$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa File: 401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa (raw, json) Hash identifier: PZuctfdC/14Jx4L1mow/j+GWeBjy1bPiklifPhHf8i4= Subject key identifier: 1B:47:CB:96:FA:D6:31:46:09:1D:C4:8D:34:85:75:5F:EC:75:36:A6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E21BA30A4B712DB7B8C440 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1b:a3:0a:4b:71:2d:b7:b8:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=67222651-4dd4-4722-9e43-e62bf1fb1733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:73:9c:d3:19:81:4c:b8:b6:b6:d7:5a:67: 3e:dd:10:1c:01:8f:c2:4e:45:12:05:53:c7:3a:5a: 49:79:93:97:28:6d:8d:5a:ff:1c:3f:2b:53:cf:8b: 89:e6:85:96:8b:1d:98:96:98:b0:fc:5a:b0:00:a3: 95:98:c1:32:e1:27:b8:b8:ba:1e:e7:88:84:68:ff: cc:75:e5:72:09:15:04:9c:fe:12:56:81:28:2a:d1: bd:51:96:28:9c:80:92:14:c2:70:ba:ed:88:92:3b: af:c1:39:5e:b6:09:d3:e6:47:88:cd:88:0c:55:52: c5:c4:68:14:28:75:38:9b:f7:2b:04:e4:ff:4e:53: 70:e7:37:d1:48:bd:c9:96:9a:56:9d:84:b0:5a:9e: 7e:48:cf:60:e4:1b:8a:ae:7d:00:6a:b0:49:a1:24: 0d:4a:0c:c4:48:d1:84:27:5f:3b:1d:0e:6f:28:58: ef:98:f9:c4:fc:19:b9:cb:fb:f6:66:31:18:95:7d: 84:47:0d:94:87:b4:9e:78:a4:8b:d5:ac:55:3c:7b: 7c:a1:15:df:d0:18:ce:90:6b:0d:90:dd:33:17:b3: cd:9d:96:bb:5c:e9:b0:f1:22:40:f0:7b:43:d6:28: 49:fe:84:4b:3c:1b:b0:dd:71:d0:b9:5d:d5:b5:85: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:47:CB:96:FA:D6:31:46:09:1D:C4:8D:34:85:75:5F:EC:75:36:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0f:df:f4:99:bc:98:78:a3:57:ca:61:a7:63:b7:4c:e7:25: 82:a5:b7:97:28:37:9f:1e:8f:a1:73:4c:73:9e:93:76:d5:33: 0b:7c:a5:3e:de:3b:68:50:26:d6:2b:eb:f7:f2:aa:a2:53:a5: 30:2b:4a:9b:53:22:8c:55:38:8f:05:56:76:91:03:56:9a:6d: 76:3f:19:a0:ed:c0:a7:69:fc:cd:00:3a:af:0c:46:05:5c:a3: 9a:d5:b7:2f:d3:f3:10:db:ce:d4:4f:c2:ec:b5:00:68:b0:6e: 7b:55:e7:b2:20:39:3a:22:18:cd:1b:63:b5:21:78:c0:40:2a: a2:e1:c4:db:4c:fd:fb:54:ec:23:1c:1f:93:1e:1a:c7:7e:18: cb:6b:84:13:a1:57:04:e4:0a:24:3c:96:78:10:47:65:53:6d: 46:4d:ca:fd:5c:bc:b7:f7:1f:8b:f9:d0:2f:43:65:d9:74:79: 7f:28:78:7d:b6:8e:a8:8c:47:b1:a3:a5:7d:de:4a:18:f6:1a: ac:21:3d:f6:ef:ea:fc:c3:14:5d:83:ea:f5:40:69:90:56:95: 2e:aa:76:cf:6c:dc:7c:8e:c2:dc:c8:8d:87:a8:31:53:9e:a4: e8:92:0d:b0:ab:57:94:84:dd:04:eb:f2:1c:8d:bc:bc:c7:24: 3c:98:39:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hujCktxLbe4xEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk NjcyMjI2NTEtNGRkNC00NzIyLTllNDMtZTYyYmYxZmIxNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteVznNMZgUy4trbXWmc+3RAcAY/CTkUSBVPH OlpJeZOXKG2NWv8cPytTz4uJ5oWWix2Ylpiw/FqwAKOVmMEy4Se4uLoe54iEaP/M deVyCRUEnP4SVoEoKtG9UZYonICSFMJwuu2IkjuvwTletgnT5keIzYgMVVLFxGgU KHU4m/crBOT/TlNw5zfRSL3JlppWnYSwWp5+SM9g5BuKrn0AarBJoSQNSgzESNGE J187HQ5vKFjvmPnE/Bm5y/v2ZjEYlX2ERw2Uh7SeeKSL1axVPHt8oRXf0BjOkGsN kN0zF7PNnZa7XOmw8SJA8HtD1ihJ/oRLPBuw3XHQuV3VtYV4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtHy5b61jFGCR3EjTSFdV/sdTamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDAxYmRmNGItMGVlZC0z MDI4LTlkOTctN2Q5MDY1ZmYwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkP3/SZvJh4o1fKYadjt0znJYKlt5coN58ej6FzTHOek3bVMwt8pT7e O2hQJtYr6/fyqqJTpTArSptTIoxVOI8FVnaRA1aabXY/GaDtwKdp/M0AOq8MRgVc o5rVty/T8xDbztRPwuy1AGiwbntV57IgOToiGM0bY7UheMBAKqLhxNtM/ftU7CMc H5MeGsd+GMtrhBOhVwTkCiQ8lngQR2VTbUZNyv1cvLf3H4v50C9DZdl0eX8oeH22 jqiMR7GjpX3eShj2GqwhPfbv6vzDFF2D6vVAaZBWlS6qds9s3HyOwtzIjYeoMVOe pOiSDbCrV5SE3QTr8hyNvLzHJDyYOQs= -----END CERTIFICATE-----Generated at Tue Sep 22 11:28:29 2026 by rpki-client