$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa File: c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa (raw, json) Hash identifier: Fgu+L8E35iCTuo67hBCxZboqiB0X+syRnfjBrTyoV98= Subject key identifier: 90:C0:57:00:AB:9D:80:18:61:CC:69:73:AF:93:E7:9A:62:EC:7D:C8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F093D068E0A9712084170D1F0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 204.195.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:06:8e:0a:97:12:08:41:70:d1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=2de9a54d-cffa-45ee-adba-55eb819e0f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:fc:2f:fc:a4:46:6b:60:67:a3:ec:6b:50: fb:38:b3:cf:d0:40:7c:fd:5e:6d:69:d9:29:ae:e2: b6:03:ef:29:e3:68:06:65:b6:cd:6f:47:1b:2c:f1: 63:52:fc:07:7c:63:1a:e3:01:37:05:36:19:76:9e: e4:51:39:fa:22:33:a1:ba:80:4c:c7:0a:fe:6e:51: 73:6d:64:b7:e3:c9:6f:77:fd:2e:8c:d1:09:eb:d8: 18:e9:7d:5a:aa:5c:83:79:8b:9e:39:22:72:2c:80: 45:46:d4:c0:49:f2:d5:44:c1:89:0d:95:c1:46:c1: 24:8b:24:76:5b:65:71:d4:8a:0d:ec:f9:fb:8c:a1: 8f:63:17:54:6d:69:b2:2f:b7:3c:f3:bc:ad:8d:a5: 64:e2:17:56:ed:ca:25:6a:b2:57:c0:fb:ca:27:a1: 29:5c:72:a8:d7:57:db:57:8d:29:02:ad:db:c3:ae: aa:c9:15:90:bc:59:ac:10:19:98:bc:e6:cb:77:75: 77:9a:8c:e7:4d:07:58:5a:77:a3:1b:38:13:ee:4d: 4a:66:84:74:fe:65:e9:ca:92:5a:4d:b2:1a:3e:ff: ff:58:10:02:f8:6d:28:38:5d:3a:5a:c5:72:9d:86: da:c4:9d:cb:88:13:40:3a:52:10:fa:f8:f1:e0:06: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C0:57:00:AB:9D:80:18:61:CC:69:73:AF:93:E7:9A:62:EC:7D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:db:d4:27:1e:78:37:8a:40:29:dc:88:10:f6:48:51:c5:f5: bd:00:43:f9:ed:6b:6f:05:4a:c2:e9:9f:e5:1f:09:f8:d2:0e: 45:ef:c7:fa:a1:d7:9a:87:20:6c:a8:52:9c:6d:a2:7e:4f:f5: 72:4c:ab:3f:c7:7a:51:8c:11:a3:30:66:c2:2f:f5:9e:b8:82: 9e:78:2e:ca:b0:3c:bc:0c:0b:94:35:0e:86:b6:13:a6:29:46: 15:e4:b6:ea:b6:af:ff:60:fd:d6:f8:03:48:f3:23:10:4c:7d: f7:4c:06:21:86:9e:b1:36:c5:fc:0e:03:c7:dc:ec:16:48:69: c9:fe:97:de:ef:8b:c5:d1:de:2e:76:d0:74:95:ec:97:ab:2f: db:4d:4f:69:90:95:90:cc:37:56:b1:4e:b7:f9:0d:36:9d:47: b1:41:b1:d0:c1:63:03:f2:db:35:30:9b:af:ff:aa:e5:01:c1: b6:b7:97:c3:91:86:26:e0:b1:21:66:18:08:ce:d4:d1:61:f2: fc:ad:8f:ac:da:d1:38:15:b5:8b:98:e5:9e:98:b5:e4:fd:1c: b8:bc:d8:22:b8:17:95:5d:12:0c:6d:7b:e9:cf:6f:b0:d8:c9: ce:62:c9:82:a9:f5:91:63:41:13:22:17:88:e6:56:5d:59:e4: d0:98:4e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQaOCpcSCEFw0fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MmRlOWE1NGQtY2ZmYS00NWVlLWFkYmEtNTVlYjgxOWUwZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO78L/ykRmtgZ6Psa1D7OLPP0EB8/V5tadkp ruK2A+8p42gGZbbNb0cbLPFjUvwHfGMa4wE3BTYZdp7kUTn6IjOhuoBMxwr+blFz bWS348lvd/0ujNEJ69gY6X1aqlyDeYueOSJyLIBFRtTASfLVRMGJDZXBRsEkiyR2 W2Vx1IoN7Pn7jKGPYxdUbWmyL7c887ytjaVk4hdW7colarJXwPvKJ6EpXHKo11fb V40pAq3bw66qyRWQvFmsEBmYvObLd3V3moznTQdYWnejGzgT7k1KZoR0/mXpypJa TbIaPv//WBAC+G0oOF06WsVynYbaxJ3LiBNAOlIQ+vjx4AZ92QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDAVwCrnYAYYcxpc6+T55pi7H3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzg0OWRkNWItNDZjMy0z MWJkLWFhZGItNjZhN2Y3ZTY5ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzMPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnb1CceeDeKQCnciBD2SFHF9b0AQ/nta28FSsLpn+UfCfjSDkXvx/qh 15qHIGyoUpxton5P9XJMqz/HelGMEaMwZsIv9Z64gp54LsqwPLwMC5Q1Doa2E6Yp RhXktuq2r/9g/db4A0jzIxBMffdMBiGGnrE2xfwOA8fc7BZIacn+l97vi8XR3i52 0HSV7JerL9tNT2mQlZDMN1axTrf5DTadR7FBsdDBYwPy2zUwm6//quUBwba3l8OR hibgsSFmGAjO1NFh8vytj6za0TgVtYuY5Z6YteT9HLi82CK4F5VdEgxte+nPb7DY yc5iyYKp9ZFjQRMiF4jmVl1Z5NCYTpc= -----END CERTIFICATE-----Generated at Sun Sep 20 18:16:56 2026 by rpki-client