$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa File: d1a609a4-1014-3bdc-9236-560c8f8b9963.roa (raw, json) Hash identifier: xxWnqr5nQ4IgST2eaj2+7hHcughYpM86HBJf7BQLKck= Subject key identifier: 07:98:AE:B4:17:D7:18:AD:70:5D:0E:CE:2B:89:41:39:22:A9:F6:BD Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFBDC09CB585E33E09580 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fb:dc:09:cb:58:5e:33:e0:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=fdcd1b60-fd2e-4494-880d-56e3d80b63b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:02:73:b8:ef:79:98:80:a6:9e:80:84:d2: ed:2e:f6:b0:b8:99:60:a8:c2:f0:95:8f:7b:59:12: f9:3e:03:d2:6a:c0:eb:f5:cd:c0:09:9b:5d:45:25: 13:1f:ba:41:e3:3e:eb:74:1f:7e:6c:a1:60:1e:12: f5:81:cd:54:e1:ab:55:1d:7f:11:aa:f1:43:7e:de: b8:77:0e:d5:fd:45:f4:9f:e3:08:32:39:a4:4b:09: e2:54:32:d0:ae:d4:aa:9c:72:af:b0:58:99:96:c1: 1f:df:20:e0:90:97:e8:ba:ff:7a:2f:30:b3:ad:67: c0:ac:45:ca:f9:f3:7e:11:45:ef:4a:bb:b1:61:d5: 3b:b3:22:8b:f7:55:66:40:92:fb:40:ad:2a:c3:21: 34:65:69:49:4a:e7:4a:a2:f0:f6:4d:30:44:aa:a3: 38:f9:a4:13:f5:cb:72:1a:9d:d5:47:b9:46:34:07: 9a:cc:0c:42:c3:64:ae:b9:b5:8c:fa:8e:05:8e:27: 28:fd:24:51:16:8a:12:5d:58:95:3f:c6:cf:10:9b: 23:4a:38:ec:e1:1d:06:8f:cc:e3:2a:cb:48:92:c6: fa:0f:05:25:00:bd:ce:de:95:fe:38:8a:c7:9a:99: 8c:ed:a0:40:d0:0b:c4:1e:ea:1c:b4:12:70:61:14: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:98:AE:B4:17:D7:18:AD:70:5D:0E:CE:2B:89:41:39:22:A9:F6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4c:e1:cf:d5:2b:af:aa:da:09:fe:4f:82:8d:fc:97:e6:c0: 64:f5:06:0e:da:22:10:08:13:7a:50:e3:91:75:61:fe:0b:5d: c2:c7:79:f9:a7:8f:54:65:50:40:23:74:f7:69:98:25:48:9b: 36:f4:5d:70:48:f8:49:a4:3f:f8:28:05:e2:2b:cd:a2:08:4a: 47:f6:68:89:b0:1a:fb:6f:44:bd:3c:73:6c:31:63:ed:e0:63: d2:4c:4a:b0:bd:c4:20:2d:ba:2f:29:b3:c0:fa:c9:95:4a:c5: 5f:59:56:21:4f:e0:9d:b9:56:30:fe:e6:53:2d:7b:d5:18:8c: 34:17:22:62:5c:f0:3c:b8:a5:3b:b1:e3:58:0a:f2:9d:20:7d: 1f:94:9d:ab:81:40:f0:ab:55:3c:28:ed:b6:da:cf:82:f5:de: 34:fe:4e:b2:c6:c0:23:43:cb:4c:48:04:a0:ff:21:19:f4:8f: 66:69:85:d4:ba:d7:d4:20:f7:13:84:ed:24:e1:16:b4:71:9a: f1:1b:b1:69:6f:b6:26:01:dd:21:f3:87:aa:20:97:4b:be:c1: 7a:08:d6:5d:53:47:56:64:4a:c6:23:ac:66:d9:de:30:bd:ca: 9a:ab:ba:15:91:1f:3a:db:15:f5:a9:aa:71:77:c8:e3:82:65: 5b:43:99:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfvcCctYXjPglYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmRjZDFiNjAtZmQyZS00NDk0LTg4MGQtNTZlM2Q4MGI2M2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFMCc7jveZiApp6AhNLtLvawuJlgqMLwlY97 WRL5PgPSasDr9c3ACZtdRSUTH7pB4z7rdB9+bKFgHhL1gc1U4atVHX8RqvFDft64 dw7V/UX0n+MIMjmkSwniVDLQrtSqnHKvsFiZlsEf3yDgkJfouv96LzCzrWfArEXK +fN+EUXvSruxYdU7syKL91VmQJL7QK0qwyE0ZWlJSudKovD2TTBEqqM4+aQT9cty Gp3VR7lGNAeazAxCw2SuubWM+o4Fjico/SRRFooSXViVP8bPEJsjSjjs4R0Gj8zj KstIksb6DwUlAL3O3pX+OIrHmpmM7aBA0AvEHuoctBJwYRReFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeYrrQX1xitcF0OziuJQTkiqfa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDFhNjA5YTQtMTAxNC0z YmRjLTkyMzYtNTYwYzhmOGI5OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdM4c/VK6+q2gn+T4KN/JfmwGT1Bg7aIhAIE3pQ45F1Yf4LXcLHefmn j1RlUEAjdPdpmCVImzb0XXBI+EmkP/goBeIrzaIISkf2aImwGvtvRL08c2wxY+3g Y9JMSrC9xCAtui8ps8D6yZVKxV9ZViFP4J25VjD+5lMte9UYjDQXImJc8Dy4pTux 41gK8p0gfR+UnauBQPCrVTwo7bbaz4L13jT+TrLGwCNDy0xIBKD/IRn0j2ZphdS6 19Qg9xOE7SThFrRxmvEbsWlvtiYB3SHzh6ogl0u+wXoI1l1TR1ZkSsYjrGbZ3jC9 ypqruhWRHzrbFfWpqnF3yOOCZVtDmdE= -----END CERTIFICATE-----Generated at Sun Nov 15 13:32:28 2026 by rpki-client