$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d82faadc-d1af-3160-b3d1-e33861e8b13a.roa File: d82faadc-d1af-3160-b3d1-e33861e8b13a.roa (raw, json) Hash identifier: H0VhV84qtNds6mm1eoCpmhpACdaY+Avyo4qltRYr4YQ= Subject key identifier: A7:A6:AF:DD:0D:64:A8:2A:03:82:9A:91:72:8E:CE:F8:B9:1F:46:16 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E21BE15F06B44A16157614 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d82faadc-d1af-3160-b3d1-e33861e8b13a.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1b:e1:5f:06:b4:4a:16:15:76:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=2d920ee1-4647-45f0-884a-09f405923654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e9:ba:b8:96:c9:91:b0:d5:df:0b:51:95:5e: 9c:24:70:8c:3f:d8:a1:c0:2c:5a:d9:30:6e:34:69: 38:a9:28:00:e9:91:b1:e6:66:d1:84:a0:1a:ab:22: 45:3a:41:44:0f:45:d5:33:e6:26:d5:a0:50:ae:dd: 7d:94:41:48:e0:aa:4a:a6:af:3f:1e:07:06:ea:ac: 0b:5a:12:0f:db:bb:20:25:ef:7a:a6:cd:b9:55:24: 61:d0:0d:66:1d:84:80:bc:fa:4b:c1:c7:b4:e3:39: 29:e6:74:7a:1a:2b:62:d1:89:a0:d1:a8:31:c5:87: da:eb:b4:aa:2a:97:63:59:47:a1:ce:a6:c7:d9:51: a3:ca:22:6c:62:ea:ee:ce:53:d2:62:8a:56:92:1d: 08:37:f9:ab:ab:37:be:2c:8b:40:20:a6:d5:75:1d: 93:7b:03:55:c2:cd:d4:82:67:ae:a5:37:a4:95:ea: c8:83:d3:f4:32:e6:4b:07:91:47:53:44:4f:1a:85: af:89:71:96:7d:7d:5d:82:9b:79:11:42:b8:c2:77: 1b:ab:64:c1:af:fd:95:de:69:71:13:62:46:3c:17: 02:5b:17:5a:96:18:a1:61:53:e3:61:26:f7:f5:28: 35:c0:8e:7c:07:3d:44:77:ec:ad:b7:3d:f1:47:ee: c2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A6:AF:DD:0D:64:A8:2A:03:82:9A:91:72:8E:CE:F8:B9:1F:46:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d82faadc-d1af-3160-b3d1-e33861e8b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a3:0e:75:c0:55:2a:c9:8d:b3:b7:43:84:ac:b7:27:bf:b1: 0d:3d:cb:e8:6f:9a:97:72:65:cf:25:b4:be:3e:91:57:5b:9c: b4:f9:47:e7:6a:cd:2b:fa:72:f9:a9:31:15:79:ba:4f:d3:0d: 3c:d2:84:95:50:1e:cc:b8:ba:43:01:2d:77:55:48:32:71:9e: dc:4f:8e:40:a5:52:29:d2:b6:54:44:d3:0c:8b:8f:4a:6b:16: 3b:ee:4b:25:03:f3:7d:8e:00:41:6e:8d:33:80:50:ca:ac:f4: 56:f9:00:41:f6:54:89:4f:cb:7a:7e:9f:b7:b9:fe:ea:57:d7: b2:65:b2:cb:39:6d:d4:4a:5b:21:0a:8f:5d:3f:0f:45:41:a0: e2:da:0b:f1:9e:b1:5c:b3:da:cd:1d:63:8b:46:08:71:4d:ec: 9a:8e:0d:c8:ed:e9:ca:4a:78:d7:55:ff:69:52:b3:a9:89:8a: 30:0e:dc:d2:05:5f:5c:26:2d:20:98:69:56:52:d4:b8:8f:9e: 30:7d:32:e8:40:25:df:fd:07:21:b6:8b:52:90:c8:23:fc:d9: e1:8f:4d:0c:ba:aa:47:07:e0:8f:76:2f:54:6c:3d:eb:dd:e0: 61:44:95:15:8c:26:45:f8:91:59:0d:0e:81:ca:a6:b3:91:04: 16:8a:87:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hvhXwa0ShYVdhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk MmQ5MjBlZTEtNDY0Ny00NWYwLTg4NGEtMDlmNDA1OTIzNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOm6uJbJkbDV3wtRlV6cJHCMP9ihwCxa2TBu NGk4qSgA6ZGx5mbRhKAaqyJFOkFED0XVM+Ym1aBQrt19lEFI4KpKpq8/HgcG6qwL WhIP27sgJe96ps25VSRh0A1mHYSAvPpLwce04zkp5nR6Giti0Ymg0agxxYfa67Sq KpdjWUehzqbH2VGjyiJsYuruzlPSYopWkh0IN/mrqze+LItAIKbVdR2TewNVws3U gmeupTeklerIg9P0MuZLB5FHU0RPGoWviXGWfX1dgpt5EUK4wncbq2TBr/2V3mlx E2JGPBcCWxdalhihYVPjYSb39Sg1wI58Bz1Ed+yttz3xR+7C5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKemr90NZKgqA4KakXKOzvi5H0YWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDgyZmFhZGMtZDFhZi0z MTYwLWIzZDEtZTMzODYxZThiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmjDnXAVSrJjbO3Q4Sstye/sQ09y+hvmpdyZc8ltL4+kVdbnLT5R+dq zSv6cvmpMRV5uk/TDTzShJVQHsy4ukMBLXdVSDJxntxPjkClUinStlRE0wyLj0pr FjvuSyUD832OAEFujTOAUMqs9Fb5AEH2VIlPy3p+n7e5/upX17Jlsss5bdRKWyEK j10/D0VBoOLaC/GesVyz2s0dY4tGCHFN7JqODcjt6cpKeNdV/2lSs6mJijAO3NIF X1wmLSCYaVZS1LiPnjB9MuhAJd/9ByG2i1KQyCP82eGPTQy6qkcH4I92L1RsPevd 4GFElRWMJkX4kVkNDoHKprORBBaKh4A= -----END CERTIFICATE-----Generated at Mon Sep 21 23:34:05 2026 by rpki-client