$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa File: 2d4f9a49-dc28-3351-bde3-98642755927b.roa (raw, json) Hash identifier: M9rrDuyI+gGB5+agVh/mpDrD4cDUfp3nfL30sdE4tes= Subject key identifier: 03:08:9A:22:E1:EB:F2:4A:AF:D5:35:69:18:76:53:F5:BD:A8:A3:88 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E21ADF549193605D9BE8C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1a:df:54:91:93:60:5d:9b:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=ac699e28-3533-4264-a460-df287de35674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bb:2b:b7:14:3c:82:88:84:74:74:42:93:33: cf:d7:80:10:43:fe:e0:0b:90:9c:da:b2:46:f5:2f: b0:87:9a:66:f4:f6:d6:3b:03:54:17:17:c8:d4:c3: c3:ee:3c:c9:a5:25:df:a9:d0:4d:d3:62:76:e3:f9: fa:95:27:b8:52:68:03:d0:25:6e:c7:d0:01:38:7e: b3:88:e2:26:4d:08:ae:77:6e:21:b7:10:db:bd:8e: f8:a9:24:7c:5d:2e:9f:65:18:5b:97:95:33:e0:48: 08:fd:aa:01:90:8d:f0:27:6d:7e:af:71:e5:bd:f8: 38:e2:29:d4:43:90:7a:ad:aa:a8:2f:11:11:90:ee: ce:94:c9:64:d6:e6:a4:f8:58:2f:49:6b:02:a4:8f: c9:51:40:eb:98:a9:dd:86:52:cb:04:c3:38:90:e7: 35:ff:8f:99:12:01:b0:dd:8f:a8:00:6a:82:7a:90: 4e:2b:77:25:dc:a0:f3:63:ed:79:30:57:b4:7b:78: a1:34:db:ed:0a:cd:3e:b6:f6:df:3e:90:bd:f1:dc: 73:1d:74:f4:52:c9:77:34:4d:dd:76:47:7a:a8:fb: 47:ac:07:96:db:d8:b2:8e:8c:f0:cf:2f:6a:f3:7a: 7d:5e:d0:09:20:9d:ca:b7:2e:f2:2d:ed:4e:cc:01: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:08:9A:22:E1:EB:F2:4A:AF:D5:35:69:18:76:53:F5:BD:A8:A3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a0:96:40:a1:f6:2e:f9:08:be:8c:47:7b:6b:2b:24:41:dc: bb:17:2d:0e:7e:70:49:26:6d:10:2d:86:e7:9a:19:9e:d8:93: bf:c9:af:b0:fe:71:49:74:3c:2b:5b:ab:89:96:b5:63:9b:ed: 43:1f:a8:b6:32:e4:52:17:b2:78:2f:f3:28:0b:95:c8:af:5a: 61:f6:96:46:84:8a:42:81:64:6f:80:0c:22:52:21:25:c2:dd: 48:fa:7e:2c:67:a4:fc:76:26:14:5f:95:34:8a:7b:e9:cb:5e: a1:9a:f7:c5:a2:cb:6f:77:7e:c2:b4:c0:cc:1d:f5:50:db:8a: 51:85:ef:80:00:40:26:21:c7:72:fb:14:03:b8:d3:a5:0e:6b: c0:74:18:06:3e:e4:3d:a5:01:d1:79:dd:fd:9e:81:cc:04:13: 79:e4:53:9b:fa:85:0b:0c:54:57:98:95:5e:2f:f2:62:9c:3a: b0:6c:5d:99:13:66:1a:49:8b:ec:87:72:00:c3:ac:8c:2a:49: 8c:b1:fa:cb:d0:43:0e:7a:51:01:6f:c9:ac:4d:c8:38:66:05: a1:20:0d:41:5c:01:a3:45:53:61:d8:9c:c2:a1:7e:eb:42:55: 1c:ad:ac:05:ed:a3:77:ad:c6:66:9f:f5:62:9f:7c:b9:e9:10: a3:9d:c9:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hrfVJGTYF2b6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk YWM2OTllMjgtMzUzMy00MjY0LWE0NjAtZGYyODdkZTM1Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLsrtxQ8goiEdHRCkzPP14AQQ/7gC5Cc2rJG 9S+wh5pm9PbWOwNUFxfI1MPD7jzJpSXfqdBN02J24/n6lSe4UmgD0CVux9ABOH6z iOImTQiud24htxDbvY74qSR8XS6fZRhbl5Uz4EgI/aoBkI3wJ21+r3Hlvfg44inU Q5B6raqoLxERkO7OlMlk1uak+FgvSWsCpI/JUUDrmKndhlLLBMM4kOc1/4+ZEgGw 3Y+oAGqCepBOK3cl3KDzY+15MFe0e3ihNNvtCs0+tvbfPpC98dxzHXT0Usl3NE3d dkd6qPtHrAeW29iyjozwzy9q83p9XtAJIJ3Kty7yLe1OzAGLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMImiLh6/JKr9U1aRh2U/W9qKOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQ0ZjlhNDktZGMyOC0z MzUxLWJkZTMtOTg2NDI3NTU5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeglkCh9i75CL6MR3trKyRB3LsXLQ5+cEkmbRAthueaGZ7Yk7/Jr7D+ cUl0PCtbq4mWtWOb7UMfqLYy5FIXsngv8ygLlcivWmH2lkaEikKBZG+ADCJSISXC 3Uj6fixnpPx2JhRflTSKe+nLXqGa98Wiy293fsK0wMwd9VDbilGF74AAQCYhx3L7 FAO406UOa8B0GAY+5D2lAdF53f2egcwEE3nkU5v6hQsMVFeYlV4v8mKcOrBsXZkT ZhpJi+yHcgDDrIwqSYyx+svQQw56UQFvyaxNyDhmBaEgDUFcAaNFU2HYnMKhfutC VRytrAXto3etxmaf9WKffLnpEKOdye4= -----END CERTIFICATE-----Generated at Tue Sep 1 02:09:49 2026 by rpki-client