$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa File: 2721cc76-984d-3d59-b070-bc496caa0ffd.roa (raw, json) Hash identifier: fYCN5fgIlnM3eNxDlDcHoaiWiNG6GMwWvhgvyo5acjc= Subject key identifier: EE:93:C8:A2:F0:A9:43:E6:8B:FD:BE:04:BB:E2:31:B4:31:32:B2:91 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584C969C5A91A469D262C13209E0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 204.195.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:5a:91:a4:69:d2:62:c1:32:09:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=6d6dd79d-517d-4cfb-ac79-ae88c05e780c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:41:99:8d:32:4c:19:8c:d0:22:67:62:72: 08:ae:87:0b:f7:c0:be:bb:06:50:62:89:e1:db:e1: 43:1d:26:7c:2b:43:e0:5c:2a:a0:66:ef:cd:64:64: e3:03:72:8b:00:57:22:ad:17:cc:17:da:6c:c3:96: ec:c8:42:ec:ab:0e:7b:66:46:e9:32:8b:dd:99:29: 97:0c:31:e6:15:4a:ef:05:37:5b:a7:35:30:e0:8c: dc:08:4f:dd:07:5f:49:b8:50:bd:a0:34:69:86:45: 1e:c8:7f:6a:ea:2d:d2:21:e9:2b:03:05:a8:b4:5f: 91:e5:0f:14:bc:f3:2d:25:4c:46:ec:07:3c:21:d9: 14:ea:5b:07:41:4d:5e:b2:63:4a:2f:c2:79:a9:bf: 7e:f5:aa:54:62:a4:d4:26:e5:83:5a:87:fe:ce:d3: 0a:a8:cf:0d:8c:e0:57:66:76:ff:82:c4:7d:75:96: 63:a6:2d:fb:cd:dd:a2:18:6e:ec:e0:71:de:87:a4: 8e:a2:3a:b0:a5:1a:81:07:c1:57:4b:69:1b:ab:e7: 4d:f3:de:10:75:00:23:4f:a2:2c:a8:a3:39:bb:68: c4:28:3c:b5:8b:dc:aa:bf:44:47:18:28:78:27:d4: 97:1e:9e:e2:0c:0a:96:ef:7e:e7:b6:ec:94:cc:09: e1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:93:C8:A2:F0:A9:43:E6:8B:FD:BE:04:BB:E2:31:B4:31:32:B2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:80:e9:3b:62:5e:35:93:79:a9:d9:bc:7c:27:13:d8:7d:c0: 31:0f:b1:42:ea:fc:cc:c6:db:16:bc:47:70:e3:5a:30:6d:2e: 56:c2:dd:13:08:24:fa:0f:e4:a0:ae:3d:08:d1:56:8a:e7:21: 8d:ac:78:46:9a:c1:98:4c:48:9f:f4:c8:0c:40:8b:e1:13:5a: c9:92:f8:d0:9e:67:81:76:5d:42:00:ff:17:29:55:14:56:fd: 41:8c:f0:b8:14:b1:d3:68:40:4b:c0:bf:ac:59:03:fc:3e:91: 2b:b8:4c:37:60:56:f2:7c:48:b2:02:b1:e7:92:62:33:e0:b8: d3:d9:42:42:bb:8a:db:e0:07:7a:fc:66:22:cf:51:5a:95:c9: 4c:bc:72:d1:bd:f7:44:3c:89:95:97:3e:db:1f:f9:d3:d0:9b: 5b:7c:8f:83:b9:ae:5d:0d:7f:05:9a:c0:fc:06:65:1d:75:9e: 6d:07:0f:84:db:84:17:0b:29:93:bf:a7:7e:94:7c:5f:ef:18: 71:a3:0e:48:70:01:08:90:e9:8b:11:ef:81:47:20:28:42:b6: 32:8f:24:72:9d:47:8a:fe:31:6c:00:d2:b9:92:ee:40:7f:15: 7a:9c:cd:98:92:31:0e:64:fb:89:1e:65:5f:be:ef:a2:83:f3: 5b:8d:dd:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnFqRpGnSYsEyCeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk NmQ2ZGQ3OWQtNTE3ZC00Y2ZiLWFjNzktYWU4OGMwNWU3ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNtBmY0yTBmM0CJnYnIIrocL98C+uwZQYonh 2+FDHSZ8K0PgXCqgZu/NZGTjA3KLAFcirRfMF9psw5bsyELsqw57ZkbpMovdmSmX DDHmFUrvBTdbpzUw4IzcCE/dB19JuFC9oDRphkUeyH9q6i3SIekrAwWotF+R5Q8U vPMtJUxG7Ac8IdkU6lsHQU1esmNKL8J5qb9+9apUYqTUJuWDWof+ztMKqM8NjOBX Znb/gsR9dZZjpi37zd2iGG7s4HHeh6SOojqwpRqBB8FXS2kbq+dN894QdQAjT6Is qKM5u2jEKDy1i9yqv0RHGCh4J9SXHp7iDAqW737ntuyUzAnhkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6TyKLwqUPmi/2+BLviMbQxMrKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjcyMWNjNzYtOTg0ZC0z ZDU5LWIwNzAtYmM0OTZjYWEwZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKA6TtiXjWTeanZvHwnE9h9wDEPsULq/MzG2xa8R3DjWjBtLlbC3RMI JPoP5KCuPQjRVornIY2seEaawZhMSJ/0yAxAi+ETWsmS+NCeZ4F2XUIA/xcpVRRW /UGM8LgUsdNoQEvAv6xZA/w+kSu4TDdgVvJ8SLICseeSYjPguNPZQkK7itvgB3r8 ZiLPUVqVyUy8ctG990Q8iZWXPtsf+dPQm1t8j4O5rl0NfwWawPwGZR11nm0HD4Tb hBcLKZO/p36UfF/vGHGjDkhwAQiQ6YsR74FHIChCtjKPJHKdR4r+MWwA0rmS7kB/ FXqczZiSMQ5k+4keZV++76KD81uN3a0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:31:39 2026 by rpki-client