$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa File: 860a423e-5821-3417-a231-43f13e3ac94f.roa (raw, json) Hash identifier: COdBFmLtgQn5WRL9x88rmMCkGGTZpo26pTxg7YbEbYI= Subject key identifier: A9:DA:A3:0E:CC:B1:1B:0C:2A:AB:03:9B:5A:4D:38:D0:FE:39:E2:98 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584C969C568A92941FF10047CD80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 204.195.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:56:8a:92:94:1f:f1:00:47:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=3986e140-02c9-452b-a0f7-299cd1bb4e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:97:35:cd:ae:7d:ef:e3:06:de:e4:ea:cc:4e: 03:14:8b:94:f1:27:d9:b0:3f:cd:74:30:30:ac:63: df:02:fc:77:ad:78:d0:ce:49:da:50:78:fd:96:34: a0:5d:27:d9:9b:dd:be:46:16:ba:7a:10:64:32:96: e5:1a:09:01:a8:e9:b2:e3:78:7b:51:e2:ff:cf:1d: 10:1e:13:6c:0f:48:83:66:6f:f8:a0:93:d2:8d:b4: 07:8f:d7:7c:4e:99:a4:73:be:35:13:40:e8:37:82: c4:b3:e8:e9:aa:d6:f4:1f:95:58:3e:95:52:e3:6a: 18:ea:44:8d:34:78:5a:0a:2d:35:f8:96:25:59:ea: ff:95:ef:5b:97:8c:69:e2:8b:af:d0:7f:62:da:0c: bb:0b:20:be:52:fe:52:97:ef:58:43:df:39:ff:40: 0e:7e:89:8c:3b:9c:46:2f:8d:ca:71:c9:ab:6e:15: 08:10:86:d2:86:44:47:68:78:a3:0b:cb:f5:d4:2d: 27:e2:cb:5c:e8:13:01:9c:c1:fd:50:6c:0a:d0:bd: 48:ee:04:73:d2:38:0e:aa:a4:d4:88:39:3b:91:d6: 65:60:ee:b8:6c:dd:8b:1e:90:70:03:58:43:51:b5: 28:51:87:7f:06:20:f5:72:9d:38:f9:26:a0:cb:73: 93:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:A3:0E:CC:B1:1B:0C:2A:AB:03:9B:5A:4D:38:D0:FE:39:E2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9f:3c:8e:a0:3b:65:df:fa:64:40:16:0c:fc:2d:8f:0a:60: 43:3a:45:e1:56:cc:0e:12:c6:ca:99:24:56:49:f7:ac:51:82: 5c:5e:d0:78:3a:d1:69:01:09:a8:0a:d9:87:a6:df:a9:69:42: 51:96:fd:f3:20:8d:c9:c4:2a:b5:91:bb:50:7e:41:15:dc:53: f5:a4:a4:fa:dc:3e:85:cf:d2:4a:b7:aa:dc:04:d5:21:75:f2: 5c:32:2e:a2:83:b5:4b:c5:72:b1:df:76:d2:b0:43:4d:7a:ef: 18:0a:d7:84:3c:2e:f6:79:b0:e0:30:7b:c1:7f:8b:0b:bc:0b: 11:d2:84:0f:6f:fd:8b:fe:29:b8:6f:63:20:7e:9d:66:cd:ed: 22:d2:29:65:7e:a1:57:ea:f6:cf:23:fa:36:05:5a:5d:6f:2e: 2d:d1:2d:b8:29:23:41:c9:4d:51:b4:60:a6:47:3d:c2:9f:dd: b9:ff:70:f7:c0:4a:55:71:79:0a:02:ca:84:56:f3:dc:fa:62: 07:c4:ae:e5:7b:37:28:d8:bb:95:b4:c5:08:ba:4d:3f:c1:76: 72:12:41:86:b8:02:fe:e9:75:04:5a:9f:71:d9:70:c4:8b:ad: 78:4f:8d:18:c4:1f:c2:0c:d7:20:a5:35:11:a8:65:ee:5c:eb: 21:d9:5d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnFaKkpQf8QBHzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk Mzk4NmUxNDAtMDJjOS00NTJiLWEwZjctMjk5Y2QxYmI0ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85c1za597+MG3uTqzE4DFIuU8SfZsD/NdDAw rGPfAvx3rXjQzknaUHj9ljSgXSfZm92+Rha6ehBkMpblGgkBqOmy43h7UeL/zx0Q HhNsD0iDZm/4oJPSjbQHj9d8Tpmkc741E0DoN4LEs+jpqtb0H5VYPpVS42oY6kSN NHhaCi01+JYlWer/le9bl4xp4ouv0H9i2gy7CyC+Uv5Sl+9YQ985/0AOfomMO5xG L43KccmrbhUIEIbShkRHaHijC8v11C0n4stc6BMBnMH9UGwK0L1I7gRz0jgOqqTU iDk7kdZlYO64bN2LHpBwA1hDUbUoUYd/BiD1cp04+Sagy3OTtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnaow7MsRsMKqsDm1pNOND+OeKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODYwYTQyM2UtNTgyMS0z NDE3LWEyMzEtNDNmMTNlM2FjOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACfPI6gO2Xf+mRAFgz8LY8KYEM6ReFWzA4SxsqZJFZJ96xRglxe0Hg6 0WkBCagK2Yem36lpQlGW/fMgjcnEKrWRu1B+QRXcU/WkpPrcPoXP0kq3qtwE1SF1 8lwyLqKDtUvFcrHfdtKwQ0167xgK14Q8LvZ5sOAwe8F/iwu8CxHShA9v/Yv+Kbhv YyB+nWbN7SLSKWV+oVfq9s8j+jYFWl1vLi3RLbgpI0HJTVG0YKZHPcKf3bn/cPfA SlVxeQoCyoRW89z6YgfEruV7NyjYu5W0xQi6TT/BdnISQYa4Av7pdQRan3HZcMSL rXhPjRjEH8IM1yClNRGoZe5c6yHZXXg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:55:21 2026 by rpki-client