$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa File: d1a609a4-1014-3bdc-9236-560c8f8b9963.roa (raw, json) Hash identifier: KVzKLNzUzNllmm2lpAfQPGLErfnHtfSIurFB4eTHZ2c= Subject key identifier: A1:46:7C:00:BA:84:09:D3:96:32:91:8F:2A:B9:80:C8:AD:4F:5F:68 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E21A9265A9F49487C65180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1a:92:65:a9:f4:94:87:c6:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=fa5ee2d9-10ed-443a-af73-82f4049fc7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:5e:8f:91:da:a7:76:05:02:7c:75:90:75: 29:42:d4:04:3f:cf:1a:8b:9f:21:2e:53:60:28:98: 7e:95:d4:3f:b5:4a:3b:f9:17:bf:c8:cb:a8:76:17: 33:dd:66:ef:fb:40:f7:52:bd:5e:93:1b:ec:86:c3: f2:a5:fe:a9:00:f2:b4:2c:2d:fb:c1:e5:6c:99:9e: bc:06:de:5b:dd:f3:2e:86:01:dd:68:2b:46:29:66: 69:60:4a:ba:3b:74:4b:e7:ad:dd:50:2f:20:4f:ec: 2a:47:7e:c8:20:1d:38:37:8d:5a:a6:ab:cf:a5:08: b7:2b:d8:72:72:4b:f8:96:1f:ba:b2:85:b4:d1:85: 22:4d:25:25:d7:f3:e8:15:1a:d3:9b:45:3e:6e:0b: 5d:69:99:09:fd:99:c5:c5:b1:6b:4d:7e:d0:df:33: 84:5f:ef:38:80:81:cb:f2:80:32:cd:a3:99:bd:9b: 15:42:97:16:f9:83:45:44:bb:1b:28:d5:0b:7d:d4: fc:5e:d6:e3:b1:7e:d6:6d:03:cf:5a:fa:33:e9:46: 62:32:90:18:c6:ee:56:ef:d5:b3:cf:67:7b:17:d1: 58:51:c0:ef:2f:80:3b:c5:de:f7:ff:db:eb:49:3c: 82:63:99:74:3b:7d:06:8b:87:a4:80:f9:53:25:13: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:46:7C:00:BA:84:09:D3:96:32:91:8F:2A:B9:80:C8:AD:4F:5F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:53:f9:45:98:ac:48:dd:dc:fc:c8:71:5d:88:09:bf:ac:f0: 7b:1c:ee:10:f5:a6:cd:79:56:c1:8a:1c:60:17:53:58:37:fd: e6:12:fc:4f:13:c1:fb:a3:cf:ec:11:49:e9:e3:2c:fb:36:e5: e5:5d:14:04:3b:6e:99:ee:bd:4a:8b:36:20:eb:de:2a:aa:e4: e9:cb:f0:04:56:f4:40:f2:ed:da:20:e0:3d:86:f3:89:c4:0c: 8e:d2:82:51:d4:30:32:fd:e5:ec:18:08:8d:4c:39:68:ee:3a: 1a:d9:b0:ea:0f:b5:52:c4:99:e6:4e:6a:20:a5:1c:78:be:a4: 15:7a:82:e3:63:b7:41:22:51:82:b8:e7:02:b6:c3:a3:48:e4: 5a:0d:16:7e:3f:81:00:2d:09:b2:be:50:5f:07:ba:96:0d:bc: 7f:32:9a:5d:ae:cd:ac:ee:58:dc:c4:5d:96:77:c3:3e:9c:5d: be:8d:63:21:d8:47:7c:cb:a2:35:af:18:9c:a4:5e:fa:de:98: 07:12:40:c2:84:81:dc:74:3c:c9:7f:f1:b2:09:be:75:1d:48: 96:1e:20:81:29:f8:60:bd:90:ba:3e:53:25:e6:3d:19:98:7e: b8:5e:cf:0e:dc:bc:11:d9:4d:f6:d2:f5:5d:93:8e:83:7d:25: 21:8a:d4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hqSZan0lIfGUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmE1ZWUyZDktMTBlZC00NDNhLWFmNzMtODJmNDA0OWZjN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUNej5Hap3YFAnx1kHUpQtQEP88ai58hLlNg KJh+ldQ/tUo7+Re/yMuodhcz3Wbv+0D3Ur1ekxvshsPypf6pAPK0LC37weVsmZ68 Bt5b3fMuhgHdaCtGKWZpYEq6O3RL563dUC8gT+wqR37IIB04N41apqvPpQi3K9hy ckv4lh+6soW00YUiTSUl1/PoFRrTm0U+bgtdaZkJ/ZnFxbFrTX7Q3zOEX+84gIHL 8oAyzaOZvZsVQpcW+YNFRLsbKNULfdT8XtbjsX7WbQPPWvoz6UZiMpAYxu5W79Wz z2d7F9FYUcDvL4A7xd73/9vrSTyCY5l0O30Gi4ekgPlTJRPYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFGfAC6hAnTljKRjyq5gMitT19oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDFhNjA5YTQtMTAxNC0z YmRjLTkyMzYtNTYwYzhmOGI5OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZT+UWYrEjd3PzIcV2ICb+s8Hsc7hD1ps15VsGKHGAXU1g3/eYS/E8T wfujz+wRSenjLPs25eVdFAQ7bpnuvUqLNiDr3iqq5OnL8ARW9EDy7dog4D2G84nE DI7SglHUMDL95ewYCI1MOWjuOhrZsOoPtVLEmeZOaiClHHi+pBV6guNjt0EiUYK4 5wK2w6NI5FoNFn4/gQAtCbK+UF8HupYNvH8yml2uzazuWNzEXZZ3wz6cXb6NYyHY R3zLojWvGJykXvremAcSQMKEgdx0PMl/8bIJvnUdSJYeIIEp+GC9kLo+UyXmPRmY frhezw7cvBHZTfbS9V2TjoN9JSGK1Hs= -----END CERTIFICATE-----Generated at Sun Sep 20 20:31:34 2026 by rpki-client