$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa File: 70a09cd3-6119-367f-927d-0e3a9d8bd100.roa (raw, json) Hash identifier: cE3ODyt1Dya+7LnblEebzZOTKHKYzS2+hwcaCnjxMyA= Subject key identifier: 59:A8:47:04:21:44:D2:4A:5B:1C:24:5B:51:C6:F5:39:38:8E:E9:1A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDF99B4000AB2E4252E700 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:f9:9b:40:00:ab:2e:42:52:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=fea604a9-27fa-4827-aba1-a5ab84c86806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:d7:e4:9c:60:1c:2f:39:24:f4:d2:0c:93: d1:a5:a3:12:91:b5:21:fa:bd:29:d9:5e:a6:f2:0d: 9d:8a:9e:00:49:3a:90:00:f4:ae:4d:75:bd:a9:23: e4:48:07:c1:6e:be:57:01:36:02:7f:82:2a:e8:cc: ca:66:c2:5e:4e:32:ab:7c:17:e2:aa:36:3b:30:aa: 0a:4b:a5:9c:1c:a4:38:d7:c8:0d:b6:b1:e1:2c:40: db:d6:37:5b:d4:e4:f0:de:c2:04:61:0a:81:f4:8d: fa:ed:aa:75:73:d1:7e:32:22:fe:04:26:4b:1f:5a: 6f:e3:b5:2e:1f:f1:d7:d7:7c:72:b1:bb:17:f5:9f: 14:05:d4:e1:95:ac:ba:e2:7b:7f:85:f1:01:8b:74: f0:39:6f:ce:7f:97:05:6b:65:56:b3:a4:1d:4d:c3: 67:17:d4:ff:a9:6b:59:f5:db:b2:18:27:5e:6c:02: 95:a7:f9:9c:58:bf:c9:5b:06:b6:a8:c7:2c:2f:19: 05:88:bc:39:a0:7a:9e:80:ff:a6:08:13:15:69:bf: 6a:01:d5:e7:1d:4f:65:b1:70:cb:7b:1e:a1:01:0a: 2f:67:e0:b7:65:ec:47:3d:8b:41:03:d7:33:8f:30: e1:0b:8d:11:07:af:75:80:4d:e4:87:57:fe:a5:b1: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:47:04:21:44:D2:4A:5B:1C:24:5B:51:C6:F5:39:38:8E:E9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b4:2c:27:36:53:bf:39:6c:9e:03:90:a6:cc:0d:a7:93:d1: 49:56:5b:56:63:26:0f:5d:5f:db:1f:f0:b2:cd:56:d4:05:79: fb:01:16:c0:6c:6e:b0:8c:f7:ea:95:3b:bf:f5:5b:c9:3b:91: d1:5d:73:46:29:e0:32:bf:b9:11:fc:1e:9f:50:e0:fa:38:6d: f1:0e:27:bc:0a:b3:e5:3a:0b:39:6e:f1:18:09:f5:50:25:7f: 08:c0:94:92:98:8e:7d:33:3b:4f:0d:1e:59:1f:30:fd:29:ae: 3a:0f:c2:2e:06:a9:c4:68:56:ed:b8:c8:9f:e6:84:cc:74:7b: d5:88:28:8a:24:49:8c:de:be:d5:31:e5:30:c0:a4:41:d0:8a: e5:82:7b:56:d0:21:8f:61:4e:90:33:79:ef:eb:d9:cb:04:13: 1e:94:f5:14:24:67:4a:a0:84:51:0c:cb:52:b9:ea:77:89:12: ea:dd:2c:fd:3b:19:eb:31:d3:79:7b:13:f5:77:05:e6:30:d0: 76:dc:62:bf:71:be:28:39:43:4b:45:70:0a:e3:58:63:82:44: 28:77:17:4a:85:d3:a2:5c:74:c4:d4:d4:cf:12:81:ca:13:65: e5:15:6b:1b:8c:1d:66:43:c8:77:78:53:19:a9:f6:1d:03:22: b4:58:ec:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfmbQACrLkJS5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmVhNjA0YTktMjdmYS00ODI3LWFiYTEtYTVhYjg0Yzg2ODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XfX5JxgHC85JPTSDJPRpaMSkbUh+r0p2V6m 8g2dip4ASTqQAPSuTXW9qSPkSAfBbr5XATYCf4Iq6MzKZsJeTjKrfBfiqjY7MKoK S6WcHKQ418gNtrHhLEDb1jdb1OTw3sIEYQqB9I367ap1c9F+MiL+BCZLH1pv47Uu H/HX13xysbsX9Z8UBdThlay64nt/hfEBi3TwOW/Of5cFa2VWs6QdTcNnF9T/qWtZ 9duyGCdebAKVp/mcWL/JWwa2qMcsLxkFiLw5oHqegP+mCBMVab9qAdXnHU9lsXDL ex6hAQovZ+C3ZexHPYtBA9czjzDhC40RB691gE3kh1f+pbHLNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmoRwQhRNJKWxwkW1HG9Tk4jukaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzBhMDljZDMtNjExOS0z NjdmLTkyN2QtMGUzYTlkOGJkMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW0LCc2U785bJ4DkKbMDaeT0UlWW1ZjJg9dX9sf8LLNVtQFefsBFsBs brCM9+qVO7/1W8k7kdFdc0Yp4DK/uRH8Hp9Q4Po4bfEOJ7wKs+U6Czlu8RgJ9VAl fwjAlJKYjn0zO08NHlkfMP0prjoPwi4GqcRoVu24yJ/mhMx0e9WIKIokSYzevtUx 5TDApEHQiuWCe1bQIY9hTpAzee/r2csEEx6U9RQkZ0qghFEMy1K56neJEurdLP07 Gesx03l7E/V3BeYw0HbcYr9xvig5Q0tFcArjWGOCRCh3F0qF06JcdMTU1M8SgcoT ZeUVaxuMHWZDyHd4Uxmp9h0DIrRY7MQ= -----END CERTIFICATE-----Generated at Sun Nov 15 18:08:35 2026 by rpki-client