$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa File: 3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa (raw, json) Hash identifier: hPRS3bDMesY8HatpKNZefALbjnf5+pcS5IwStM/EF3E= Subject key identifier: 42:C0:EE:0A:6E:1A:A2:F2:A0:72:14:4C:CC:86:A7:83:3C:3A:5C:79 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584C969C5C78FE3B00C06683CDC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 204.195.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:5c:78:fe:3b:00:c0:66:83:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=89713207-1c7e-4277-95cc-880661111204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:df:60:ee:31:8f:a6:68:5c:e4:30:37:54: e0:c3:10:2b:0e:09:fa:2b:ca:83:cc:16:1e:c5:32: f5:b9:0d:43:35:e2:a0:d9:52:de:f6:e3:8c:31:19: 6e:00:5f:6e:02:46:25:6c:f3:65:cb:93:77:1f:82: 64:1a:d5:48:d6:8f:f4:8f:88:b1:ad:5c:e0:e1:b9: 4d:53:8c:71:d6:a5:59:b7:a3:21:7b:3d:80:79:0d: 3f:2c:23:a9:fe:bd:26:8f:8a:c5:d2:4c:51:2a:cb: 71:f6:23:10:2c:6e:77:64:aa:be:08:b2:b7:32:32: b0:82:c1:ea:4a:c2:79:07:c4:4f:a4:bf:a3:4c:82: 4d:05:a8:ca:55:c6:88:77:6f:ef:31:41:10:b1:53: 8a:10:0e:dc:98:a8:9b:df:e3:f9:b7:eb:d1:56:bb: 2b:cf:aa:ae:00:9c:b7:44:44:2e:7f:4e:79:2d:18: 88:92:84:b2:04:cf:74:af:39:ff:b5:47:b0:62:06: d5:24:75:22:db:cf:ab:88:be:25:3d:ac:fd:8d:c3: de:64:4c:77:e9:44:5f:f4:f0:cd:3c:e6:ea:dd:32: 9f:01:a8:45:86:70:27:e4:b9:ee:12:8f:85:56:7b: e0:1c:59:5a:c2:2d:7f:85:12:91:61:e4:d1:48:72: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C0:EE:0A:6E:1A:A2:F2:A0:72:14:4C:CC:86:A7:83:3C:3A:5C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:37:60:16:21:81:37:52:ef:4b:1f:f1:df:37:f3:70:45:61: ee:cd:c2:56:45:b4:c3:8b:80:fc:ef:d8:14:82:b0:f2:4d:7e: 81:9f:0c:55:dd:36:e3:f3:83:71:e1:34:f8:db:41:e5:2b:2d: f3:20:ee:57:9b:07:e3:fb:1e:42:9b:fb:0b:2a:7e:2a:36:66: b9:fe:95:9d:59:1c:87:50:b0:c6:e3:6e:a0:3d:10:ae:5f:9a: f3:d6:9c:32:b7:cf:15:17:59:d5:f2:4a:aa:ea:dc:3f:fb:1d: 86:c8:55:86:d9:7c:3d:8a:27:2f:7f:bd:46:ef:f9:53:19:fd: ba:f8:09:c6:ec:a6:3d:9a:56:54:59:99:2b:5a:f4:a3:63:46: 18:25:28:ab:27:01:92:01:1b:d8:d6:1b:86:ef:3c:0f:cc:f0: fd:52:dd:34:c9:bf:47:03:1e:c9:54:05:6f:3f:92:ba:8b:2b: be:54:2d:16:ea:d7:89:7b:22:47:d5:4e:d0:a2:95:01:da:49: f5:33:29:2c:2d:0b:b9:ed:39:f4:f0:9c:57:db:11:ca:55:e2: 3c:ce:10:24:7a:d7:15:26:c4:01:94:9e:2b:a8:de:3f:fd:4b: b2:45:e9:c9:65:42:ab:84:bb:5c:e8:19:20:f2:89:b2:ca:69: 39:e2:c0:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnFx4/jsAwGaDzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk ODk3MTMyMDctMWM3ZS00Mjc3LTk1Y2MtODgwNjYxMTExMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjXfYO4xj6ZoXOQwN1TgwxArDgn6K8qDzBYe xTL1uQ1DNeKg2VLe9uOMMRluAF9uAkYlbPNly5N3H4JkGtVI1o/0j4ixrVzg4blN U4xx1qVZt6Mhez2AeQ0/LCOp/r0mj4rF0kxRKstx9iMQLG53ZKq+CLK3MjKwgsHq SsJ5B8RPpL+jTIJNBajKVcaId2/vMUEQsVOKEA7cmKib3+P5t+vRVrsrz6quAJy3 REQuf055LRiIkoSyBM90rzn/tUewYgbVJHUi28+riL4lPaz9jcPeZEx36URf9PDN PObq3TKfAahFhnAn5LnuEo+FVnvgHFlawi1/hRKRYeTRSHKLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELA7gpuGqLyoHIUTMyGp4M8Olx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2YwN2ZkNmEtOGRiZS0z MjE2LWFmMWMtNTFhYTU1N2FlNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk3YBYhgTdS70sf8d8383BFYe7NwlZFtMOLgPzv2BSCsPJNfoGfDFXd NuPzg3HhNPjbQeUrLfMg7lebB+P7HkKb+wsqfio2Zrn+lZ1ZHIdQsMbjbqA9EK5f mvPWnDK3zxUXWdXySqrq3D/7HYbIVYbZfD2KJy9/vUbv+VMZ/br4Ccbspj2aVlRZ mSta9KNjRhglKKsnAZIBG9jWG4bvPA/M8P1S3TTJv0cDHslUBW8/krqLK75ULRbq 14l7IkfVTtCilQHaSfUzKSwtC7ntOfTwnFfbEcpV4jzOECR61xUmxAGUniuo3j/9 S7JF6cllQquEu1zoGSDyibLKaTniwKg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:52 2026 by rpki-client