$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d4973c18-b7c6-3f90-8222-e4f60c025675.roa File: d4973c18-b7c6-3f90-8222-e4f60c025675.roa (raw, json) Hash identifier: GFOzESrwOUZbvuYNpJFrV8xExouW8skcdw3Lx2zIZkk= Subject key identifier: 2A:5D:39:52:17:AB:BE:35:26:40:10:C0:3F:5D:60:F6:26:E3:85:30 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F9BCDFE20A0A0C4FD2B19A300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d4973c18-b7c6-3f90-8222-e4f60c025675.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:fe:20:a0:a0:c4:fd:2b:19:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=50da1d8e-a10f-4eaa-9264-fe186c68cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:91:71:c5:0a:45:48:c9:77:2c:4e:41:d3:4c: 5a:74:95:07:c2:49:84:b6:45:de:a2:28:ac:e3:47: 9d:d8:a8:3d:cb:0d:49:d4:53:58:83:75:76:1f:76: 6e:d2:61:f2:e5:e2:35:c2:b5:ed:e3:38:29:ce:e2: d4:12:d0:c6:fe:53:47:65:b4:10:58:a5:73:88:19: f0:ed:0e:b0:31:43:6c:62:78:6b:50:9c:ea:a0:f9: 77:30:68:12:92:60:3e:a7:22:ca:51:47:08:a9:69: c7:97:7f:74:17:44:34:20:47:9b:5a:2f:b3:bf:e1: fc:bc:44:4d:85:e9:0d:07:64:dd:48:0c:4f:02:b1: 97:92:fa:da:c5:a4:98:ca:8f:de:72:f0:3e:8d:7b: ff:30:ce:3a:19:3d:e7:9a:1f:b4:ec:5a:de:42:0c: 98:39:bb:1f:26:49:a6:d4:1a:3c:7c:6b:0e:6c:a1: ea:30:30:ee:71:11:0c:ff:7a:3b:26:ff:e8:2c:47: 70:e7:f1:82:41:86:93:91:e5:a7:7e:2c:a1:64:e1: 81:f3:0f:1c:ad:fc:ba:3b:71:6d:6c:fd:3f:80:f3: 1a:6d:ab:75:0d:ba:28:5d:6e:9e:bc:e5:dc:b6:c0: 14:bb:fa:17:65:ea:7d:c2:5e:e6:3f:20:53:87:36: 9f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5D:39:52:17:AB:BE:35:26:40:10:C0:3F:5D:60:F6:26:E3:85:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d4973c18-b7c6-3f90-8222-e4f60c025675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a3:23:7e:04:3e:74:50:16:ed:fb:77:c5:16:c8:a5:00:fe: 05:e8:6a:65:9a:0f:65:8c:f2:29:5a:31:44:d7:f4:cd:e7:33: a6:a5:7d:c9:ac:9e:55:a4:01:e9:ac:c4:1f:ad:2a:73:06:99: d4:3d:f5:f9:10:01:9e:79:e6:e1:f5:4a:d5:45:cc:04:23:5d: 1f:6f:92:9c:44:8f:2d:1d:cc:ef:c2:47:d4:d5:e0:ec:04:b5: 8e:32:b8:77:4b:22:1f:cc:58:5f:70:76:c8:2b:e7:41:19:f5: e1:49:3e:c6:37:25:24:8a:56:b8:a9:0e:cc:e1:80:35:44:17: f1:af:78:e0:df:db:a9:58:47:f2:07:96:8e:b0:ba:9a:26:7a: 31:26:66:52:2b:48:53:c8:10:3b:3a:0e:21:a4:09:e5:8b:2c: f1:c1:48:fd:63:ec:71:82:6c:12:98:b3:5b:db:80:20:5d:4a: 03:5a:e2:34:93:65:0c:f2:28:33:23:92:5c:9a:e0:23:2f:f7: 55:a3:d8:27:b6:c8:7e:7f:d9:97:ac:c9:95:60:6f:55:06:3a: 41:28:cb:3f:0d:b2:64:d1:90:5e:f2:6b:ae:c3:ae:5f:bb:f8: a5:ff:de:12:58:b6:46:a3:2b:43:1d:ed:f9:62:d0:1c:0b:ac: 81:84:5a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzf4goKDE/SsZowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NTBkYTFkOGUtYTEwZi00ZWFhLTkyNjQtZmUxODZjNjhjYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJFxxQpFSMl3LE5B00xadJUHwkmEtkXeoiis 40ed2Kg9yw1J1FNYg3V2H3Zu0mHy5eI1wrXt4zgpzuLUEtDG/lNHZbQQWKVziBnw 7Q6wMUNsYnhrUJzqoPl3MGgSkmA+pyLKUUcIqWnHl390F0Q0IEebWi+zv+H8vERN hekNB2TdSAxPArGXkvraxaSYyo/ecvA+jXv/MM46GT3nmh+07FreQgyYObsfJkmm 1Bo8fGsObKHqMDDucREM/3o7Jv/oLEdw5/GCQYaTkeWnfiyhZOGB8w8crfy6O3Ft bP0/gPMabat1DbooXW6evOXctsAUu/oXZep9wl7mPyBThzafTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpdOVIXq741JkAQwD9dYPYm44UwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDQ5NzNjMTgtYjdjNi0z ZjkwLTgyMjItZTRmNjBjMDI1Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKjI34EPnRQFu37d8UWyKUA/gXoamWaD2WM8ilaMUTX9M3nM6alfcms nlWkAemsxB+tKnMGmdQ99fkQAZ555uH1StVFzAQjXR9vkpxEjy0dzO/CR9TV4OwE tY4yuHdLIh/MWF9wdsgr50EZ9eFJPsY3JSSKVripDszhgDVEF/GveODf26lYR/IH lo6wupomejEmZlIrSFPIEDs6DiGkCeWLLPHBSP1j7HGCbBKYs1vbgCBdSgNa4jST ZQzyKDMjklya4CMv91Wj2Ce2yH5/2ZesyZVgb1UGOkEoyz8NsmTRkF7ya67Drl+7 +KX/3hJYtkajK0Md7fli0BwLrIGEWj4= -----END CERTIFICATE-----Generated at Sun Nov 15 18:40:46 2026 by rpki-client