$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa File: 532d166f-101c-31f9-9346-a4fc524e4d69.roa (raw, json) Hash identifier: 25mntVZvoZ8224uczK8E73kLJD0y9REhTVD3+h9tJcE= Subject key identifier: E6:5A:C2:6E:43:19:12:44:83:27:86:94:31:B6:3B:5B:CE:C4:A7:D0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFCBD8DA90CE8E41B0900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fc:bd:8d:a9:0c:e8:e4:1b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=f144cc57-7076-4098-9f5c-87292486bc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:da:29:86:c7:c6:d3:1c:0d:3d:e8:ac:08: 62:8e:59:de:45:f0:c5:49:e2:96:a9:a8:47:35:aa: bc:cf:88:d1:17:de:5a:53:8b:02:8e:6e:9b:b3:d6: e6:ab:07:32:e7:61:58:b5:b1:51:7c:5e:4e:ec:ca: f5:96:2e:b4:d5:10:91:2a:34:76:15:66:02:ac:7e: 38:e6:cc:42:f8:8c:8a:a4:23:ac:63:21:f8:03:75: 83:14:bd:5d:2a:9c:e5:26:db:d2:d0:66:49:bc:53: b2:cf:0c:20:80:00:c4:b2:49:fb:cf:8d:a7:a6:53: 73:cb:72:8b:11:c0:ac:2f:2a:a5:38:bb:a4:61:e1: 08:0f:40:dd:17:46:65:e6:f7:73:3a:50:b3:b7:ec: 2b:1f:99:7f:43:3f:28:5f:02:26:53:ee:e2:67:cb: 64:f6:7b:62:83:1b:7a:a2:73:aa:38:13:a1:18:44: da:c0:14:57:5a:37:8f:a9:86:eb:d7:67:bd:01:76: b1:2c:32:fd:18:8d:21:0a:b6:7d:7d:1c:51:f0:94: d1:bc:d9:3d:a6:fc:c9:0e:97:d3:80:c2:ac:5a:ec: c5:c1:ea:60:aa:3b:17:89:24:2d:95:35:04:5d:ca: 46:c9:e7:f5:05:df:c7:2a:af:ad:32:da:e2:2b:29: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:C2:6E:43:19:12:44:83:27:86:94:31:B6:3B:5B:CE:C4:A7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7f:6a:f1:12:fa:0a:cd:7a:ae:7c:0d:a4:9b:7f:52:a4:24: 49:39:d6:ad:b3:fe:8f:68:ac:4e:77:bd:5f:4e:ef:10:70:83: 0d:f2:90:77:45:9a:ae:56:e9:19:81:48:a9:ed:4c:30:d0:2c: 93:00:ab:54:50:7b:4e:c2:7d:da:32:fd:a4:91:77:82:0c:c6: d6:69:db:c5:0e:1b:c7:70:50:48:7a:e6:b7:52:5e:9e:d4:dc: 82:2b:6d:f7:17:b9:36:a4:d3:bd:be:80:7a:25:c5:56:d5:04: d1:31:cd:da:b6:e9:00:b7:c4:37:76:96:4c:db:12:9e:2f:b8: e0:f3:ce:74:83:dc:fc:44:bc:19:95:c3:6f:72:06:95:71:ec: 62:6b:37:91:93:61:78:f8:0a:af:a0:e5:7b:dc:cd:74:d8:62: 3b:4f:d0:37:57:bf:58:c8:46:5a:fe:8d:d8:52:35:89:cf:d5: 8c:6e:34:7e:aa:42:8f:cb:24:a4:c9:04:46:84:f8:22:b8:43: 32:06:7f:6f:eb:55:0b:e3:b4:45:f6:88:7b:f1:34:cc:17:de: 78:7d:f9:25:db:57:1b:c4:08:4f:b6:51:eb:81:31:7a:22:63: 8d:c5:ac:b7:29:86:49:f8:e8:a1:97:16:64:39:42:01:77:f0: eb:8a:08:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfy9jakM6OQbCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjE0NGNjNTctNzA3Ni00MDk4LTlmNWMtODcyOTI0ODZiYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhULaKYbHxtMcDT3orAhijlneRfDFSeKWqahH Naq8z4jRF95aU4sCjm6bs9bmqwcy52FYtbFRfF5O7Mr1li601RCRKjR2FWYCrH44 5sxC+IyKpCOsYyH4A3WDFL1dKpzlJtvS0GZJvFOyzwwggADEskn7z42nplNzy3KL EcCsLyqlOLukYeEID0DdF0Zl5vdzOlCzt+wrH5l/Qz8oXwImU+7iZ8tk9ntigxt6 onOqOBOhGETawBRXWjePqYbr12e9AXaxLDL9GI0hCrZ9fRxR8JTRvNk9pvzJDpfT gMKsWuzFwepgqjsXiSQtlTUEXcpGyef1Bd/HKq+tMtriKynUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZawm5DGRJEgyeGlDG2O1vOxKfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTMyZDE2NmYtMTAxYy0z MWY5LTkzNDYtYTRmYzUyNGU0ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR/avES+grNeq58DaSbf1KkJEk51q2z/o9orE53vV9O7xBwgw3ykHdF mq5W6RmBSKntTDDQLJMAq1RQe07Cfdoy/aSRd4IMxtZp28UOG8dwUEh65rdSXp7U 3IIrbfcXuTak072+gHolxVbVBNExzdq26QC3xDd2lkzbEp4vuODzznSD3PxEvBmV w29yBpVx7GJrN5GTYXj4Cq+g5XvczXTYYjtP0DdXv1jIRlr+jdhSNYnP1YxuNH6q Qo/LJKTJBEaE+CK4QzIGf2/rVQvjtEX2iHvxNMwX3nh9+SXbVxvECE+2UeuBMXoi Y43FrLcphkn46KGXFmQ5QgF38OuKCAQ= -----END CERTIFICATE-----Generated at Sun Nov 15 15:22:04 2026 by rpki-client