$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b679070f-a340-35f8-8aa8-631c57ec0943.roa File: b679070f-a340-35f8-8aa8-631c57ec0943.roa (raw, json) Hash identifier: faorDj5bsTKVlNWoEFb1KFWGuTQz96UlUz6nmwEmjVM= Subject key identifier: 67:BF:96:AC:E9:74:91:B1:86:49:48:DD:56:78:9E:8C:21:ED:33:5B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF9E21984F36E2C5ECFE82F40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b679070f-a340-35f8-8aa8-631c57ec0943.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 204.195.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:19:84:f3:6e:2c:5e:cf:e8:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=1268a4a3-0871-4636-9a9b-868072d542c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:b5:67:d6:b2:e5:ba:d8:43:a6:ac:24:4e: 5a:4a:d7:37:f6:a0:07:dc:4b:3b:fc:ed:9f:46:14: ca:52:69:48:42:c2:62:09:78:d4:67:1f:f7:bb:8a: 27:1f:be:0d:e7:ba:97:cf:82:68:21:9e:94:70:32: 78:99:2e:1f:1f:3f:7d:77:ef:98:20:52:86:27:91: 05:86:76:0f:4f:88:0a:ad:6b:94:0f:ca:50:7d:9c: 07:59:81:29:c1:65:8e:4d:e9:c8:7e:3f:07:59:34: 40:1a:72:c6:f5:70:c3:16:09:00:be:3b:1a:eb:48: c0:7a:cb:84:fb:1e:2e:d7:22:ae:64:3e:ed:c2:7a: ff:7a:00:ec:e1:00:e3:3c:f2:52:57:74:9b:03:96: e8:4b:92:d9:58:3f:07:af:a7:2b:c3:5a:4c:3b:8d: f8:6f:63:f8:da:8a:7a:ed:e9:72:b5:62:a1:e0:19: ac:e8:3f:c3:3b:a8:89:79:15:95:df:88:81:e4:4c: dd:35:a1:0a:f6:e1:92:8d:73:28:00:2c:31:14:25: 73:7c:a4:5a:84:e2:ba:33:64:88:cc:57:24:fe:5a: c4:4f:2d:2c:09:89:ff:9b:ca:b7:7d:17:33:ec:2e: b9:de:2b:0a:a4:cf:43:79:34:bd:ad:1d:2e:d2:59: b6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:96:AC:E9:74:91:B1:86:49:48:DD:56:78:9E:8C:21:ED:33:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b679070f-a340-35f8-8aa8-631c57ec0943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f3:39:ed:12:92:6f:a6:58:a2:de:49:41:96:df:e5:02:6c: 99:04:af:55:6f:7b:8f:09:1a:6a:88:01:cc:f5:8a:cd:c1:36: 04:b6:bb:f1:ec:16:75:8c:4a:e3:e5:13:72:a3:93:13:4a:4b: f1:56:7e:98:6d:42:b4:d9:e3:d0:4a:5d:8d:8d:67:95:74:86: af:5e:5d:67:5d:fa:cf:19:ac:5b:d1:9f:42:9e:8d:2c:05:c0: 20:2b:f8:a8:a9:cc:43:7b:db:d2:a2:f5:93:24:fc:0a:e9:9f: 66:f8:20:70:83:03:85:fe:6b:48:8f:a7:5e:ec:de:43:00:d7: 4b:76:08:2c:a3:5a:18:31:98:87:36:10:63:f3:d0:d6:f4:ef: 19:35:b5:93:8e:f6:ff:28:f0:b2:b4:b4:fe:83:8c:10:a3:b6: 44:32:63:d0:ce:9d:c8:4f:e4:30:41:6c:21:0a:5d:d9:4c:b9: 67:26:ae:f1:23:df:18:d6:c1:af:08:5e:e9:1b:f2:46:d0:73: 60:3c:83:a6:80:10:5d:f1:a6:e2:ea:b0:6a:50:da:d6:57:42: 50:7e:cd:80:37:c3:0f:c7:f8:f2:44:c3:5f:10:32:a3:c0:c4: ca:6d:fb:7d:7f:70:b0:55:85:b3:ea:b3:dc:be:d2:fc:76:5c: 41:4c:52:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hmE824sXs/oL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk MTI2OGE0YTMtMDg3MS00NjM2LTlhOWItODY4MDcyZDU0MmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfy1Z9ay5brYQ6asJE5aStc39qAH3Es7/O2f RhTKUmlIQsJiCXjUZx/3u4onH74N57qXz4JoIZ6UcDJ4mS4fHz99d++YIFKGJ5EF hnYPT4gKrWuUD8pQfZwHWYEpwWWOTenIfj8HWTRAGnLG9XDDFgkAvjsa60jAesuE +x4u1yKuZD7twnr/egDs4QDjPPJSV3SbA5boS5LZWD8Hr6crw1pMO434b2P42op6 7elytWKh4Bms6D/DO6iJeRWV34iB5EzdNaEK9uGSjXMoACwxFCVzfKRahOK6M2SI zFck/lrETy0sCYn/m8q3fRcz7C653isKpM9DeTS9rR0u0lm2kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe/lqzpdJGxhklI3VZ4nowh7TNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjY3OTA3MGYtYTM0MC0z NWY4LThhYTgtNjMxYzU3ZWMwOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3zOe0Skm+mWKLeSUGW3+UCbJkEr1Vve48JGmqIAcz1is3BNgS2u/Hs FnWMSuPlE3KjkxNKS/FWfphtQrTZ49BKXY2NZ5V0hq9eXWdd+s8ZrFvRn0KejSwF wCAr+KipzEN729Ki9ZMk/Arpn2b4IHCDA4X+a0iPp17s3kMA10t2CCyjWhgxmIc2 EGPz0Nb07xk1tZOO9v8o8LK0tP6DjBCjtkQyY9DOnchP5DBBbCEKXdlMuWcmrvEj 3xjWwa8IXukb8kbQc2A8g6aAEF3xpuLqsGpQ2tZXQlB+zYA3ww/H+PJEw18QMqPA xMpt+31/cLBVhbPqs9y+0vx2XEFMUrs= -----END CERTIFICATE-----Generated at Tue Sep 1 02:09:59 2026 by rpki-client