$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa File: 860a423e-5821-3417-a231-43f13e3ac94f.roa (raw, json) Hash identifier: 0yVFVgIYxKgB28UKhDnrJDZxmSE4tMH+c+jYgQ8NrLI= Subject key identifier: 48:49:99:99:B3:C9:2C:E8:98:07:D3:44:5A:B6:C0:82:51:D0:EC:8D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D773A78A52C3A671E4AB33280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 204.195.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:78:a5:2c:3a:67:1e:4a:b3:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=ac35d242-a6b7-4940-84a2-1ad22ea42738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:3a:b4:15:89:99:f3:ff:22:69:7d:cb:1a: 6c:22:a3:e2:01:23:4e:bd:36:06:47:c6:f8:7e:3a: 25:cb:26:c7:55:f4:60:f1:b2:a8:3c:7b:0a:93:f3: 85:5a:14:19:bf:cf:92:12:8e:ef:dc:ff:1a:47:26: 80:8c:5f:dc:76:a8:8f:f6:fc:68:01:18:69:56:8a: d1:b8:ce:51:54:d8:0c:6b:fd:41:b6:27:84:c7:11: e4:8e:b9:e0:f6:38:ac:bf:9b:af:f7:02:6c:2d:83: bc:75:e4:c6:98:f8:5f:b9:1e:d6:42:7a:5e:c3:70: b5:ba:a2:16:55:67:0b:6a:69:f4:9d:21:69:eb:09: c1:61:75:b4:d7:25:15:5c:70:b4:03:56:7c:db:c8: a3:c9:df:e3:58:b6:00:0d:75:88:15:91:67:50:4f: 29:7e:fb:05:78:a3:01:79:d3:7b:a2:eb:b9:71:88: 78:da:03:d1:0d:df:91:76:66:05:61:20:30:f0:2e: 8b:5c:39:d4:1f:51:33:bd:be:1a:71:a1:b5:19:6e: 5d:1f:3f:94:db:19:79:6a:4f:89:0e:e9:7c:bf:f4: 35:0f:9b:2c:b2:1d:8b:4b:ae:28:0c:f1:8b:16:06: 99:b4:8b:f4:d7:d1:70:23:86:de:6c:40:fa:e1:0c: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:49:99:99:B3:C9:2C:E8:98:07:D3:44:5A:B6:C0:82:51:D0:EC:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ed:17:90:22:19:88:3d:39:b3:98:61:2d:51:23:47:44:6e: cf:66:bd:7e:d1:ce:ae:77:71:9e:a0:cb:9c:4a:b4:bd:0f:9e: a6:9e:35:50:38:2f:fc:bb:96:80:9a:5e:45:34:4e:89:4f:3d: 39:3c:9d:46:23:24:e7:84:b5:82:49:cf:87:a6:76:37:01:04: 63:f4:3c:a5:d2:bd:1a:22:5e:98:b9:84:3d:9e:17:06:3d:4e: 6e:65:75:78:dc:b9:72:c7:c0:01:cd:e2:8c:82:f2:6c:a9:38: 74:f9:be:ef:66:81:2d:1a:38:4b:6f:0e:8b:59:24:52:96:fb: e9:36:47:30:6f:62:18:d0:98:f7:54:08:7b:43:06:fc:ae:cb: 7e:24:49:ef:6f:78:fa:5b:3b:a4:c6:e6:9b:ba:33:e0:5d:2f: 82:8b:74:6c:ea:e9:98:20:53:79:db:df:3b:f6:43:e2:56:ba: 2c:aa:aa:26:a1:d8:af:a7:a2:27:89:23:8b:9b:81:2d:8d:a1: ec:5c:e6:ac:d7:68:e0:a7:80:14:86:fb:28:1e:cd:ed:55:a9: ad:b0:41:cc:b1:d4:ab:a8:34:39:f8:51:f4:7b:fa:0f:da:0e: 39:7a:d6:fa:67:e7:da:13:fb:43:6a:ff:82:35:ad:96:78:4e: 3f:7b:61:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnilLDpnHkqzMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk YWMzNWQyNDItYTZiNy00OTQwLTg0YTItMWFkMjJlYTQyNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc46tBWJmfP/Iml9yxpsIqPiASNOvTYGR8b4 fjolyybHVfRg8bKoPHsKk/OFWhQZv8+SEo7v3P8aRyaAjF/cdqiP9vxoARhpVorR uM5RVNgMa/1BtieExxHkjrng9jisv5uv9wJsLYO8deTGmPhfuR7WQnpew3C1uqIW VWcLamn0nSFp6wnBYXW01yUVXHC0A1Z828ijyd/jWLYADXWIFZFnUE8pfvsFeKMB edN7ouu5cYh42gPRDd+RdmYFYSAw8C6LXDnUH1Ezvb4acaG1GW5dHz+U2xl5ak+J Dul8v/Q1D5sssh2LS64oDPGLFgaZtIv019FwI4bebED64QzZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhJmZmzySzomAfTRFq2wIJR0OyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODYwYTQyM2UtNTgyMS0z NDE3LWEyMzEtNDNmMTNlM2FjOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLtF5AiGYg9ObOYYS1RI0dEbs9mvX7Rzq53cZ6gy5xKtL0PnqaeNVA4 L/y7loCaXkU0TolPPTk8nUYjJOeEtYJJz4emdjcBBGP0PKXSvRoiXpi5hD2eFwY9 Tm5ldXjcuXLHwAHN4oyC8mypOHT5vu9mgS0aOEtvDotZJFKW++k2RzBvYhjQmPdU CHtDBvyuy34kSe9vePpbO6TG5pu6M+BdL4KLdGzq6ZggU3nb3zv2Q+JWuiyqqiah 2K+noieJI4ubgS2Noexc5qzXaOCngBSG+ygeze1Vqa2wQcyx1KuoNDn4UfR7+g/a Djl61vpn59oT+0Nq/4I1rZZ4Tj97Yd4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:58 2026 by rpki-client