$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/db6c15b5-bfb1-3ea5-99da-94cb828fc21d.roa File: db6c15b5-bfb1-3ea5-99da-94cb828fc21d.roa (raw, json) Hash identifier: ILVLll4tAzBzko9uJ+6d8/aPaVHf2/CAu7yg+ag1q6U= Subject key identifier: 91:16:76:70:65:CD:70:83:6C:E1:69:0B:A7:EC:01:A5:FE:30:2E:D6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFC708B56DED07932C454 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/db6c15b5-bfb1-3ea5-99da-94cb828fc21d.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fc:70:8b:56:de:d0:79:32:c4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=da2f7d29-3efe-41d3-a82c-c05926adbe5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:b0:c6:85:36:4d:20:71:d0:1c:f6:18:32: 7f:b3:34:e3:03:8d:b9:b3:29:20:b7:cb:f7:bc:37: 7f:ce:4d:f5:0e:cc:20:e3:11:6b:56:fa:8e:b7:26: 28:5e:68:ea:e8:e6:d8:a3:d2:e2:0b:fc:dd:10:3a: 93:7a:18:8e:2c:99:4a:0a:01:2f:32:2f:7b:1e:92: 1e:74:1c:04:74:d1:ad:a2:27:b4:7f:f0:d9:72:1c: da:fb:a0:41:26:8f:d8:04:89:59:d3:37:76:af:ba: 6a:02:08:66:10:ef:71:ac:63:72:74:bf:a7:98:1c: 4f:8f:68:ee:35:a6:10:ee:ac:43:2f:6a:84:aa:33: a1:08:3d:ec:b8:ed:f0:e2:53:6b:82:f7:ec:95:31: 68:5b:5f:65:d9:74:60:f6:41:c7:fc:b9:6a:bf:ba: 44:a0:f5:e0:64:cf:8a:ce:4c:fa:33:4a:b1:81:05: 27:64:66:0f:62:27:26:4e:69:6d:e1:7f:e1:18:ae: 9d:38:fd:bf:76:36:c2:fc:10:82:68:d5:41:bd:82: dd:ca:3a:84:c2:b3:bd:f8:6b:2e:a5:7e:ea:60:8f: db:2b:e1:49:48:00:26:51:0d:64:ed:f3:f2:9a:42: 7d:72:d3:76:ed:25:f7:9d:ef:0f:d2:8f:89:3e:73: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:16:76:70:65:CD:70:83:6C:E1:69:0B:A7:EC:01:A5:FE:30:2E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/db6c15b5-bfb1-3ea5-99da-94cb828fc21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:25:37:40:39:9c:9d:59:b8:5f:98:2b:9d:52:47:85:24:ba: 0b:22:e4:0c:eb:df:fd:78:35:09:17:4d:76:58:e9:22:76:11: 35:b1:06:65:c0:42:83:a2:97:a0:50:b2:7a:0b:ad:c5:15:43: 1e:f3:5f:9c:29:41:91:30:23:0e:d1:59:cd:a6:c7:8d:67:56: e7:87:dd:ec:61:c1:8f:1d:f6:52:eb:5a:2c:8f:2e:b1:f1:a4: 27:41:bf:09:f2:9b:00:20:5f:98:c9:ed:36:73:c9:4d:a9:d4: 43:cd:a8:ab:0c:ed:9a:27:a8:8c:ce:bc:45:08:0e:d2:15:e0: 2e:94:5a:7e:07:97:17:70:55:cc:27:af:aa:a2:c5:22:db:96: 7e:e5:bc:3b:41:03:d0:a7:e6:03:16:24:a6:18:3f:1c:0d:d7: 3c:7d:c2:05:36:2c:e4:82:17:2c:54:9c:27:eb:39:5d:83:f9: c8:b1:72:5a:99:0a:4e:fa:d9:e7:8b:84:6d:d3:53:67:13:40: 8a:05:c4:2c:87:05:8f:89:48:6b:47:96:ca:9c:ae:e5:bc:4a: 1f:99:47:30:08:96:45:92:13:04:b0:63:5b:06:21:54:69:75: ac:2e:4f:d0:10:28:41:5a:de:8a:63:2b:b5:d2:26:74:2a:e3: 72:75:bc:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfxwi1be0HkyxFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZGEyZjdkMjktM2VmZS00MWQzLWE4MmMtYzA1OTI2YWRiZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAmwxoU2TSBx0Bz2GDJ/szTjA425sykgt8v3 vDd/zk31Dswg4xFrVvqOtyYoXmjq6ObYo9LiC/zdEDqTehiOLJlKCgEvMi97HpIe dBwEdNGtoie0f/DZchza+6BBJo/YBIlZ0zd2r7pqAghmEO9xrGNydL+nmBxPj2ju NaYQ7qxDL2qEqjOhCD3suO3w4lNrgvfslTFoW19l2XRg9kHH/Llqv7pEoPXgZM+K zkz6M0qxgQUnZGYPYicmTmlt4X/hGK6dOP2/djbC/BCCaNVBvYLdyjqEwrO9+Gsu pX7qYI/bK+FJSAAmUQ1k7fPymkJ9ctN27SX3ne8P0o+JPnPqeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEWdnBlzXCDbOFpC6fsAaX+MC7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGI2YzE1YjUtYmZiMS0z ZWE1LTk5ZGEtOTRjYjgyOGZjMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQlN0A5nJ1ZuF+YK51SR4Ukugsi5Azr3/14NQkXTXZY6SJ2ETWxBmXA QoOil6BQsnoLrcUVQx7zX5wpQZEwIw7RWc2mx41nVueH3exhwY8d9lLrWiyPLrHx pCdBvwnymwAgX5jJ7TZzyU2p1EPNqKsM7ZonqIzOvEUIDtIV4C6UWn4HlxdwVcwn r6qixSLbln7lvDtBA9Cn5gMWJKYYPxwN1zx9wgU2LOSCFyxUnCfrOV2D+cixclqZ Ck762eeLhG3TU2cTQIoFxCyHBY+JSGtHlsqcruW8Sh+ZRzAIlkWSEwSwY1sGIVRp dawuT9AQKEFa3opjK7XSJnQq43J1vD4= -----END CERTIFICATE-----Generated at Thu Nov 5 14:01:52 2026 by rpki-client