$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a01ed031-da55-390e-8a06-14c9d33d2825.roa File: a01ed031-da55-390e-8a06-14c9d33d2825.roa (raw, json) Hash identifier: 0w8FHpmBXhn1mPesws++zIHK9uHZ6Nf6N6rPGRu983c= Subject key identifier: 21:B5:AB:85:3D:5D:C0:EA:91:FC:6C:1E:56:3A:FB:FA:E8:20:2F:EF Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584C969C58268F09887813105870 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a01ed031-da55-390e-8a06-14c9d33d2825.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 204.195.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:58:26:8f:09:88:78:13:10:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=678b5600-1077-40c3-acdd-743ab4a33f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e0:17:c0:bd:9d:1f:0a:dd:ed:c1:11:fa:50: d5:7b:6f:03:2a:37:db:fa:cc:37:3e:74:33:d0:d8: ce:b6:54:9d:fc:06:c4:d1:68:b3:d3:7e:16:c6:7e: e9:a2:1b:0d:6f:d3:e4:57:f5:a2:6d:94:fe:c2:c8: 7d:80:12:9b:63:0f:ba:20:3a:42:9d:56:09:c7:12: 20:17:34:75:bf:10:be:ff:98:b7:21:7b:05:04:5f: 03:84:d9:c5:08:f3:1d:e6:ca:0f:cc:74:89:92:72: 9f:a6:ab:03:15:4e:96:1b:99:25:e3:03:b4:29:d3: 13:4f:a4:75:ee:3d:4f:ad:c3:e9:2f:3c:2a:7c:aa: 94:ca:52:c2:2a:12:50:3d:2d:5a:c5:74:bf:4e:32: 9d:ce:92:b0:ba:64:5a:dd:ef:d1:2d:4a:9a:f7:78: 3d:59:76:ec:e2:0f:bf:ec:27:80:89:39:65:97:4c: a7:c3:86:77:98:92:b0:2e:70:a1:5a:0f:8b:3c:5c: 7d:db:63:cc:5d:a2:01:54:24:64:e4:48:c4:aa:68: 81:e9:c0:2b:7d:dd:db:29:fa:b3:18:83:43:32:87: 0b:bb:af:7b:bd:af:8f:60:d2:cc:d1:4e:5f:ed:72: 83:03:88:89:b9:24:c2:24:ee:39:4a:7a:4d:0f:a9: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B5:AB:85:3D:5D:C0:EA:91:FC:6C:1E:56:3A:FB:FA:E8:20:2F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a01ed031-da55-390e-8a06-14c9d33d2825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:20:ad:14:3e:3e:7a:72:1a:e2:7a:c5:d2:d1:6c:23:53:75: ef:f4:85:46:06:e6:06:5d:9c:7a:d1:fd:67:af:f5:0b:26:48: c7:00:7e:cd:7b:73:0b:de:84:c1:38:3a:1e:13:8f:39:cc:9b: 4e:de:6d:4a:ba:14:d9:9b:c5:7c:05:ae:4e:8e:55:c9:02:98: 95:04:99:29:85:ed:98:50:bb:04:c5:1d:e9:0d:9e:e0:5c:b7: 34:2b:77:fa:26:ab:57:ec:1b:c4:c4:50:8d:c1:8b:9d:52:b0: 77:d7:57:39:16:10:ae:c1:56:a0:a0:84:2a:5f:bb:cf:ec:1e: ca:4a:26:d3:af:ab:ba:04:f7:de:62:30:9d:bc:05:7a:ec:66: e8:32:97:94:75:2f:d9:60:e8:8f:f5:2f:2b:b5:00:64:76:66: f4:94:5f:fd:1b:11:5b:9f:d4:c2:a4:ff:b7:39:e5:b9:b5:39: 40:34:4d:f3:5e:fb:df:da:fa:39:1f:ab:7d:14:de:48:33:29: 9f:61:da:3a:30:47:35:d0:63:2d:b7:4c:33:5a:36:6a:50:3c: 5a:38:00:f8:e8:4d:fa:c8:66:fa:35:08:cd:f4:2a:b4:d8:00: d5:a8:a6:c9:bc:4c:b8:2f:67:e5:ae:ab:b4:2e:77:f6:fe:94: 90:1a:8c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnFgmjwmIeBMQWHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk Njc4YjU2MDAtMTA3Ny00MGMzLWFjZGQtNzQzYWI0YTMzZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+AXwL2dHwrd7cER+lDVe28DKjfb+sw3PnQz 0NjOtlSd/AbE0Wiz034Wxn7pohsNb9PkV/WibZT+wsh9gBKbYw+6IDpCnVYJxxIg FzR1vxC+/5i3IXsFBF8DhNnFCPMd5soPzHSJknKfpqsDFU6WG5kl4wO0KdMTT6R1 7j1PrcPpLzwqfKqUylLCKhJQPS1axXS/TjKdzpKwumRa3e/RLUqa93g9WXbs4g+/ 7CeAiTlll0ynw4Z3mJKwLnChWg+LPFx922PMXaIBVCRk5EjEqmiB6cArfd3bKfqz GINDMocLu697va+PYNLM0U5f7XKDA4iJuSTCJO45SnpND6khzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG1q4U9XcDqkfxsHlY6+/roIC/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTAxZWQwMzEtZGE1NS0z OTBlLThhMDYtMTRjOWQzM2QyODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADggrRQ+PnpyGuJ6xdLRbCNTde/0hUYG5gZdnHrR/Wev9QsmSMcAfs17 cwvehME4Oh4TjznMm07ebUq6FNmbxXwFrk6OVckCmJUEmSmF7ZhQuwTFHekNnuBc tzQrd/omq1fsG8TEUI3Bi51SsHfXVzkWEK7BVqCghCpfu8/sHspKJtOvq7oE995i MJ28BXrsZugyl5R1L9lg6I/1Lyu1AGR2ZvSUX/0bEVuf1MKk/7c55bm1OUA0TfNe +9/a+jkfq30U3kgzKZ9h2jowRzXQYy23TDNaNmpQPFo4APjoTfrIZvo1CM30KrTY ANWopsm8TLgvZ+Wuq7Qud/b+lJAajCk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:51 2026 by rpki-client