$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa File: e3da3962-a423-3a05-a507-30064af54fd3.roa (raw, json) Hash identifier: hG3gOia7AmpbPpv7vXnaCAW+EiM7Gr+svJXV8TNomx8= Subject key identifier: 9B:4C:FE:39:E7:BA:E5:4D:2E:40:65:19:48:DE:57:FB:7B:A4:4A:34 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584C969C55C7FE166013F02ECA80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 204.195.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:55:c7:fe:16:60:13:f0:2e:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=8547cf88-e388-4155-9643-91a5e1204b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:ee:ec:d6:8a:65:b3:e9:fb:df:87:b8:17: b5:10:b2:37:07:83:ce:68:01:64:9f:51:cb:4e:72: 41:f2:07:76:9d:99:fb:d8:c4:4b:a7:c5:e4:87:f8: 9c:8f:4e:f7:19:b4:aa:34:aa:c7:ab:1b:b4:9a:4b: 3f:df:5f:c0:b3:e6:8c:23:4a:bb:42:db:5b:8f:4e: 19:17:7a:71:be:95:ca:19:0d:4d:98:13:cf:e9:45: 99:d8:7f:31:b8:cc:46:c4:67:e6:a6:9a:ef:d7:a3: be:95:2e:71:7a:9f:d6:70:c6:6e:8f:f2:c6:e1:72: cd:f1:a6:44:d7:7c:85:65:8a:80:8d:3b:a5:7a:43: c5:10:fe:6d:32:45:d2:e9:b3:61:15:b3:d6:d9:1a: 98:f6:f8:66:c6:7b:f0:f4:87:71:c3:fb:b0:53:44: 8f:48:57:a8:68:82:e1:2a:76:9c:dd:44:4a:40:65: 11:4a:b9:81:cb:da:58:9f:6b:1e:7a:cc:ff:77:8e: 6c:72:39:ec:ae:d3:bd:fc:90:23:14:21:23:92:ee: 66:b2:1e:e2:ff:80:4d:f1:53:33:bd:1b:8b:dc:6f: ce:cf:9d:5f:e7:71:ec:30:fa:0b:5e:a4:ea:ff:77: ff:ec:64:eb:bb:30:d2:9c:44:00:92:c2:4c:b0:e0: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4C:FE:39:E7:BA:E5:4D:2E:40:65:19:48:DE:57:FB:7B:A4:4A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:db:94:c7:1a:c5:0c:f1:c0:d3:bf:06:cd:f9:35:b1:8e:dd: f1:ef:6c:56:45:20:86:a3:df:55:24:39:6d:11:e9:c5:0e:00: d5:e9:14:f4:9f:10:8a:0a:19:ff:da:26:82:f6:d2:38:84:4b: e8:41:19:20:bb:02:1c:8e:9a:44:0f:7c:47:d5:fc:ba:f7:b4: a7:e8:4f:55:75:7d:77:87:0a:10:91:fd:d1:13:d6:1a:3c:72: a7:e6:8d:27:88:6b:f1:8e:fd:58:ab:f4:4a:78:64:4b:27:54: 88:26:80:5e:8c:a8:5c:2c:68:c7:04:69:91:c6:4f:47:7e:58: d1:a8:36:ca:8d:00:81:03:f0:d5:e0:b9:4c:6e:e6:50:94:8c: b2:b4:13:b6:81:58:b9:92:fc:c5:29:5b:1c:86:2e:ee:2a:b0: 66:3c:80:be:68:39:a0:3b:a4:57:77:f7:54:92:33:21:8a:d5: b8:c0:c5:da:cc:50:67:85:d4:a4:f5:f6:87:83:54:e1:18:97: 1e:83:9f:0a:e0:d9:f3:96:12:58:ba:96:a0:2a:6d:71:ea:56: 21:fd:57:dd:0d:40:f6:dd:bc:10:da:c7:7e:2d:c9:1d:a4:9e: 73:a0:c7:f3:31:ce:41:6b:9e:a3:5a:58:1f:94:2a:33:0e:5c: 08:0e:93:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnFXH/hZgE/AuyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk ODU0N2NmODgtZTM4OC00MTU1LTk2NDMtOTFhNWUxMjA0YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEzu7NaKZbPp+9+HuBe1ELI3B4POaAFkn1HL TnJB8gd2nZn72MRLp8Xkh/icj073GbSqNKrHqxu0mks/31/As+aMI0q7Qttbj04Z F3pxvpXKGQ1NmBPP6UWZ2H8xuMxGxGfmpprv16O+lS5xep/WcMZuj/LG4XLN8aZE 13yFZYqAjTulekPFEP5tMkXS6bNhFbPW2RqY9vhmxnvw9Idxw/uwU0SPSFeoaILh Knac3URKQGURSrmBy9pYn2seesz/d45scjnsrtO9/JAjFCEjku5msh7i/4BN8VMz vRuL3G/Oz51f53HsMPoLXqTq/3f/7GTruzDSnEQAksJMsOAoEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtM/jnnuuVNLkBlGUjeV/t7pEo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTNkYTM5NjItYTQyMy0z YTA1LWE1MDctMzAwNjRhZjU0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/blMcaxQzxwNO/Bs35NbGO3fHvbFZFIIaj31UkOW0R6cUOANXpFPSf EIoKGf/aJoL20jiES+hBGSC7AhyOmkQPfEfV/Lr3tKfoT1V1fXeHChCR/dET1ho8 cqfmjSeIa/GO/Vir9Ep4ZEsnVIgmgF6MqFwsaMcEaZHGT0d+WNGoNsqNAIED8NXg uUxu5lCUjLK0E7aBWLmS/MUpWxyGLu4qsGY8gL5oOaA7pFd391SSMyGK1bjAxdrM UGeF1KT19oeDVOEYlx6Dnwrg2fOWEli6lqAqbXHqViH9V90NQPbdvBDax34tyR2k nnOgx/MxzkFrnqNaWB+UKjMOXAgOk1E= -----END CERTIFICATE-----Generated at Mon Mar 2 04:22:11 2026 by rpki-client