$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fd3093aa-4ee3-3e2a-a3d8-110a319257b4.roa File: fd3093aa-4ee3-3e2a-a3d8-110a319257b4.roa (raw, json) Hash identifier: v6upRBSsyJQbMk4DXr4N/Z9aUDgzJMJBcZbI1moXdmg= Subject key identifier: 0A:98:D2:CB:A8:24:CC:AB:D4:41:14:11:52:A1:DA:82:B4:76:D0:41 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB5C2651B185A23A2A6EE6080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fd3093aa-4ee3-3e2a-a3d8-110a319257b4.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 204.195.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:65:1b:18:5a:23:a2:a6:ee:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=3f1de489-1682-409d-af0e-701d6c47d700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ea:ba:37:c8:17:b0:4a:9d:a7:cd:82:4d:59: 75:6c:2a:80:91:c0:29:0a:76:6c:9e:e9:24:3a:e8: be:f2:3d:0f:46:58:df:8b:ba:62:e2:6f:63:64:ae: 9d:ef:41:13:cb:a1:db:8b:9f:18:ec:db:d2:19:e8: ca:0e:29:69:df:4f:6e:e8:2f:29:d0:88:b8:a7:fb: e3:87:63:df:40:f6:b5:b4:25:9e:ea:97:e4:d7:1c: b2:49:44:f9:fd:54:36:9a:35:bd:f8:6a:66:5e:cb: 14:f6:12:a8:bc:54:cb:d3:2c:33:3d:9e:c2:b7:96: 8a:28:ce:2e:8a:b5:03:c7:a4:fc:f6:de:d1:ea:78: 92:c2:90:a8:bd:8e:41:5e:26:0a:a7:b8:0c:88:e1: 79:5c:f0:31:68:b7:43:68:23:67:c7:db:17:f1:4b: 9b:91:40:87:96:d1:03:0e:c3:f6:fb:54:36:19:08: 4f:b0:cf:a9:db:1a:df:97:7b:90:2c:4d:c8:b2:93: ec:37:52:ce:88:af:a6:c7:9c:1b:cf:89:18:0c:c4: 41:50:c7:49:f8:32:8a:9d:d1:cb:a7:f5:bf:74:c2: d2:40:10:59:24:b7:74:6d:f4:18:dc:e2:e0:e4:51: 2d:f5:dc:94:8f:36:06:09:94:85:46:f6:61:0f:4f: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:98:D2:CB:A8:24:CC:AB:D4:41:14:11:52:A1:DA:82:B4:76:D0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fd3093aa-4ee3-3e2a-a3d8-110a319257b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:53:ee:98:d8:b1:19:4f:f5:67:d9:aa:2c:79:9e:96:36:ca: c8:97:63:c8:9b:b2:e4:a9:fd:b7:38:c2:c2:fc:84:33:47:d3: a2:04:3b:e2:f8:20:f9:6c:5e:b8:e1:8c:3c:18:83:41:c2:4c: 9e:e2:29:47:9c:46:54:a6:b1:16:85:83:ab:a3:01:2a:f5:a2: 4d:b1:f1:45:e0:45:e8:0f:4a:32:70:e9:71:4d:56:88:e8:ef: b4:0d:7f:62:51:d9:fb:55:3c:10:5e:59:8b:0d:12:43:4f:b0: ba:1f:98:2e:07:f1:59:ba:e1:75:11:f1:e6:d3:a2:4a:b5:ba: e3:b1:bd:15:a9:a4:1d:6e:ba:cf:25:8f:19:fb:f0:d0:a9:56: 6d:00:48:95:f0:ca:a1:00:64:b8:a1:d2:c9:a3:26:7b:dd:57: 19:da:b3:ef:3a:b6:e2:14:e6:bf:ff:87:11:d3:df:ab:b2:7b: db:7c:ba:4e:3b:a9:13:8c:84:1a:e1:06:fb:4b:b6:6c:93:96: 3f:ef:57:77:7a:94:c2:39:13:c6:cf:67:c7:6c:cd:de:54:89: a2:39:09:4e:fb:a3:ff:99:ea:b3:40:df:60:44:5e:49:ec:a7: 36:96:c6:94:7b:06:8a:92:53:d1:9b:89:f6:74:0d:eb:75:fc: 6e:ff:3c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmUbGFojoqbuYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk M2YxZGU0ODktMTY4Mi00MDlkLWFmMGUtNzAxZDZjNDdkNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uq6N8gXsEqdp82CTVl1bCqAkcApCnZsnukk Oui+8j0PRljfi7pi4m9jZK6d70ETy6Hbi58Y7NvSGejKDilp309u6C8p0Ii4p/vj h2PfQPa1tCWe6pfk1xyySUT5/VQ2mjW9+GpmXssU9hKovFTL0ywzPZ7Ct5aKKM4u irUDx6T89t7R6niSwpCovY5BXiYKp7gMiOF5XPAxaLdDaCNnx9sX8UubkUCHltED DsP2+1Q2GQhPsM+p2xrfl3uQLE3IspPsN1LOiK+mx5wbz4kYDMRBUMdJ+DKKndHL p/W/dMLSQBBZJLd0bfQY3OLg5FEt9dyUjzYGCZSFRvZhD0/CZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqY0suoJMyr1EEUEVKh2oK0dtBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmQzMDkzYWEtNGVlMy0z ZTJhLWEzZDgtMTEwYTMxOTI1N2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZT7pjYsRlP9WfZqix5npY2ysiXY8ibsuSp/bc4wsL8hDNH06IEO+L4 IPlsXrjhjDwYg0HCTJ7iKUecRlSmsRaFg6ujASr1ok2x8UXgRegPSjJw6XFNVojo 77QNf2JR2ftVPBBeWYsNEkNPsLofmC4H8Vm64XUR8ebTokq1uuOxvRWppB1uus8l jxn78NCpVm0ASJXwyqEAZLih0smjJnvdVxnas+86tuIU5r//hxHT36uye9t8uk47 qROMhBrhBvtLtmyTlj/vV3d6lMI5E8bPZ8dszd5UiaI5CU77o/+Z6rNA32BEXkns pzaWxpR7BoqSU9GbifZ0Det1/G7/PN0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:36 2025 by rpki-client