$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa File: d1a609a4-1014-3bdc-9236-560c8f8b9963.roa (raw, json) Hash identifier: Tt088a4bt19HujVlYlG0GFlphbLTBOdbseOgVFMFBZs= Subject key identifier: FA:AE:A6:0A:5C:20:A6:BF:96:1C:50:F2:D6:07:98:DD:BF:C7:61:15 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D773A7A54A615DDC5306FECC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 204.195.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:7a:54:a6:15:dd:c5:30:6f:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=a6f51364-9219-4f0d-96d5-e511e295e0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:28:b6:69:b3:78:a2:f3:6d:c2:4f:17:b0:47: 40:28:92:34:a3:15:9d:10:e0:77:a2:44:e3:d7:0d: d4:27:79:2f:80:ea:7c:7a:70:6e:67:71:b9:18:eb: 57:13:3f:84:37:f6:75:fe:4a:42:f6:49:ad:6e:d2: 3c:af:cf:4c:01:82:42:a4:0d:39:93:1d:ae:84:76: 4d:25:07:aa:7c:4e:70:28:2e:ed:74:08:3d:a1:ba: 06:f5:9d:43:1f:8c:51:de:97:fd:e4:bf:33:c3:46: 31:24:73:5a:9c:0b:3e:f7:c8:6a:91:61:6c:b1:25: 0a:ac:a7:f5:a6:05:21:90:95:92:00:35:32:d4:2d: 93:22:71:16:c3:31:69:db:3d:29:42:01:fa:71:59: 63:90:92:18:40:27:a8:3b:d5:4b:68:86:8e:34:d1: f6:0e:38:fa:79:93:fb:b9:c0:c9:c9:54:41:62:32: 04:0b:e9:dd:ac:7b:70:46:b6:b3:46:58:cc:ee:c1: d5:f3:61:df:80:f6:33:d7:d8:68:be:8e:90:43:0a: 3a:8f:b0:eb:63:7b:d1:24:35:9e:76:a0:70:c3:44: ca:79:e7:d6:6c:c1:74:ce:ae:a3:96:eb:f3:33:ac: 60:77:30:d7:27:27:8d:f9:e8:ce:74:44:25:62:30: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AE:A6:0A:5C:20:A6:BF:96:1C:50:F2:D6:07:98:DD:BF:C7:61:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d1:5d:20:56:47:b0:7b:90:ef:9b:3b:9d:8b:dd:3b:42:a4: 3f:6d:e6:e8:c0:d8:7f:1b:ba:fe:eb:bf:25:10:cd:c5:b2:18: 28:64:74:f4:54:8e:95:78:30:6d:59:65:59:72:9a:19:c2:f2: 33:a0:00:37:7f:ab:82:fe:12:6b:1a:32:dd:90:15:49:08:f2: b0:51:58:bf:4d:7d:0b:e1:70:e5:2a:2d:ba:fb:35:6a:f6:2d: 11:6e:f3:c7:40:60:b3:75:98:e9:f8:cf:ce:c4:62:b6:bd:31: 1f:54:0a:bd:0e:a2:6f:5b:fe:b8:24:5b:67:22:5b:30:6d:ce: 96:9b:d5:f6:04:be:d9:28:60:49:fe:6c:f1:3e:52:be:b0:b3: 72:b7:e7:fc:b3:c3:4e:4d:78:81:31:a2:08:0b:6f:e9:e9:24: 8e:d5:ec:92:29:1e:ae:5d:c4:a1:5d:de:89:db:c1:e8:e6:00: 73:0d:c9:33:d7:e3:a7:2f:95:67:64:cd:6c:fb:55:1f:1e:84: 10:b2:05:6a:3d:25:fa:68:72:77:4e:96:f0:b8:d2:33:f5:21: c3:e2:db:79:d0:87:c6:f3:42:22:62:0f:83:7b:52:78:78:ef: 92:ad:09:b9:8b:9e:96:8e:94:37:77:7b:66:b7:78:60:ac:24: cd:ab:c2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnpUphXdxTBv7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk YTZmNTEzNjQtOTIxOS00ZjBkLTk2ZDUtZTUxMWUyOTVlMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnii2abN4ovNtwk8XsEdAKJI0oxWdEOB3okTj 1w3UJ3kvgOp8enBuZ3G5GOtXEz+EN/Z1/kpC9kmtbtI8r89MAYJCpA05kx2uhHZN JQeqfE5wKC7tdAg9oboG9Z1DH4xR3pf95L8zw0YxJHNanAs+98hqkWFssSUKrKf1 pgUhkJWSADUy1C2TInEWwzFp2z0pQgH6cVljkJIYQCeoO9VLaIaONNH2Djj6eZP7 ucDJyVRBYjIEC+ndrHtwRrazRljM7sHV82HfgPYz19hovo6QQwo6j7DrY3vRJDWe dqBww0TKeefWbMF0zq6jluvzM6xgdzDXJyeN+ejOdEQlYjD5XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqupgpcIKa/lhxQ8tYHmN2/x2EVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDFhNjA5YTQtMTAxNC0z YmRjLTkyMzYtNTYwYzhmOGI5OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfRXSBWR7B7kO+bO52L3TtCpD9t5ujA2H8buv7rvyUQzcWyGChkdPRU jpV4MG1ZZVlymhnC8jOgADd/q4L+EmsaMt2QFUkI8rBRWL9NfQvhcOUqLbr7NWr2 LRFu88dAYLN1mOn4z87EYra9MR9UCr0Oom9b/rgkW2ciWzBtzpab1fYEvtkoYEn+ bPE+Ur6ws3K35/yzw05NeIExoggLb+npJI7V7JIpHq5dxKFd3onbwejmAHMNyTPX 46cvlWdkzWz7VR8ehBCyBWo9JfpocndOlvC40jP1IcPi23nQh8bzQiJiD4N7Unh4 75KtCbmLnpaOlDd3e2a3eGCsJM2rwj0= -----END CERTIFICATE-----Generated at Fri Apr 17 08:10:15 2026 by rpki-client