6e:d0:2e:d8:71:0f:40:db:80: a8:c9:6c:0b:57:4b:c2:39:17:83:4a:be:86:0b:14: 7b:62:32:06:a0:06:09:05:ec:57:47:fb:3e:f3:3f: 26:49:d5:65:1c:04:6e:41:c6:ed:cd:e1:9d:98:00: 22:57:45:c6:6c:8d:31:cc:c6:b2:86:ee:57:fa:cd: 67:74:79:91:26:5c:d2:cc:56:9e:de:2e:bb:67:3b: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:F7:9E:4A:71:2E:97:7F:04:9B:0C:AC:86:3A:D2:35:C7:43:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:fe:5d:62:dd:97:8f:0d:f1:d6:e1:ca:e0:87:52:80:b0:54: d4:09:5c:b5:f7:7c:3e:bf:5a:65:58:02:79:bb:11:c6:a5:92: 95:d0:56:cb:da:17:ad:6a:b4:12:64:87:1a:a1:70:58:6a:1e: 0c:4c:aa:f6:12:17:2a:24:ba:3d:52:e5:74:ef:91:83:d3:fc: 39:1a:8c:cd:38:cc:46:82:97:66:9d:6f:8f:fe:e3:8a:08:fd: 6b:4a:d3:f0:e5:cf:5b:65:de:f8:3b:02:4d:c5:81:63:e3:5b: ef:df:d4:46:0a:11:d1:e7:d8:9a:f0:3c:7e:1e:29:99:94:08: fd:8c:01:8d:1a:28:42:5d:7e:33:b4:ba:bb:e1:c8:4b:ff:b3: 01:aa:c2:72:b7:68:a6:51:57:bd:d2:3e:07:ca:45:0e:3e:ed: f7:64:49:b3:88:0b:1a:37:5d:8d:9e:2a:a5:ad:83:06:83:45: a7:15:07:be:af:db:6d:24:30:1d:11:e6:6a:58:e9:1d:87:65: b4:29:5e:51:e2:5d:50:f9:a5:fb:e8:a0:e9:38:21:be:93:2e: 96:1f:ed:a5:bb:26:d3:3b:fc:12:e0:0c:c0:d5:b7:5e:61:df: f0:8f:25:f0:83:c2:ce:ca:cb:e2:f5:4c:3d:af:f8:7e:84:c2: a0:3a:bd:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl0zZn1ObYRXwHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGJkMWIzZjItM2U4Ni00ZDNlLWIwOTAtZTIzODAwZWFhNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkiRrqSeUo+x/vYyDt2hOr6ZmzsUQjcG+0qr dR6Y3nXNy4RwZ/fTi1B25t3B+nHSUut92chl6YQInVWerPEQlp18P7peo8/aoo8m dklkKkOptD7VyMvU74Ncqeg3UXT3811UTYrPzN/pkjDw0KVUNESwajD5i/SvkYAB 75Gmd/yjylTK49Z326o1nwq5naZq60HUk3JGHC2etTXWQFHeUqwr/RzHvs/piBZu 0C7YcQ9A24CoyWwLV0vCOReDSr6GCxR7YjIGoAYJBexXR/s+8z8mSdVlHARuQcbt zeGdmAAiV0XGbI0xzMayhu5X+s1ndHmRJlzSzFae3i67ZzsAcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqt955KcS6XfwSbDKyGOtI1x0NWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjBkODVlN2MtZDIwMi0z ZTdiLWE2YTQtZTU2OTgzYmJmYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf+XWLdl48N8dbhyuCHUoCwVNQJXLX3fD6/WmVYAnm7EcalkpXQVsva F61qtBJkhxqhcFhqHgxMqvYSFyokuj1S5XTvkYPT/DkajM04zEaCl2adb4/+44oI /WtK0/Dlz1tl3vg7Ak3FgWPjW+/f1EYKEdHn2JrwPH4eKZmUCP2MAY0aKEJdfjO0 urvhyEv/swGqwnK3aKZRV73SPgfKRQ4+7fdkSbOICxo3XY2eKqWtgwaDRacVB76v 220kMB0R5mpY6R2HZbQpXlHiXVD5pfvooOk4Ib6TLpYf7aW7JtM7/BLgDMDVt15h 3/CPJfCDws7Ky+L1TD2v+H6EwqA6vdM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:20:59 2025 by rpki-client