$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa File: 655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa (raw, json) Hash identifier: DY/4PMrqphahypjms49kHERBPZ+9WbxfWtXWNkCXDFE= Subject key identifier: 34:10:5C:21:DF:CB:4C:30:FA:4D:95:79:9E:16:A4:54:6E:AC:4D:1A Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584F7E7DC3D2F5DD20960CB8DE40 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 399244 IP address blocks: 204.77.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c3:d2:f5:dd:20:96:0c:b8:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=895dba2c-b72c-4cdc-96f0-9125b6e2a9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:80:67:a8:76:a0:59:11:31:03:a7:48:b5: 2a:e4:1b:ac:ad:5a:95:b3:a9:d9:10:8e:b6:a3:ef: cb:4b:3b:42:a0:44:22:ec:ea:01:bb:d1:ea:eb:51: 84:3e:34:63:37:83:10:02:37:4f:94:c6:58:da:dd: 9d:8a:46:f9:37:d0:e6:f2:43:23:80:2c:d4:0b:4c: a6:e7:2f:88:db:0b:9d:4e:5f:50:3f:d4:86:5b:57: 73:d4:3c:71:a3:93:2f:3f:fa:64:00:e5:c2:23:31: d9:5e:21:fb:e7:81:a8:95:91:26:64:55:3e:f6:a1: a0:76:6a:55:38:24:4b:88:51:58:1b:64:b0:25:e3: 18:4d:8c:5d:c7:53:b7:91:1c:76:32:62:4a:59:42: 1b:51:2c:7e:c0:c8:6e:37:4f:78:60:e3:c6:ad:3d: 4e:a0:fa:7b:a2:e1:a6:f5:d2:ea:4e:dd:4e:1b:49: d4:aa:a7:2a:5e:30:9d:44:00:d1:54:7c:45:72:ea: ea:5e:98:bd:cb:db:74:81:84:81:da:54:26:34:bf: e7:8e:6f:6b:51:74:03:a5:da:34:38:30:29:0a:87: ca:89:75:2f:b4:49:1a:85:ff:43:ff:2f:b6:11:eb: a5:2c:fd:b5:bd:01:df:bc:dd:52:71:6e:78:16:ec: 77:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:10:5C:21:DF:CB:4C:30:FA:4D:95:79:9E:16:A4:54:6E:AC:4D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 204.77.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7a:60:c2:d4:bd:f9:f7:ff:3f:c3:43:70:d1:00:c5:21:79: d9:af:95:e6:af:4d:ba:2e:e8:c7:d6:12:16:4f:3d:0c:96:da: fd:8c:0c:0c:8a:e5:2e:c8:bd:42:a2:d6:40:43:06:95:f2:58: 39:cd:36:cb:e8:9e:82:cd:f4:77:1d:63:a9:41:d6:10:35:78: 8c:30:b9:24:fc:10:eb:fe:a8:9c:03:31:f7:f4:65:c3:aa:69: e8:29:b2:07:72:a4:b0:0c:46:d8:4f:dc:c1:02:7d:90:5f:3e: cd:f9:0c:bf:8c:ce:98:1c:7d:7d:00:e2:ec:f1:be:bb:af:92: 52:2d:13:15:2b:d6:c5:47:d3:77:73:8c:22:69:8a:e2:73:b2: b8:2d:61:79:7f:9a:fb:f0:e2:51:b7:b2:cb:02:54:42:79:c0: a7:27:14:e8:3a:fb:ee:25:40:9b:10:fd:ba:74:0d:78:c3:80: 1e:e0:80:00:8a:7b:3f:18:3e:9d:ed:43:0f:c1:ab:40:6f:8b: d2:b7:4f:29:57:f1:ea:fb:4e:53:d8:68:db:d0:51:ac:2f:f2: d9:75:b4:44:b6:3c:bd:d4:67:85:49:2f:7f:9f:35:42:c4:0d: 1c:1a:7e:77:59:bf:e4:fc:c2:55:5b:da:7c:11:4e:a3:51:15: 77:a9:8f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcPS9d0glgy43kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ODk1ZGJhMmMtYjcyYy00Y2RjLTk2ZjAtOTEyNWI2ZTJhOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nmAZ6h2oFkRMQOnSLUq5BusrVqVs6nZEI62 o+/LSztCoEQi7OoBu9Hq61GEPjRjN4MQAjdPlMZY2t2dikb5N9Dm8kMjgCzUC0ym 5y+I2wudTl9QP9SGW1dz1Dxxo5MvP/pkAOXCIzHZXiH754GolZEmZFU+9qGgdmpV OCRLiFFYG2SwJeMYTYxdx1O3kRx2MmJKWUIbUSx+wMhuN094YOPGrT1OoPp7ouGm 9dLqTt1OG0nUqqcqXjCdRADRVHxFcurqXpi9y9t0gYSB2lQmNL/njm9rUXQDpdo0 ODApCofKiXUvtEkahf9D/y+2EeulLP21vQHfvN1ScW54Fux3FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQQXCHfy0ww+k2VeZ4WpFRurE0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvNjU1YjBiMGEtMDM2YS0z YTRlLThkNWItNWUyMGM5NmY0N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN6YMLUvfn3/z/DQ3DRAMUhedmvleavTbou6MfWEhZPPQyW2v2MDAyK 5S7IvUKi1kBDBpXyWDnNNsvonoLN9HcdY6lB1hA1eIwwuST8EOv+qJwDMff0ZcOq aegpsgdypLAMRthP3MECfZBfPs35DL+MzpgcfX0A4uzxvruvklItExUr1sVH03dz jCJpiuJzsrgtYXl/mvvw4lG3sssCVEJ5wKcnFOg6++4lQJsQ/bp0DXjDgB7ggACK ez8YPp3tQw/Bq0Bvi9K3TylX8er7TlPYaNvQUawv8tl1tES2PL3UZ4VJL3+fNULE DRwafndZv+T8wlVb2nwRTqNRFXepj0E= -----END CERTIFICATE-----Generated at Sat Oct 24 17:30:39 2026 by rpki-client