$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa File: 1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa (raw, json) Hash identifier: UT4k6palsPZ8XcNqEufDSs3LOE4DlFqx6tsEZVb5IDM= Subject key identifier: F1:56:79:08:20:64:A9:69:A5:21:42:8D:AB:3C:88:DF:F3:1B:8B:E1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D8290190F4DEF3EEB5180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:82:90:19:0f:4d:ef:3e:eb:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1897990d-81f4-4126-84b4-143862047fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:7b:6c:52:ee:c6:07:40:63:03:f4:9e:80: 2e:e8:03:39:c7:3d:ef:d2:68:1c:36:15:2e:d1:c1: f0:e8:4a:3f:8f:13:dc:4f:1f:b8:be:e6:b7:e1:99: 95:1e:46:7d:50:6a:7c:75:b5:3c:9d:26:73:9b:54: 75:40:b0:39:f5:fa:f9:a3:32:5e:d1:4d:70:36:04: a2:d8:46:be:2f:42:be:e4:2d:de:79:a7:0d:e0:ed: 35:f6:f4:41:2b:f6:2e:6d:01:b2:77:58:17:d6:57: 71:21:0a:d4:1d:e2:61:bd:61:6f:d3:f5:c4:e5:f8: f5:c6:cd:9e:3c:a7:b7:e5:1d:5a:55:5d:86:96:e0: ff:6f:f9:aa:9f:6a:e6:fa:94:17:1a:6c:b4:5e:fe: 24:46:fb:32:a7:94:72:dd:14:a1:d1:0a:64:5d:36: 59:e7:a6:a7:c5:9e:49:be:70:ae:b7:e5:76:5c:2b: 13:48:f1:c6:de:be:0e:d8:1b:0d:52:c5:0c:35:d9: a3:86:d2:cf:13:fd:39:26:ec:c2:1b:07:6b:10:59: 54:25:1d:40:e3:40:04:7a:8d:e7:70:b4:7a:e2:39: f3:fb:e2:94:f9:d4:54:0c:0e:e3:a2:dd:0e:ef:3f: 05:8c:b4:e5:63:3a:a3:c3:79:2a:84:01:ba:06:75: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:56:79:08:20:64:A9:69:A5:21:42:8D:AB:3C:88:DF:F3:1B:8B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:53:53:eb:70:bc:28:46:fb:c9:c2:98:5e:a5:2a:97:51:d5: fc:fd:9c:f4:97:d1:f3:5b:72:94:ed:6d:4b:3e:48:2b:7b:36: 98:5e:a7:63:9a:3f:08:40:04:95:bd:0e:e8:fb:20:22:eb:1f: 39:d8:c0:96:7e:9f:a9:f4:6c:89:20:d2:2f:6b:ab:74:2e:71: 83:5f:26:bf:45:f6:27:29:63:cd:9e:ef:8b:7c:5f:9b:89:7c: d1:03:eb:d9:b8:3e:b4:1e:4d:d5:ce:29:96:08:c8:6a:24:34: 21:60:db:4d:9a:5b:9f:2c:e5:a9:1c:5f:ac:73:7b:4f:fe:54: 9b:e7:e4:41:06:44:e7:52:37:ab:19:ae:f2:0e:82:3f:ff:aa: 0e:b4:5e:2b:32:6e:3e:08:72:27:51:9a:b6:20:2b:54:66:36: 12:a1:02:92:c3:d3:a9:8b:dc:51:95:ed:2b:cb:0d:07:a9:5d: db:6f:8f:cb:7b:1f:81:88:46:a7:af:26:40:7b:e5:b6:86:d3: 9d:52:8a:53:48:24:d2:a2:1c:f9:87:1c:31:88:83:9a:61:70: be:65:11:b4:74:4c:44:e9:70:61:2c:41:e2:e5:bf:d5:e6:e9: 51:a9:8b:da:71:9d:7b:d6:a0:1f:f0:c1:5a:b7:5e:6e:95:f9: 64:07:4c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYKQGQ9N7z7rUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTg5Nzk5MGQtODFmNC00MTI2LTg0YjQtMTQzODYyMDQ3ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi57bFLuxgdAYwP0noAu6AM5xz3v0mgcNhUu 0cHw6Eo/jxPcTx+4vua34ZmVHkZ9UGp8dbU8nSZzm1R1QLA59fr5ozJe0U1wNgSi 2Ea+L0K+5C3eeacN4O019vRBK/YubQGyd1gX1ldxIQrUHeJhvWFv0/XE5fj1xs2e PKe35R1aVV2GluD/b/mqn2rm+pQXGmy0Xv4kRvsyp5Ry3RSh0QpkXTZZ56anxZ5J vnCut+V2XCsTSPHG3r4O2BsNUsUMNdmjhtLPE/05JuzCGwdrEFlUJR1A40AEeo3n cLR64jnz++KU+dRUDA7jot0O7z8FjLTlYzqjw3kqhAG6BnXSJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFWeQggZKlppSFCjas8iN/zG4vhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWFiMTE3MmYtY2Q2YS0z MWY2LWE5ZDUtYzQ5NjhkZjliMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNTU+twvChG+8nCmF6lKpdR1fz9nPSX0fNbcpTtbUs+SCt7Nphep2Oa PwhABJW9Duj7ICLrHznYwJZ+n6n0bIkg0i9rq3QucYNfJr9F9icpY82e74t8X5uJ fNED69m4PrQeTdXOKZYIyGokNCFg202aW58s5akcX6xze0/+VJvn5EEGROdSN6sZ rvIOgj//qg60Xisybj4IcidRmrYgK1RmNhKhApLD06mL3FGV7SvLDQepXdtvj8t7 H4GIRqevJkB75baG051SilNIJNKiHPmHHDGIg5phcL5lEbR0TETpcGEsQeLlv9Xm 6VGpi9pxnXvWoB/wwVq3Xm6V+WQHTJw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:41:37 2026 by rpki-client