$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa File: 6978a815-9a53-3f80-abe8-e211e21209d4.roa (raw, json) Hash identifier: VD/yb3gqSAQmO9xq1z5fslNwaxEzoVPFNCRC6izFE2c= Subject key identifier: 30:D9:6E:9A:0C:72:8B:5A:9B:87:7D:90:64:60:4C:C9:D9:33:45:D4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFDC1C7C8BA3E2ADC6C80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fd:c1:c7:c8:ba:3e:2a:dc:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=f6581944-91ad-420a-800b-b18560e2f448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:5d:e9:4c:07:0d:34:90:f1:2c:78:8c:19: 4f:d5:9a:33:a7:77:12:bc:77:a2:49:57:b5:2a:f9: 65:24:b0:a7:ad:cf:b6:f8:92:42:e2:28:45:f4:a9: 03:4c:73:7a:ee:dd:92:d9:54:41:2e:9e:32:05:b7: 76:91:55:d5:cc:4b:e4:cd:4f:70:5e:fe:f9:b5:84: 3f:63:cd:4d:80:67:1d:47:23:15:20:93:f9:c8:1f: ed:ab:de:de:7a:28:80:9f:2c:99:42:da:f3:fc:39: 68:fa:97:a7:b7:71:a1:c5:21:8f:75:a9:29:0a:80: 3b:1b:79:f0:ff:f6:74:86:f7:ba:f4:4d:36:71:1c: 07:21:88:e9:00:6d:ef:8f:a1:f9:68:e3:76:14:dc: cb:95:85:a4:00:34:f3:6a:d9:c0:df:f1:8b:26:95: 82:e4:39:75:db:a3:41:78:bc:0e:c3:b8:e7:25:85: e9:44:f9:3f:42:33:03:52:b6:d2:01:1e:bd:e0:10: 0a:75:37:8e:2b:48:7b:33:90:47:05:2d:68:7e:e4: 2a:14:11:e3:e2:5a:ac:10:d7:de:4f:b2:20:f7:4d: 47:7f:ef:d6:12:cb:77:60:e5:2a:af:ef:78:d1:8d: 20:86:de:fa:d8:92:38:14:80:56:41:96:c8:4e:8d: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D9:6E:9A:0C:72:8B:5A:9B:87:7D:90:64:60:4C:C9:D9:33:45:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d8:94:0b:5b:c7:19:df:bf:da:44:67:17:fa:8e:12:77:48: 0d:4b:b1:a7:51:82:6a:02:d1:01:77:4a:78:40:db:6f:eb:05: 61:13:cb:da:c2:8c:6b:df:85:24:bf:70:2b:40:90:e2:ac:61: 0a:46:9c:ac:31:bb:47:d1:1d:ea:85:8e:10:b8:59:9c:3d:a8: 6a:0a:d4:f7:32:d1:e5:93:61:5f:9f:5e:76:cf:50:47:0a:d0: 9d:cf:20:e1:2b:51:07:51:1e:cc:8a:50:bf:18:b6:d1:f3:3e: 4f:74:69:b9:a2:3b:22:86:16:b1:e6:e1:16:68:37:33:1c:0f: 17:49:e6:8c:3d:01:c8:6e:11:18:a8:f5:94:f2:be:12:3e:26: 49:c5:11:ea:9e:c1:87:6e:d1:91:84:1b:f4:f5:48:fa:68:27: 74:c1:93:1f:ea:95:3a:af:04:87:d9:cc:15:f7:39:08:ad:0a: a9:de:4c:5b:53:c6:fa:25:20:ab:21:61:54:74:36:00:08:8f: 8e:af:53:2a:0b:ae:f6:69:2b:81:9f:41:1d:a6:c8:1d:a5:f4: 90:e5:ca:4c:3f:63:e2:c0:40:fd:d5:c1:34:0c:4f:cb:62:63: 61:1a:bf:65:26:39:ab:1a:d6:03:f3:d6:7f:e1:29:a9:be:ba: ff:4c:07:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzf3Bx8i6PircbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjY1ODE5NDQtOTFhZC00MjBhLTgwMGItYjE4NTYwZTJmNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhNd6UwHDTSQ8Sx4jBlP1Zozp3cSvHeiSVe1 KvllJLCnrc+2+JJC4ihF9KkDTHN67t2S2VRBLp4yBbd2kVXVzEvkzU9wXv75tYQ/ Y81NgGcdRyMVIJP5yB/tq97eeiiAnyyZQtrz/Dlo+pent3GhxSGPdakpCoA7G3nw //Z0hve69E02cRwHIYjpAG3vj6H5aON2FNzLlYWkADTzatnA3/GLJpWC5Dl126NB eLwOw7jnJYXpRPk/QjMDUrbSAR694BAKdTeOK0h7M5BHBS1ofuQqFBHj4lqsENfe T7Ig901Hf+/WEst3YOUqr+940Y0ght762JI4FIBWQZbITo2epwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDZbpoMcotam4d9kGRgTMnZM0XUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjk3OGE4MTUtOWE1My0z ZjgwLWFiZTgtZTIxMWUyMTIwOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3YlAtbxxnfv9pEZxf6jhJ3SA1LsadRgmoC0QF3SnhA22/rBWETy9rC jGvfhSS/cCtAkOKsYQpGnKwxu0fRHeqFjhC4WZw9qGoK1Pcy0eWTYV+fXnbPUEcK 0J3PIOErUQdRHsyKUL8YttHzPk90abmiOyKGFrHm4RZoNzMcDxdJ5ow9AchuERio 9ZTyvhI+JknFEeqewYdu0ZGEG/T1SPpoJ3TBkx/qlTqvBIfZzBX3OQitCqneTFtT xvolIKshYVR0NgAIj46vUyoLrvZpK4GfQR2myB2l9JDlykw/Y+LAQP3VwTQMT8ti Y2Eav2UmOasa1gPz1n/hKam+uv9MB/w= -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:34 2026 by rpki-client