$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda2e8c-9a4c-3171-8103-b2aa8612a873.roa File: 5eda2e8c-9a4c-3171-8103-b2aa8612a873.roa (raw, json) Hash identifier: lcDFfK/IG6WeamASw+3fFo8zRl3kXG4rK+8fufDmYNA= Subject key identifier: 70:8C:69:AA:14:28:69:8F:CF:0A:E4:32:07:02:99:DB:67:22:03:A0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFD87BDE50D70A494A600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda2e8c-9a4c-3171-8103-b2aa8612a873.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fd:87:bd:e5:0d:70:a4:94:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=5bb6eb2e-a020-43a4-a794-7e1392134a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:f4:9b:39:df:2d:1d:17:28:1f:ba:62:8c: 7f:ab:cc:16:57:cb:19:ba:c4:d9:01:1e:a7:3d:39: 2d:10:4d:0c:33:9b:e6:47:ff:e8:7f:13:d0:2b:ea: cb:a6:60:78:f6:95:a6:3f:06:2d:ac:96:68:f9:d4: f5:d8:3f:39:4a:b4:aa:66:f7:94:2e:3d:c4:42:18: 1a:b8:03:78:80:b2:cd:68:90:7f:2f:16:b5:43:c2: 71:37:50:52:75:7f:11:3e:ce:b0:af:76:5d:86:5d: cc:86:40:65:98:fa:41:56:11:7c:44:e0:84:79:33: 58:48:5d:ae:db:c9:37:eb:62:e7:ad:83:7d:84:4a: c4:05:ac:97:e8:4a:f0:ba:1d:04:f1:92:03:de:4c: b4:58:dc:65:42:c8:c0:54:69:07:5a:29:18:13:a2: 2b:3d:24:65:1e:81:b4:f6:e5:aa:25:c1:dd:f6:89: 97:1c:c4:eb:8b:a6:2d:50:77:a4:d7:40:14:f3:6c: 2e:7c:b0:e9:a4:4f:71:fc:0e:7e:e0:66:d5:1d:a4: 5a:a8:05:ae:52:d2:a2:32:27:b9:c9:cf:07:8b:dd: f8:d3:b7:8d:91:fb:6e:cd:1e:63:b9:a5:77:2a:ab: 65:6b:2e:0e:19:e0:f2:08:ec:80:14:a0:09:2d:36: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8C:69:AA:14:28:69:8F:CF:0A:E4:32:07:02:99:DB:67:22:03:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda2e8c-9a4c-3171-8103-b2aa8612a873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b4:da:26:14:83:f7:2f:14:7c:c7:e6:65:79:c1:8f:6f:70: 71:69:74:e1:92:09:cd:7a:d9:cc:0a:30:b9:ae:36:5e:ae:5d: ce:38:18:31:63:51:59:bd:45:17:09:60:18:0b:35:6b:dd:3a: 64:f0:ff:53:c7:e1:98:fa:39:1c:43:39:a2:04:b8:38:91:e3: 0b:f0:d5:28:62:d9:ac:85:6d:3d:7c:4f:73:69:ca:3c:d8:e0: cd:2e:92:5c:46:c7:5e:df:60:2a:23:0e:47:a6:02:fc:5d:0e: 34:a9:19:8a:3f:39:0e:11:85:2c:35:90:cc:16:77:97:2c:c3: 76:93:38:9f:d2:d0:b2:35:6a:ac:71:c2:ae:54:8a:08:26:81: 34:55:76:c3:3e:41:5b:43:ba:e5:4c:03:4a:14:68:63:9d:15: e2:03:d4:cc:59:35:9b:7f:11:f9:3b:25:f3:3f:10:55:e1:61: d5:95:78:03:02:31:2c:0f:1a:17:63:68:60:0b:5a:f2:5e:f5: 20:0e:51:4a:50:66:2e:30:7d:b3:11:00:39:08:86:37:c9:6b: 8f:38:fe:98:61:40:db:ca:47:88:fe:e5:1a:1d:ea:c6:30:34: 96:ea:be:a4:6a:d2:5e:52:91:43:a9:ed:6d:ff:2e:ed:83:bb: 01:53:38:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzf2HveUNcKSUpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NWJiNmViMmUtYTAyMC00M2E0LWE3OTQtN2UxMzkyMTM0YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/r0mznfLR0XKB+6Yox/q8wWV8sZusTZAR6n PTktEE0MM5vmR//ofxPQK+rLpmB49pWmPwYtrJZo+dT12D85SrSqZveULj3EQhga uAN4gLLNaJB/Lxa1Q8JxN1BSdX8RPs6wr3Zdhl3MhkBlmPpBVhF8ROCEeTNYSF2u 28k362LnrYN9hErEBayX6Erwuh0E8ZID3ky0WNxlQsjAVGkHWikYE6IrPSRlHoG0 9uWqJcHd9omXHMTri6YtUHek10AU82wufLDppE9x/A5+4GbVHaRaqAWuUtKiMie5 yc8Hi93407eNkftuzR5juaV3Kqtlay4OGeDyCOyAFKAJLTa5VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCMaaoUKGmPzwrkMgcCmdtnIgOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWVkYTJlOGMtOWE0Yy0z MTcxLTgxMDMtYjJhYTg2MTJhODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD202iYUg/cvFHzH5mV5wY9vcHFpdOGSCc162cwKMLmuNl6uXc44GDFj UVm9RRcJYBgLNWvdOmTw/1PH4Zj6ORxDOaIEuDiR4wvw1Shi2ayFbT18T3NpyjzY 4M0uklxGx17fYCojDkemAvxdDjSpGYo/OQ4RhSw1kMwWd5csw3aTOJ/S0LI1aqxx wq5UiggmgTRVdsM+QVtDuuVMA0oUaGOdFeID1MxZNZt/Efk7JfM/EFXhYdWVeAMC MSwPGhdjaGALWvJe9SAOUUpQZi4wfbMRADkIhjfJa484/phhQNvKR4j+5Rod6sYw NJbqvqRq0l5SkUOp7W3/Lu2DuwFTOCU= -----END CERTIFICATE-----Generated at Sun Nov 15 18:09:31 2026 by rpki-client