$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa File: df42286e-2fdc-3a52-b829-aa91fec9017a.roa (raw, json) Hash identifier: ++s4cp/4eBRsAGi3Lf55udEL35u7Gtlu3b8lb/6R22s= Subject key identifier: 54:92:30:68:2A:5D:E7:4F:44:21:68:BB:A1:E5:55:72:ED:63:4D:C5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D773A78157DCE82398E17BC40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 204.195.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:78:15:7d:ce:82:39:8e:17:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=68dc5796-3e82-4348-a354-5cff6c54d289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:b3:4a:63:d0:66:8e:9a:19:bb:e8:8b:18: 26:77:2e:4a:a1:bf:8b:f3:24:ba:a3:b3:c0:78:02: 62:9c:70:95:5d:e6:2e:0a:3d:ab:77:b0:12:94:44: 60:7a:03:d4:fa:60:04:7a:60:4d:62:f8:5a:ae:41: 2e:08:8d:dc:14:5a:72:a4:ae:d2:bb:10:a1:21:49: e3:6d:5d:1c:f7:d8:b5:4a:b7:b7:f1:5a:bf:b9:dc: 4d:9f:c3:1a:d9:75:53:c9:07:94:b9:dc:60:37:4f: 8e:49:e3:bc:c5:3b:35:e7:f5:4b:fd:74:97:ba:c9: 3b:ec:41:f4:1f:4d:d9:5a:fb:34:bb:b0:c8:3d:6c: 04:3d:14:be:88:3b:44:56:e6:d8:a2:37:c0:b5:3f: d2:6c:cf:21:d8:24:6e:7b:e4:36:61:11:8f:ef:b1: 41:49:2a:cc:92:07:4a:d4:0a:b5:a5:cb:e2:ba:07: 76:25:1b:7f:a2:a3:98:a8:cd:8a:41:68:52:aa:b3: 55:92:99:16:59:f4:4a:76:76:c6:b7:39:f4:69:cd: 1e:56:e4:17:de:c8:52:d0:56:4a:32:a2:38:9e:ea: 62:38:0d:46:c3:d7:c3:b5:7b:19:43:69:18:3a:5c: ee:62:dd:ba:ca:30:58:66:40:7b:31:7e:79:64:02: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:92:30:68:2A:5D:E7:4F:44:21:68:BB:A1:E5:55:72:ED:63:4D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f7:69:1c:d6:dd:29:4e:1e:8f:65:2f:6e:97:fb:55:f1:b0: 77:38:84:45:2d:eb:72:c7:eb:dd:5c:47:40:fe:1b:61:e0:7a: fe:fc:a6:b5:75:61:b3:37:45:9d:0c:ab:3e:79:fb:f7:27:7f: b7:4a:54:3f:8c:98:7f:0c:d9:bf:59:a6:bd:42:53:81:aa:a5: 55:24:2e:9f:35:eb:35:ad:f2:6e:c6:9c:65:05:4d:1d:c8:90: a4:9d:4d:8e:01:e4:e6:7f:a2:3f:93:14:b4:bf:eb:32:c1:83: 84:56:46:b7:9d:74:83:88:42:bd:02:57:e8:c1:87:44:79:34: 51:d9:8f:64:f7:ea:d4:f5:e9:25:29:e5:ae:b2:d0:a9:b0:6d: cf:2f:fd:15:f0:79:b2:c1:83:be:b1:85:57:61:a4:dc:b8:2d: 07:07:67:53:54:f9:74:13:1b:53:93:fa:e4:94:ef:89:51:7e: 78:36:ce:a6:96:18:bb:3b:8d:d4:e6:24:d9:9b:44:3f:0d:bf: a3:45:32:cd:c1:00:ae:6a:c4:02:9e:55:f4:37:33:b6:75:a0: 17:22:df:4a:ff:c0:ac:9e:32:0c:eb:a7:e3:80:e1:22:f4:1b: 80:ae:35:5f:3b:82:db:19:48:1a:33:fc:ce:a2:3f:b2:5d:e2: 00:2b:4b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OngVfc6COY4XvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NjhkYzU3OTYtM2U4Mi00MzQ4LWEzNTQtNWNmZjZjNTRkMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/izSmPQZo6aGbvoixgmdy5Kob+L8yS6o7PA eAJinHCVXeYuCj2rd7ASlERgegPU+mAEemBNYvharkEuCI3cFFpypK7SuxChIUnj bV0c99i1Sre38Vq/udxNn8Ma2XVTyQeUudxgN0+OSeO8xTs15/VL/XSXusk77EH0 H03ZWvs0u7DIPWwEPRS+iDtEVubYojfAtT/SbM8h2CRue+Q2YRGP77FBSSrMkgdK 1Aq1pcviugd2JRt/oqOYqM2KQWhSqrNVkpkWWfRKdnbGtzn0ac0eVuQX3shS0FZK MqI4nupiOA1Gw9fDtXsZQ2kYOlzuYt26yjBYZkB7MX55ZAKSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSSMGgqXedPRCFou6HlVXLtY03FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGY0MjI4NmUtMmZkYy0z YTUyLWI4MjktYWE5MWZlYzkwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn3aRzW3SlOHo9lL26X+1XxsHc4hEUt63LH691cR0D+G2Hgev78prV1 YbM3RZ0Mqz55+/cnf7dKVD+MmH8M2b9Zpr1CU4GqpVUkLp816zWt8m7GnGUFTR3I kKSdTY4B5OZ/oj+TFLS/6zLBg4RWRreddIOIQr0CV+jBh0R5NFHZj2T36tT16SUp 5a6y0Kmwbc8v/RXwebLBg76xhVdhpNy4LQcHZ1NU+XQTG1OT+uSU74lRfng2zqaW GLs7jdTmJNmbRD8Nv6NFMs3BAK5qxAKeVfQ3M7Z1oBci30r/wKyeMgzrp+OA4SL0 G4CuNV87gtsZSBoz/M6iP7Jd4gArS70= -----END CERTIFICATE-----Generated at Fri Apr 17 09:43:34 2026 by rpki-client