$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa File: f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa (raw, json) Hash identifier: sndSDP6IVk3cmHKUIhp+AW8Z+u68VBBjMrH/wTJl12s= Subject key identifier: D7:97:54:EF:1F:65:C6:6E:B9:1C:4F:2F:0F:5E:10:23:E2:1F:62:E0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D773A774AB9B96A14BF493860 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 204.195.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:77:4a:b9:b9:6a:14:bf:49:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=5f825120-af47-493a-b75d-849c58c7c204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:f1:d3:76:66:f3:c2:ab:93:a3:07:90:d4: e7:c6:68:d9:6f:5d:2c:bd:30:02:f2:14:4a:7d:23: 58:ed:b4:ba:84:27:56:05:a9:57:a1:bd:d3:52:ec: 8f:89:ce:e2:ac:d9:6d:ba:56:b3:b3:61:c9:a8:ec: e7:ed:e2:b8:28:73:9e:64:5c:f7:11:95:f5:43:9d: d0:c2:1d:a4:6b:94:20:7a:d1:36:77:e0:d3:47:47: 77:03:9d:69:b7:5b:60:52:27:02:3b:be:bd:da:a3: 95:57:9c:00:74:8a:af:50:ab:3a:77:7a:9b:61:2d: 86:08:b1:3d:e6:b1:e6:f7:7a:69:5b:f8:4a:07:25: 8a:7b:29:64:5b:7c:d1:7d:e4:55:4a:73:83:63:33: 0d:70:2a:09:0a:d1:b2:76:cb:ef:e4:db:5d:7a:6e: 12:e8:66:cc:78:bc:9f:55:e5:0a:d7:e9:54:53:0a: 48:5f:9b:32:3e:8a:37:fe:27:1c:6f:61:1e:dd:ed: 40:f9:c2:25:1d:d5:2b:7a:8f:32:2b:1a:75:38:40: 8c:fe:00:0c:b6:8d:ef:1f:f0:9b:85:fb:1f:fc:b9: 26:a4:32:84:ae:89:c9:3b:91:93:72:c1:90:5b:69: 18:e4:1b:a8:22:46:72:37:40:28:08:89:5b:4a:11: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:97:54:EF:1F:65:C6:6E:B9:1C:4F:2F:0F:5E:10:23:E2:1F:62:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0d85e7c-d202-3e7b-a6a4-e56983bbfc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6d:62:d5:36:7c:5f:52:b5:8c:e0:ba:03:a2:9e:4e:c5:54: 75:76:2b:05:53:9e:87:94:68:88:91:da:03:57:40:31:06:26: 98:cd:e8:26:8d:93:97:41:23:92:fb:a4:af:3b:cd:0c:f6:a0: 49:5b:41:1b:75:28:74:e1:96:0b:cc:42:59:07:ea:2b:d8:be: ec:79:12:44:2b:50:8a:64:2f:82:4a:09:ac:35:a7:3d:18:00: 86:9e:45:a0:c6:a0:12:27:bb:df:c5:2a:b4:cc:ee:77:0d:bf: 56:10:e0:ca:eb:ed:c6:fc:4e:e9:e6:fa:57:c6:06:2e:51:88: 69:4d:f2:82:87:ea:e3:47:ab:37:a5:30:15:93:9c:b6:a4:c2: a9:18:bc:50:b1:3e:8a:2f:2d:63:75:bb:6b:10:93:ac:5c:0d: 7f:4c:1f:18:34:ba:2d:2d:4e:84:ed:01:ae:5e:56:93:c3:66: f0:fd:4e:84:9b:15:85:e2:e2:8b:59:f9:1a:4b:4b:bf:44:c3: 2e:2a:76:4d:32:89:fe:50:4d:af:af:3f:30:f1:1a:2a:83:4b: 45:11:d7:58:4f:b5:e3:74:30:3f:31:cc:e6:7e:83:db:ef:1e: a9:1e:40:83:dd:77:4c:6b:2e:fa:a9:64:46:fb:da:5d:ce:52: 51:85:58:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OndKublqFL9JOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NWY4MjUxMjAtYWY0Ny00OTNhLWI3NWQtODQ5YzU4YzdjMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLfx03Zm88Krk6MHkNTnxmjZb10svTAC8hRK fSNY7bS6hCdWBalXob3TUuyPic7irNltulazs2HJqOzn7eK4KHOeZFz3EZX1Q53Q wh2ka5QgetE2d+DTR0d3A51pt1tgUicCO7692qOVV5wAdIqvUKs6d3qbYS2GCLE9 5rHm93ppW/hKByWKeylkW3zRfeRVSnODYzMNcCoJCtGydsvv5Ntdem4S6GbMeLyf VeUK1+lUUwpIX5syPoo3/iccb2Ee3e1A+cIlHdUreo8yKxp1OECM/gAMto3vH/Cb hfsf/LkmpDKEronJO5GTcsGQW2kY5BuoIkZyN0AoCIlbShFWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeXVO8fZcZuuRxPLw9eECPiH2LgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjBkODVlN2MtZDIwMi0z ZTdiLWE2YTQtZTU2OTgzYmJmYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdtYtU2fF9StYzgugOink7FVHV2KwVTnoeUaIiR2gNXQDEGJpjN6CaN k5dBI5L7pK87zQz2oElbQRt1KHThlgvMQlkH6ivYvux5EkQrUIpkL4JKCaw1pz0Y AIaeRaDGoBInu9/FKrTM7ncNv1YQ4Mrr7cb8Tunm+lfGBi5RiGlN8oKH6uNHqzel MBWTnLakwqkYvFCxPoovLWN1u2sQk6xcDX9MHxg0ui0tToTtAa5eVpPDZvD9ToSb FYXi4otZ+RpLS79Ewy4qdk0yif5QTa+vPzDxGiqDS0UR11hPteN0MD8xzOZ+g9vv HqkeQIPdd0xrLvqpZEb72l3OUlGFWKY= -----END CERTIFICATE-----Generated at Fri Apr 17 09:22:38 2026 by rpki-client