$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa File: c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa (raw, json) Hash identifier: 8PVSw/kUNgvbXQvcNQxQ2h9MEFj470KqxlsXkKxsSpU= Subject key identifier: 88:38:4F:5B:BC:70:9B:5E:FC:51:05:3B:9B:5E:5D:7C:CA:AA:53:C9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFD1E112C5E9C6069DF00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fd:1e:11:2c:5e:9c:60:69:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=68d91891-53b9-444b-a346-3084b7660182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:27:1e:6b:6a:ae:92:7d:5a:9b:43:56:c5: 01:00:4b:56:8e:44:d4:c1:8d:76:d1:ef:ae:e0:e8: ad:89:b6:91:8e:d5:e4:c6:14:be:6a:ac:de:31:d7: 0e:8e:54:29:f9:90:58:ef:5c:7e:8c:d1:a8:64:2c: 63:c7:ae:73:48:a9:75:28:40:8a:35:19:9a:35:09: 76:8e:d8:e2:ac:51:c9:cc:5b:50:86:cd:2f:2e:0a: 44:5d:96:73:1c:f6:d9:02:0e:4d:d0:cb:52:ca:99: 38:e7:a5:ab:38:ad:a6:36:05:9f:e2:67:2a:7b:cf: e3:8b:4d:89:16:f7:1f:00:bf:ed:55:52:72:93:0d: 60:9d:3b:c1:e5:b8:a9:55:b3:7b:93:dc:d6:3b:f8: 39:2c:e5:42:14:fa:b0:be:15:66:a4:50:14:99:43: da:13:8c:6e:01:78:93:95:66:af:ad:f1:d9:e9:23: 02:15:d1:13:06:31:76:ab:75:bb:bd:dd:3f:d8:2a: 8b:02:4b:87:cc:81:39:23:e9:12:04:02:c1:7c:bf: b1:28:8a:22:38:47:6b:77:ee:c2:40:b0:89:1f:64: 08:c8:5f:4a:ab:13:ee:5e:85:4f:48:aa:a2:ca:ce: 3d:7a:c5:39:e7:c2:d2:92:d6:3e:1c:00:55:83:f9: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:38:4F:5B:BC:70:9B:5E:FC:51:05:3B:9B:5E:5D:7C:CA:AA:53:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c31dfcb0-6ebb-3340-b5ef-db7be9f9532d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e1:c7:52:68:3f:08:fb:ed:98:22:ef:98:9a:7e:4a:06:49: 7f:3d:7c:fd:91:88:0a:50:0f:5c:9e:21:51:8a:8a:d8:45:1c: f8:5e:6b:7e:22:fc:65:74:3b:0e:0c:e6:f5:fe:a7:1e:0f:50: c9:c8:99:16:10:64:8e:4f:b6:a7:d3:24:81:57:fb:a4:19:98: 73:c9:59:1d:b8:b2:86:57:a4:7e:6e:dc:80:5f:3c:7e:2f:8f: 4a:34:ae:84:c0:83:a2:b6:c2:76:bc:9a:a4:78:8c:33:87:4e: 98:68:dd:67:7c:77:a9:c4:4a:39:06:57:8e:a8:68:d8:dd:47: 95:4f:82:db:a0:67:23:66:f4:73:f3:83:a6:28:2e:90:7b:47: e1:29:0e:ba:90:f4:eb:f5:e3:2b:f9:eb:08:9a:34:1b:0a:fd: 1c:60:15:1a:20:7f:6f:23:e4:cc:b4:e5:95:a6:5f:e8:f2:3c: 34:d1:70:9c:53:fc:df:05:fd:15:12:83:a5:d9:87:30:0b:94: ff:62:d4:76:de:09:89:c6:31:d4:d5:66:63:30:c9:cd:b8:f4: ce:08:cc:23:c5:1f:67:b7:e0:1d:79:0f:16:20:2f:0a:86:f0: 41:38:ab:cf:26:48:9b:ed:aa:bb:62:88:fb:1f:c8:b4:1b:c9: 03:ce:b5:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzf0eESxenGBp3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NjhkOTE4OTEtNTNiOS00NDRiLWEzNDYtMzA4NGI3NjYwMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUInHmtqrpJ9WptDVsUBAEtWjkTUwY120e+u 4OitibaRjtXkxhS+aqzeMdcOjlQp+ZBY71x+jNGoZCxjx65zSKl1KECKNRmaNQl2 jtjirFHJzFtQhs0vLgpEXZZzHPbZAg5N0MtSypk456WrOK2mNgWf4mcqe8/ji02J FvcfAL/tVVJykw1gnTvB5bipVbN7k9zWO/g5LOVCFPqwvhVmpFAUmUPaE4xuAXiT lWavrfHZ6SMCFdETBjF2q3W7vd0/2CqLAkuHzIE5I+kSBALBfL+xKIoiOEdrd+7C QLCJH2QIyF9KqxPuXoVPSKqiys49esU558LSktY+HABVg/ntXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg4T1u8cJte/FEFO5teXXzKqlPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzMxZGZjYjAtNmViYi0z MzQwLWI1ZWYtZGI3YmU5Zjk1MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnhx1JoPwj77Zgi75iafkoGSX89fP2RiApQD1yeIVGKithFHPhea34i /GV0Ow4M5vX+px4PUMnImRYQZI5PtqfTJIFX+6QZmHPJWR24soZXpH5u3IBfPH4v j0o0roTAg6K2wna8mqR4jDOHTpho3Wd8d6nESjkGV46oaNjdR5VPgtugZyNm9HPz g6YoLpB7R+EpDrqQ9Ov14yv56wiaNBsK/RxgFRogf28j5My05ZWmX+jyPDTRcJxT /N8F/RUSg6XZhzALlP9i1HbeCYnGMdTVZmMwyc249M4IzCPFH2e34B15DxYgLwqG 8EE4q88mSJvtqrtiiPsfyLQbyQPOtZM= -----END CERTIFICATE-----Generated at Sun Nov 15 20:31:42 2026 by rpki-client