$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa File: df42286e-2fdc-3a52-b829-aa91fec9017a.roa (raw, json) Hash identifier: 3ZgCBJ7QlRpnyePLq7gy7lMuqlofd19k8I8R+xJNJY4= Subject key identifier: AA:8F:6F:A0:34:05:F4:9B:A5:FF:94:04:36:21:67:49:DA:7F:94:B1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E218BCE4CBA80FC095772C Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:18:bc:e4:cb:a8:0f:c0:95:77:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=b2df1132-8670-43c5-8e8f-c3a1514f9c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:01:ec:cf:10:6a:8f:ac:33:d0:6a:28:50: f9:c9:f2:06:df:80:44:39:b7:0e:8d:49:19:2d:90: ad:97:2a:6e:23:2b:7f:f6:d2:e6:6f:53:34:7b:ce: 2a:da:e7:1f:ee:b4:b0:66:d2:65:bd:5b:71:d6:ca: bc:c8:1b:19:12:67:4b:13:d9:db:c8:6b:66:1f:f2: 66:68:8d:e4:e3:75:b4:76:29:7b:62:61:41:05:45: 9d:90:ac:80:db:3f:c7:4c:4b:38:49:13:63:85:b9: c6:80:e4:eb:88:76:8b:ff:ad:ba:72:05:37:34:95: 75:19:32:97:6c:a2:35:4c:b7:3a:c3:c6:cb:ea:8f: 0c:30:1a:67:62:cc:da:1d:f1:fd:20:46:8a:a9:fd: ad:b7:47:00:2d:28:a6:85:e0:c3:7d:5a:ba:b2:bf: fb:22:d5:21:26:a0:e0:4e:20:2d:67:51:9d:5f:b4: 5d:c8:03:2a:41:ea:60:d8:84:f8:06:f1:9d:c9:23: 8b:10:30:fb:fb:87:fc:a7:25:80:75:43:ef:6b:46: b1:79:58:90:44:9d:bc:30:4a:01:7b:6e:f2:7f:21: 5e:c6:f5:d1:eb:f0:23:9c:1c:9f:c8:0f:d1:3c:f4: 1e:56:04:5f:c8:89:11:b6:41:80:e6:d1:f2:85:f8: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8F:6F:A0:34:05:F4:9B:A5:FF:94:04:36:21:67:49:DA:7F:94:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df42286e-2fdc-3a52-b829-aa91fec9017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ab:d3:fc:9f:5f:cc:27:2b:5b:1c:3a:00:42:fe:7a:11:fd: 33:d3:57:97:59:74:7b:62:65:77:5a:18:82:9a:da:5f:77:83: 9d:b1:33:e7:27:e9:68:69:13:c4:ad:48:4d:f3:c0:41:71:db: 71:03:5e:c3:a7:75:62:bb:bf:72:de:0d:95:33:d7:b6:4c:17: cc:53:c6:bb:d2:28:51:de:a3:77:45:4d:ae:00:fd:3c:9c:2d: c3:90:bf:fe:3f:dc:28:b4:0b:3f:02:ce:f1:35:06:ad:b0:f8: 83:93:d2:25:f1:e3:c2:47:ab:10:29:7a:97:31:31:d4:b4:b9: a7:1a:dd:41:e4:a5:f9:45:1f:ff:6d:58:ff:9f:91:12:4f:72: 32:46:fe:89:76:a7:21:51:58:5d:a8:79:d7:4a:06:84:88:34: 30:87:b1:1f:d4:e9:f2:9b:a3:2a:6a:24:bf:e6:04:e5:ee:db: 81:f8:94:e6:a9:3d:d0:e3:e2:34:65:ca:a3:33:9b:46:3f:03: 45:bc:ad:39:2f:a6:ea:b3:53:77:a2:13:9d:2a:ae:38:92:aa: f4:be:c8:5a:a2:bc:85:ea:0a:71:fd:92:dd:cd:5f:16:a6:b0: 07:5f:36:a6:52:17:9d:e1:94:be:c8:e9:1f:a2:85:d8:aa:35: d1:2b:49:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hi85MuoD8CVdywwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk YjJkZjExMzItODY3MC00M2M1LThlOGYtYzNhMTUxNGY5YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25EB7M8Qao+sM9BqKFD5yfIG34BEObcOjUkZ LZCtlypuIyt/9tLmb1M0e84q2ucf7rSwZtJlvVtx1sq8yBsZEmdLE9nbyGtmH/Jm aI3k43W0dil7YmFBBUWdkKyA2z/HTEs4SRNjhbnGgOTriHaL/626cgU3NJV1GTKX bKI1TLc6w8bL6o8MMBpnYszaHfH9IEaKqf2tt0cALSimheDDfVq6sr/7ItUhJqDg TiAtZ1GdX7RdyAMqQepg2IT4BvGdySOLEDD7+4f8pyWAdUPva0axeViQRJ28MEoB e27yfyFexvXR6/AjnByfyA/RPPQeVgRfyIkRtkGA5tHyhfgDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqPb6A0BfSbpf+UBDYhZ0naf5SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGY0MjI4NmUtMmZkYy0z YTUyLWI4MjktYWE5MWZlYzkwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6r0/yfX8wnK1scOgBC/noR/TPTV5dZdHtiZXdaGIKa2l93g52xM+cn 6WhpE8StSE3zwEFx23EDXsOndWK7v3LeDZUz17ZMF8xTxrvSKFHeo3dFTa4A/Tyc LcOQv/4/3Ci0Cz8CzvE1Bq2w+IOT0iXx48JHqxApepcxMdS0uaca3UHkpflFH/9t WP+fkRJPcjJG/ol2pyFRWF2oeddKBoSINDCHsR/U6fKboypqJL/mBOXu24H4lOap PdDj4jRlyqMzm0Y/A0W8rTkvpuqzU3eiE50qrjiSqvS+yFqivIXqCnH9kt3NXxam sAdfNqZSF53hlL7I6R+ihdiqNdErSW0= -----END CERTIFICATE-----Generated at Mon Sep 21 09:13:53 2026 by rpki-client