$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa File: ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa (raw, json) Hash identifier: eHAUXvAn2bqOdChNIctyiTPwimLQC4Fb0erkdBXXBVc= Subject key identifier: DB:99:4F:9E:54:44:DE:08:CF:36:66:36:A1:A1:53:8D:1A:C2:62:B7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D773A7AE70CEC496393BCDE80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 204.195.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:7a:e7:0c:ec:49:63:93:bc:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=fa5d44b1-6d2e-47e5-bc4c-6a75753b6b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:d8:19:e6:4d:7a:69:32:6e:84:8b:3d:dc: 1b:c9:f0:7f:f8:9b:66:8a:16:b1:6b:dc:3a:81:99: 51:ac:99:92:6e:f4:98:ae:49:db:e3:48:0a:6d:33: 2e:57:f1:f8:41:d6:89:00:de:43:b2:b8:39:aa:c7: e3:02:98:b7:5b:20:b6:fe:df:a8:d1:8d:be:ce:31: cd:4e:81:53:e5:7e:80:f1:58:ab:e8:dd:20:d9:63: 11:c8:ed:cf:39:b3:bb:93:67:4c:3d:dc:a6:5f:d5: 07:5c:2d:a0:e9:5b:44:0e:09:81:5d:16:94:1d:c2: c6:63:5e:1a:78:f4:70:19:f1:6c:52:ee:8a:35:f0: c8:73:78:5e:ca:54:b6:ab:81:79:3d:ef:c1:3f:4b: 6e:87:6d:fc:95:4d:f9:db:eb:6d:e1:af:a4:6a:b8: 72:42:60:71:ae:fa:18:17:3a:c4:87:a6:36:16:33: f7:8b:fa:47:08:24:15:f1:46:11:0a:8e:82:a4:aa: 9b:53:d4:68:50:f2:24:b7:81:5d:1b:cb:dd:64:e1: d5:3b:19:ea:56:c8:24:70:59:de:15:c8:2c:7e:a1: 1a:88:17:0a:8d:5a:1f:64:04:dd:c8:c3:ce:88:53: 0d:71:04:6e:34:a5:5d:5d:0e:d5:e5:02:6c:d4:08: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:99:4F:9E:54:44:DE:08:CF:36:66:36:A1:A1:53:8D:1A:C2:62:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f5:3b:b3:3b:f9:b1:b2:01:cc:59:8a:db:74:a8:38:d2:cb: 44:60:42:14:d5:dd:c4:1e:e8:26:24:30:99:16:00:90:f0:ec: f7:1f:45:71:2f:e7:62:31:c5:bf:f9:83:61:6e:7c:86:08:96: cf:4b:70:db:0e:90:36:1c:85:5f:cc:4e:1d:4c:66:5f:66:ce: 01:3d:91:21:9e:2a:a9:52:24:36:28:08:d3:12:61:ff:e5:73: a3:e8:aa:7f:0f:90:48:5e:23:05:5d:08:e0:77:c2:01:19:5f: 85:8b:d8:7d:c6:4b:01:74:54:59:d9:35:f0:55:24:7a:8d:c7: e6:3f:db:dc:77:27:3c:a5:e7:25:b2:d3:8e:5a:c0:34:a9:ec: 88:68:dc:83:46:35:ee:29:96:fd:2b:42:74:79:d4:8e:b0:fe: c7:83:43:bf:3c:58:26:96:66:94:f7:93:94:95:14:79:f1:48: 92:3e:1d:7b:64:8c:a1:81:87:fb:0b:9f:7d:a4:cb:87:e4:19: bf:18:53:5d:80:b4:c5:f4:94:04:eb:10:ea:60:9d:1e:c1:c0: 54:01:6c:08:8b:15:cd:d9:f6:da:43:4d:2a:75:f3:1c:4d:4f: 40:c3:db:65:32:25:8d:e5:38:e2:c0:65:d4:fd:41:a0:c4:b0: f9:58:45:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnrnDOxJY5O83oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk ZmE1ZDQ0YjEtNmQyZS00N2U1LWJjNGMtNmE3NTc1M2I2YjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHzYGeZNemkyboSLPdwbyfB/+Jtmihaxa9w6 gZlRrJmSbvSYrknb40gKbTMuV/H4QdaJAN5Dsrg5qsfjApi3WyC2/t+o0Y2+zjHN ToFT5X6A8Vir6N0g2WMRyO3PObO7k2dMPdymX9UHXC2g6VtEDgmBXRaUHcLGY14a ePRwGfFsUu6KNfDIc3heylS2q4F5Pe/BP0tuh238lU352+tt4a+karhyQmBxrvoY FzrEh6Y2FjP3i/pHCCQV8UYRCo6CpKqbU9RoUPIkt4FdG8vdZOHVOxnqVsgkcFne FcgsfqEaiBcKjVofZATdyMPOiFMNcQRuNKVdXQ7V5QJs1AjyTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuZT55URN4IzzZmNqGhU40awmK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2E2ZDNjOWYtOWI0Ny0z YWY4LTg2NDQtY2EyNTY4MGI4OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv1O7M7+bGyAcxZitt0qDjSy0RgQhTV3cQe6CYkMJkWAJDw7PcfRXEv 52Ixxb/5g2FufIYIls9LcNsOkDYchV/MTh1MZl9mzgE9kSGeKqlSJDYoCNMSYf/l c6Poqn8PkEheIwVdCOB3wgEZX4WL2H3GSwF0VFnZNfBVJHqNx+Y/29x3Jzyl5yWy 045awDSp7Iho3INGNe4plv0rQnR51I6w/seDQ788WCaWZpT3k5SVFHnxSJI+HXtk jKGBh/sLn32ky4fkGb8YU12AtMX0lATrEOpgnR7BwFQBbAiLFc3Z9tpDTSp18xxN T0DD22UyJY3lOOLAZdT9QaDEsPlYRVA= -----END CERTIFICATE-----Generated at Fri Apr 17 04:52:25 2026 by rpki-client