$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9762a18d-e300-321e-9fcf-851f446c27d2.roa File: 9762a18d-e300-321e-9fcf-851f446c27d2.roa (raw, json) Hash identifier: i4lniL5sQLDipM2PAoDgSsLomiapCH2g0Xl2+E1/iK8= Subject key identifier: 4A:3A:C1:96:03:F9:D1:17:12:6A:76:C6:56:61:20:B0:03:1E:3C:C0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFBC4BB4153861D5CE900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9762a18d-e300-321e-9fcf-851f446c27d2.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fb:c4:bb:41:53:86:1d:5c:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=806f4203-e57e-429d-973b-2f33cc090900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e9:50:c3:62:81:78:f4:67:12:d2:e3:18:d9: f6:bc:44:a6:e9:b4:57:10:5d:8c:14:b5:ed:3e:24: 39:5d:53:a8:3e:4b:30:ba:c9:a5:67:54:14:30:4b: ff:57:53:52:4c:e3:17:1b:e8:0f:fb:2a:28:33:74: 81:d2:24:38:eb:11:e0:9c:e3:a5:06:92:ad:7d:38: 48:02:4c:ed:cf:40:db:d9:76:f7:56:eb:4f:fe:44: 59:cb:f2:00:33:5b:58:12:b8:8c:aa:51:13:b5:7c: 67:ee:41:02:36:fe:c2:eb:02:c0:5d:fd:d4:3d:50: d5:2a:8d:bd:4a:b7:97:81:40:9e:5b:50:8d:e8:ba: 8b:4e:9c:4b:7c:5d:0a:fd:f0:79:1e:63:da:38:51: ac:70:ff:0d:c9:44:22:7c:80:0c:cd:ce:a3:28:ec: 8d:cf:17:8c:2a:13:f0:81:8d:7b:50:c3:e2:3b:cc: 53:9e:2c:eb:da:63:92:96:9b:03:4d:76:03:21:27: 11:6d:3b:13:f8:2c:63:1e:f2:ee:ce:d7:eb:81:cb: 12:26:b8:71:c7:e7:b0:b7:da:79:aa:03:99:d0:31: 78:8a:39:c9:7a:84:f6:13:88:99:ca:e5:13:99:72: 96:bb:39:cd:d5:77:20:ef:0e:e3:3b:4c:ff:a9:53: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:C1:96:03:F9:D1:17:12:6A:76:C6:56:61:20:B0:03:1E:3C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9762a18d-e300-321e-9fcf-851f446c27d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bc:aa:1d:67:09:3f:2d:33:6e:87:10:59:02:dd:65:98:ce: 1d:49:e2:05:ea:f0:0e:14:fe:df:7f:64:30:dd:50:b2:bb:3c: 28:b3:9f:10:52:d4:eb:de:23:be:61:10:50:d4:65:5e:e7:23: 69:76:d1:ae:43:24:83:39:c6:76:4a:a5:b6:e2:31:64:ed:77: 22:02:92:d9:62:d0:fd:bd:ac:62:c5:5c:f1:fe:89:d0:c5:25: 09:c4:30:2b:90:49:0a:a5:3e:98:7a:a4:e2:9f:85:46:3b:15: 31:a4:f9:b4:eb:8d:de:f4:9a:70:6d:01:e7:22:be:e6:e4:49: f5:cb:3a:cb:04:12:28:03:14:8b:70:97:b4:b7:6c:4f:78:d8: 76:18:7d:60:0e:fa:8e:00:73:e1:2d:3d:8b:f9:4d:fe:7c:7e: 93:f4:d0:82:f6:15:a3:86:ac:d6:9c:4b:7a:18:1f:55:55:bf: f0:6a:0c:e2:0a:3c:eb:8f:f5:6d:1f:79:21:5e:24:66:78:d8: 13:6a:eb:1d:6c:44:ca:86:0a:33:f5:fe:20:b5:ca:62:1b:d3: e6:99:2a:d6:b6:4f:e0:90:75:ca:0c:f2:47:09:20:87:27:92: d7:db:a1:95:f3:69:49:ed:52:ce:1c:42:b8:6e:25:cc:e1:9a: f9:89:3b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfvEu0FThh1c6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ODA2ZjQyMDMtZTU3ZS00MjlkLTk3M2ItMmYzM2NjMDkwOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjulQw2KBePRnEtLjGNn2vESm6bRXEF2MFLXt PiQ5XVOoPkswusmlZ1QUMEv/V1NSTOMXG+gP+yooM3SB0iQ46xHgnOOlBpKtfThI Akztz0Db2Xb3VutP/kRZy/IAM1tYEriMqlETtXxn7kECNv7C6wLAXf3UPVDVKo29 SreXgUCeW1CN6LqLTpxLfF0K/fB5HmPaOFGscP8NyUQifIAMzc6jKOyNzxeMKhPw gY17UMPiO8xTnizr2mOSlpsDTXYDIScRbTsT+CxjHvLuztfrgcsSJrhxx+ewt9p5 qgOZ0DF4ijnJeoT2E4iZyuUTmXKWuznN1Xcg7w7jO0z/qVOLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo6wZYD+dEXEmp2xlZhILADHjzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTc2MmExOGQtZTMwMC0z MjFlLTlmY2YtODUxZjQ0NmMyN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy8qh1nCT8tM26HEFkC3WWYzh1J4gXq8A4U/t9/ZDDdULK7PCiznxBS 1OveI75hEFDUZV7nI2l20a5DJIM5xnZKpbbiMWTtdyICktli0P29rGLFXPH+idDF JQnEMCuQSQqlPph6pOKfhUY7FTGk+bTrjd70mnBtAecivubkSfXLOssEEigDFItw l7S3bE942HYYfWAO+o4Ac+EtPYv5Tf58fpP00IL2FaOGrNacS3oYH1VVv/BqDOIK POuP9W0feSFeJGZ42BNq6x1sRMqGCjP1/iC1ymIb0+aZKta2T+CQdcoM8kcJIIcn ktfboZXzaUntUs4cQrhuJczhmvmJO1Q= -----END CERTIFICATE-----Generated at Thu Nov 5 13:20:49 2026 by rpki-client