$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa File: d76809c9-dc78-3d60-810a-aff46abe67b7.roa (raw, json) Hash identifier: qiwcraU2m+Bbe5tYPph1mxvhzXsx6N8bb+9kYpuJPJM= Subject key identifier: 95:96:D2:47:1D:76:CC:E9:D2:29:9D:A6:FE:19:B8:41:E4:B7:AD:93 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E21953A30EB05BAB31BA80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:19:53:a3:0e:b0:5b:ab:31:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=ffb31a3a-2154-4298-9d3b-9cb6f18f24bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1c:5c:4a:ec:71:4e:d2:cf:36:24:0b:f6:04: f3:d2:e8:ea:a5:b7:be:e9:e6:85:e9:eb:e3:50:12: 02:9a:61:1e:22:25:f2:e9:bb:8b:6d:61:cb:1f:aa: 62:2d:3b:49:9d:c7:66:8a:89:40:33:4c:84:50:d4: 66:77:59:de:1f:7e:0b:e9:a7:18:ed:d4:67:d4:69: 2f:48:de:a6:19:f8:84:36:6a:6d:5e:ed:db:56:5a: 65:00:46:e9:53:ab:3c:9b:74:a3:09:0e:c8:6b:3a: be:62:d7:84:a0:e5:ed:59:1b:94:0d:39:6e:77:d0: 06:82:08:3d:e9:78:96:ab:ba:99:93:ab:53:96:42: b9:56:76:b8:3b:e1:be:00:62:30:11:c3:d4:ae:8f: 13:33:cf:f1:51:0e:0e:69:7f:3a:84:cd:5e:43:e3: 0f:7b:a3:77:e7:81:33:50:33:53:42:76:63:ec:fd: 74:d3:8e:05:8d:e1:c2:65:e2:55:d4:0c:0c:02:3d: bf:6e:61:95:6f:59:23:f6:cb:b7:78:cf:ad:5a:12: 9e:73:d0:67:68:25:d5:ec:f9:2c:56:75:8e:d7:58: d7:c0:b7:41:f9:d3:a6:b3:90:b6:33:e2:ce:51:b2: 8b:83:1b:22:93:7a:07:d3:6f:bd:ea:c0:33:7a:f7: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:96:D2:47:1D:76:CC:E9:D2:29:9D:A6:FE:19:B8:41:E4:B7:AD:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:04:70:a9:ed:7c:6c:f4:cc:5b:ae:b9:43:18:4c:e9:59:ce: de:cd:e3:71:b1:9b:75:e7:fa:52:77:ec:b0:8d:c1:22:f6:fe: b5:db:f7:26:9f:46:c8:c3:9c:27:dd:69:01:e1:6d:53:fa:11: 57:41:2c:3a:39:1c:b1:d3:d0:ba:6b:de:51:a5:c8:1d:4c:88: a1:3f:b2:f7:61:e7:88:3e:bb:5f:57:67:11:d3:2f:2d:e6:15: 92:42:a4:9f:af:76:95:96:3e:4d:c6:c4:23:86:73:75:60:3d: 78:29:fb:98:89:d5:cf:70:4c:70:82:be:a6:92:9f:05:eb:0a: 94:8e:73:4d:f9:d0:c1:53:5a:e5:53:1d:a9:3e:39:34:3c:27: ff:e5:74:26:13:79:a5:83:2b:a7:0a:c7:3b:cd:76:7a:be:0f: d5:90:ff:71:07:96:db:44:b6:46:fb:70:ad:93:05:9d:9f:c7: e9:1f:ce:85:d8:06:d1:e8:fd:24:b1:82:a5:fc:7a:e3:e3:13: 54:d8:2b:60:95:63:78:80:18:40:32:1d:c1:de:b2:4c:50:fe: de:25:09:91:9d:da:28:25:de:17:0b:82:75:49:27:f2:24:70: 41:b2:25:88:6d:c9:61:29:42:96:bb:0b:a8:b0:00:bb:7b:74: b0:f7:2f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hlTow6wW6sxuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmZiMzFhM2EtMjE1NC00Mjk4LTlkM2ItOWNiNmYxOGYyNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRxcSuxxTtLPNiQL9gTz0ujqpbe+6eaF6evj UBICmmEeIiXy6buLbWHLH6piLTtJncdmiolAM0yEUNRmd1neH34L6acY7dRn1Gkv SN6mGfiENmptXu3bVlplAEbpU6s8m3SjCQ7Iazq+YteEoOXtWRuUDTlud9AGggg9 6XiWq7qZk6tTlkK5Vna4O+G+AGIwEcPUro8TM8/xUQ4OaX86hM1eQ+MPe6N354Ez UDNTQnZj7P10044FjeHCZeJV1AwMAj2/bmGVb1kj9su3eM+tWhKec9BnaCXV7Pks VnWO11jXwLdB+dOms5C2M+LOUbKLgxsik3oH02+96sAzevcMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWW0kcddszp0imdpv4ZuEHkt62TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDc2ODA5YzktZGM3OC0z ZDYwLTgxMGEtYWZmNDZhYmU2N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIEcKntfGz0zFuuuUMYTOlZzt7N43Gxm3Xn+lJ37LCNwSL2/rXb9yaf RsjDnCfdaQHhbVP6EVdBLDo5HLHT0Lpr3lGlyB1MiKE/svdh54g+u19XZxHTLy3m FZJCpJ+vdpWWPk3GxCOGc3VgPXgp+5iJ1c9wTHCCvqaSnwXrCpSOc0350MFTWuVT Hak+OTQ8J//ldCYTeaWDK6cKxzvNdnq+D9WQ/3EHlttEtkb7cK2TBZ2fx+kfzoXY BtHo/SSxgqX8euPjE1TYK2CVY3iAGEAyHcHeskxQ/t4lCZGd2igl3hcLgnVJJ/Ik cEGyJYhtyWEpQpa7C6iwALt7dLD3L1E= -----END CERTIFICATE-----Generated at Wed Sep 23 12:57:25 2026 by rpki-client