$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa File: 62417797-3262-3688-802a-8deaa104663c.roa (raw, json) Hash identifier: yF56kd9zxJNFwdNzMAsGFT250JmCYeEeqES+yCoIj70= Subject key identifier: C9:EA:E6:DB:35:26:34:D4:D2:EB:62:96:B5:02:CD:67:E7:A8:85:84 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F093D0605771887E9B4ECD080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 204.195.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:06:05:77:18:87:e9:b4:ec:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=a584043e-dcda-4369-86bb-4b2860df8e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:a3:c9:58:40:23:a7:84:d5:77:88:b9:39: 54:c8:e3:06:e4:73:02:69:aa:41:41:fa:1b:54:0f: 29:b1:e7:a0:5c:52:70:68:a1:31:5a:51:85:b4:76: 86:99:77:4f:c4:13:2a:0b:bf:17:a1:b5:c0:fd:aa: 1e:0e:08:60:3a:c2:fc:b5:1c:ae:98:ed:56:d6:af: af:6a:c8:17:58:8e:9e:fe:50:87:eb:4c:26:fc:7e: 1a:11:ba:8d:a4:3e:99:e5:03:f0:3f:36:58:6f:70: c5:e7:b9:1e:97:57:f2:1e:c7:4e:9b:9f:02:ce:9f: 13:7f:63:cb:c5:39:34:b6:3c:a0:93:1b:68:39:6d: c9:95:44:16:ca:66:a5:54:f5:42:44:79:ba:12:96: 96:84:8d:50:78:a9:4b:76:12:7b:50:70:60:35:8f: 91:3c:86:4c:3b:f5:4b:d7:cc:f9:03:3a:b9:e9:c3: e5:d3:99:ff:2b:5d:44:19:45:58:ee:4d:79:c8:ae: 82:b8:fb:77:a3:b1:79:67:6b:35:e6:e0:5c:3d:54: 50:9d:84:4d:78:a7:48:af:44:fa:25:b6:db:df:3f: 88:ab:22:5f:93:1d:64:d0:db:90:6b:bd:2e:47:3c: da:8e:ab:ed:1e:72:c1:0f:a7:33:28:f9:36:97:9a: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:E6:DB:35:26:34:D4:D2:EB:62:96:B5:02:CD:67:E7:A8:85:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:77:85:0f:cf:44:0d:65:85:b6:ec:ef:b4:1b:96:e5:e1:45: 7b:17:87:3e:51:f7:38:8c:3b:13:0c:12:69:77:6f:2a:ff:d3: 18:77:9b:38:95:1a:88:ce:d2:9e:8b:10:95:fa:e1:c2:19:2e: 8f:35:71:b6:76:b3:4a:2e:a3:a8:b2:a8:87:54:15:d2:b7:98: d3:67:38:4d:b8:93:05:72:7d:8e:85:56:15:9a:e4:f9:c0:65: c9:41:e5:7f:76:59:61:ee:19:6b:64:27:27:e0:af:4e:97:c6: 9f:7c:e7:37:cb:4c:70:bf:4b:8a:b9:a7:20:ca:c1:e8:52:c2: 90:1b:e0:c3:e0:87:a2:eb:cb:80:89:dc:54:1d:9f:81:59:e7: 02:10:81:67:63:98:cc:e6:9d:e2:27:16:96:3a:a8:04:76:a9: 8d:cd:e9:29:da:8c:d2:69:8b:95:3b:93:28:23:db:3f:89:fe: 62:6d:d3:86:c5:5e:58:34:b9:bf:a5:9f:59:4f:8f:de:ea:1a: 6b:12:00:84:cd:4e:98:2f:42:45:6c:2b:f8:ef:d9:7a:39:ef: 72:22:f5:c2:d9:43:c3:60:4e:4a:d9:dc:61:8b:f8:dc:b2:2f: b9:fb:2d:72:23:93:36:94:9e:3a:ca:54:e0:92:c4:c0:f0:e5: 8e:ca:2e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQYFdxiH6bTs0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YTU4NDA0M2UtZGNkYS00MzY5LTg2YmItNGIyODYwZGY4ZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjejyVhAI6eE1XeIuTlUyOMG5HMCaapBQfob VA8pseegXFJwaKExWlGFtHaGmXdPxBMqC78XobXA/aoeDghgOsL8tRyumO1W1q+v asgXWI6e/lCH60wm/H4aEbqNpD6Z5QPwPzZYb3DF57kel1fyHsdOm58Czp8Tf2PL xTk0tjygkxtoOW3JlUQWymalVPVCRHm6EpaWhI1QeKlLdhJ7UHBgNY+RPIZMO/VL 18z5Azq56cPl05n/K11EGUVY7k15yK6CuPt3o7F5Z2s15uBcPVRQnYRNeKdIr0T6 Jbbb3z+IqyJfkx1k0NuQa70uRzzajqvtHnLBD6czKPk2l5rJ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnq5ts1JjTU0utilrUCzWfnqIWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjI0MTc3OTctMzI2Mi0z Njg4LTgwMmEtOGRlYWExMDQ2NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzMPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG53hQ/PRA1lhbbs77QbluXhRXsXhz5R9ziMOxMMEml3byr/0xh3mziV GojO0p6LEJX64cIZLo81cbZ2s0ouo6iyqIdUFdK3mNNnOE24kwVyfY6FVhWa5PnA ZclB5X92WWHuGWtkJyfgr06Xxp985zfLTHC/S4q5pyDKwehSwpAb4MPgh6Lry4CJ 3FQdn4FZ5wIQgWdjmMzmneInFpY6qAR2qY3N6SnajNJpi5U7kygj2z+J/mJt04bF Xlg0ub+ln1lPj97qGmsSAITNTpgvQkVsK/jv2Xo573Ii9cLZQ8NgTkrZ3GGL+Nyy L7n7LXIjkzaUnjrKVOCSxMDw5Y7KLk0= -----END CERTIFICATE-----Generated at Mon Sep 21 14:20:10 2026 by rpki-client