$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa File: a815da88-cfa8-3af3-ada0-55a72b6309b2.roa (raw, json) Hash identifier: fciDZ/kier1CqP9UXbKFCk01+YEmGx8Os7fCT6+hdMc= Subject key identifier: 1B:F2:9A:93:76:3C:86:40:FF:60:07:39:99:AF:86:96:5E:5F:AD:D2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E21AC4CE99C21057C9DA00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1a:c4:ce:99:c2:10:57:c9:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=044d8170-a108-4377-9d04-b56a7f49d677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:a7:73:a9:6f:3e:d0:d0:29:3d:43:1e:3a: 42:b9:b8:20:f7:67:4a:44:7b:01:45:af:cf:82:a9: b1:c4:22:fa:21:ec:cb:8e:bc:45:1f:aa:20:e9:12: 74:5e:d1:a4:40:b4:c1:20:75:4a:0b:58:92:79:95: 68:a1:d1:9d:76:38:0f:3c:9b:f9:a1:33:d3:34:be: 2e:26:df:07:c3:7a:1c:b0:d7:41:ab:9d:26:d0:9a: 05:d2:ec:bc:4c:d3:20:9e:04:30:02:f3:4d:bc:4b: 57:82:c3:8e:87:7d:31:dd:c3:c0:82:64:98:c6:ba: 48:3d:ba:ff:d9:05:6e:20:f9:56:85:e7:b7:99:13: 4c:57:7f:5c:a0:46:83:32:85:d7:ad:fc:fd:4e:29: a5:fa:f7:c8:66:51:4a:e8:1c:b6:51:8a:7e:08:11: 64:30:0d:16:36:e5:06:8f:87:33:41:fe:8f:99:86: 5a:1d:ac:2b:95:96:b3:ed:cb:a6:c2:f9:3b:ff:99: b5:45:ee:73:88:66:26:ce:05:33:25:6b:59:51:20: 67:bd:af:ab:0c:6a:a2:a8:06:b6:32:c8:de:36:8c: 2c:f7:6b:59:5b:65:4b:25:21:8f:6d:22:04:79:81: 72:99:8f:12:96:3c:62:fe:21:99:bc:b8:60:b8:db: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F2:9A:93:76:3C:86:40:FF:60:07:39:99:AF:86:96:5E:5F:AD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:87:96:3e:ea:fc:b9:a9:3e:66:3e:8e:9c:6e:8b:ee:bf:95: 33:7a:04:70:d4:2e:13:84:29:73:51:1e:2b:aa:04:86:88:b1: 5b:12:ee:da:14:c9:05:ff:0d:18:4b:f2:83:0f:15:77:a1:39: 5f:4b:7a:ef:5b:f9:52:96:42:54:bf:af:2d:7a:84:7e:06:6e: ed:57:45:5f:92:69:ff:9c:98:a5:33:75:9e:8c:87:f6:66:68: 68:28:a4:37:b8:66:87:ca:18:8a:1c:0f:d2:c3:b0:22:81:9c: 3a:40:ed:8a:e2:7e:cd:fc:75:ff:19:09:5f:43:5e:db:7c:11: 71:50:43:69:28:52:7a:12:f6:f9:a8:52:fc:a8:c1:47:76:84: bc:4c:27:aa:39:c3:77:1a:91:1f:36:ae:1e:b1:ff:7c:92:df: 29:da:af:dc:1c:e7:6b:8c:96:d2:a9:db:02:42:ac:d8:44:fc: a8:b7:69:7c:9d:e3:f1:34:fb:82:6e:d0:b0:a9:d6:66:75:e7: 58:61:56:f2:ca:f5:4a:e2:fa:07:37:00:53:b3:9d:64:00:86: 27:2a:6d:10:9d:c0:7c:e4:64:48:da:ff:bf:59:0d:45:14:94: 9b:c8:eb:44:e8:50:79:c2:8f:f3:e1:c0:d4:2a:ed:02:79:93: af:fa:39:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hrEzpnCEFfJ2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk MDQ0ZDgxNzAtYTEwOC00Mzc3LTlkMDQtYjU2YTdmNDlkNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo92nc6lvPtDQKT1DHjpCubgg92dKRHsBRa/P gqmxxCL6IezLjrxFH6og6RJ0XtGkQLTBIHVKC1iSeZVoodGddjgPPJv5oTPTNL4u Jt8Hw3ocsNdBq50m0JoF0uy8TNMgngQwAvNNvEtXgsOOh30x3cPAgmSYxrpIPbr/ 2QVuIPlWhee3mRNMV39coEaDMoXXrfz9Timl+vfIZlFK6By2UYp+CBFkMA0WNuUG j4czQf6PmYZaHawrlZaz7cumwvk7/5m1Re5ziGYmzgUzJWtZUSBnva+rDGqiqAa2 MsjeNows92tZW2VLJSGPbSIEeYFymY8Sljxi/iGZvLhguNtlwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvympN2PIZA/2AHOZmvhpZeX63SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTgxNWRhODgtY2ZhOC0z YWYzLWFkYTAtNTVhNzJiNjMwOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOHlj7q/LmpPmY+jpxui+6/lTN6BHDULhOEKXNRHiuqBIaIsVsS7toU yQX/DRhL8oMPFXehOV9Leu9b+VKWQlS/ry16hH4Gbu1XRV+Saf+cmKUzdZ6Mh/Zm aGgopDe4ZofKGIocD9LDsCKBnDpA7Yrifs38df8ZCV9DXtt8EXFQQ2koUnoS9vmo UvyowUd2hLxMJ6o5w3cakR82rh6x/3yS3ynar9wc52uMltKp2wJCrNhE/Ki3aXyd 4/E0+4Ju0LCp1mZ151hhVvLK9Uri+gc3AFOznWQAhicqbRCdwHzkZEja/79ZDUUU lJvI60ToUHnCj/PhwNQq7QJ5k6/6OeE= -----END CERTIFICATE-----Generated at Tue Sep 1 01:56:40 2026 by rpki-client