$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa File: 70a09cd3-6119-367f-927d-0e3a9d8bd100.roa (raw, json) Hash identifier: g3zDqRie8f30Opzmxnrqfhc57hJWNZGy/3k0qCTqx88= Subject key identifier: 81:6B:97:F5:3F:B3:43:20:55:A9:7A:50:27:F5:A4:9E:96:86:BF:9E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D773A779FDDA2C64E46E2F500 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 204.195.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:77:9f:dd:a2:c6:4e:46:e2:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=4fc09b1c-1fa8-46c0-9339-b7a6fcf93797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:ec:3d:37:5d:46:a3:1b:ff:0b:09:ba:66: 02:63:5e:d2:ba:ea:72:d3:8d:59:83:12:e0:85:8e: 73:ce:92:09:3e:99:2f:30:29:34:42:96:f1:6a:ce: 43:b8:47:2d:ee:1a:a8:c9:43:e0:3f:db:b5:75:27: 42:1a:1d:6a:6f:5c:66:b0:26:2e:5d:0d:ba:34:40: 3a:3a:00:3a:57:ed:1d:29:e3:53:87:fb:6c:bd:12: 3d:62:f2:55:29:22:91:fd:eb:41:eb:9e:a9:07:91: 07:12:1e:7b:a1:82:6a:22:ab:61:30:e9:96:86:52: 53:41:76:ce:48:41:24:18:21:d5:f4:08:c9:5f:76: 40:5c:17:88:4b:a6:92:4c:8e:ce:49:b1:87:92:00: ac:59:7f:a2:d6:02:db:5b:e0:13:10:4e:85:e3:6d: 5f:d5:70:e1:66:f2:61:97:5c:7c:e0:2e:18:16:a6: c7:25:62:7e:f7:ba:22:33:ab:c8:87:f5:5f:ea:fd: be:e2:b4:dc:e0:d9:6d:ee:1b:84:2c:fc:f5:72:97: 12:4b:e7:6a:81:69:32:d5:39:97:6e:c3:d7:55:fc: d8:4e:5c:3f:46:7a:d9:31:34:17:27:db:3e:b5:53: 75:39:8f:92:76:cb:80:43:31:18:9e:ba:54:f3:6f: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6B:97:F5:3F:B3:43:20:55:A9:7A:50:27:F5:A4:9E:96:86:BF:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5b:ce:8a:36:ac:c6:e8:8b:e1:c0:0c:f4:77:37:bb:49:b7: b7:34:cb:28:ad:c9:2d:4c:14:84:1f:1c:95:b8:3b:b0:84:1d: fd:a3:56:0a:5c:4b:87:ab:8f:07:5c:3e:9b:d1:73:bf:fc:b8: f0:69:2b:50:9b:f2:06:0a:82:a5:db:88:65:c6:92:92:5c:ef: d5:4b:ee:3b:87:14:e0:8b:90:b1:0a:7f:be:a2:3f:6e:65:5a: a5:5e:6b:61:46:8b:a6:4f:d0:5e:e7:7c:18:78:60:66:0a:ed: 3e:ba:fb:1f:55:50:17:77:20:84:40:6b:32:c4:17:f9:35:65: 6c:2c:c3:13:f9:64:be:ff:02:95:2e:ac:eb:2e:f9:5c:4a:66: 0e:22:7a:bc:22:91:f1:76:c0:56:5c:30:17:17:0e:2f:f1:90: 69:d2:3f:39:78:10:31:57:c0:67:79:33:13:64:c5:af:ed:50: 49:1d:24:b7:bd:10:57:d1:af:7e:2c:06:ce:9f:e7:67:d1:fb: d2:f8:dc:54:56:20:71:18:69:0f:19:58:d5:fe:48:14:8d:0b: 6e:dd:30:b9:29:ea:89:f8:73:c5:9c:8b:a0:99:6e:69:77:c0: 85:8b:28:bb:36:93:7f:00:8a:de:92:60:de:4f:c1:4b:c8:da: 7f:ca:0f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13Onef3aLGTkbi9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NGZjMDliMWMtMWZhOC00NmMwLTkzMzktYjdhNmZjZjkzNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArInsPTddRqMb/wsJumYCY17Suupy041ZgxLg hY5zzpIJPpkvMCk0Qpbxas5DuEct7hqoyUPgP9u1dSdCGh1qb1xmsCYuXQ26NEA6 OgA6V+0dKeNTh/tsvRI9YvJVKSKR/etB656pB5EHEh57oYJqIqthMOmWhlJTQXbO SEEkGCHV9AjJX3ZAXBeIS6aSTI7OSbGHkgCsWX+i1gLbW+ATEE6F421f1XDhZvJh l1x84C4YFqbHJWJ+97oiM6vIh/Vf6v2+4rTc4Nlt7huELPz1cpcSS+dqgWky1TmX bsPXVfzYTlw/RnrZMTQXJ9s+tVN1OY+SdsuAQzEYnrpU82+eNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFrl/U/s0MgVal6UCf1pJ6Whr+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzBhMDljZDMtNjExOS0z NjdmLTkyN2QtMGUzYTlkOGJkMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtbzoo2rMboi+HADPR3N7tJt7c0yyityS1MFIQfHJW4O7CEHf2jVgpc S4erjwdcPpvRc7/8uPBpK1Cb8gYKgqXbiGXGkpJc79VL7juHFOCLkLEKf76iP25l WqVea2FGi6ZP0F7nfBh4YGYK7T66+x9VUBd3IIRAazLEF/k1ZWwswxP5ZL7/ApUu rOsu+VxKZg4ierwikfF2wFZcMBcXDi/xkGnSPzl4EDFXwGd5MxNkxa/tUEkdJLe9 EFfRr34sBs6f52fR+9L43FRWIHEYaQ8ZWNX+SBSNC27dMLkp6on4c8Wci6CZbml3 wIWLKLs2k38Ait6SYN5PwUvI2n/KD+M= -----END CERTIFICATE-----Generated at Fri Apr 17 04:52:27 2026 by rpki-client