$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa File: 1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa (raw, json) Hash identifier: C9fnI1CCpgg1W1ZOh5mRT0jPaNoqlqbAHKMfIMnlGi8= Subject key identifier: 11:EE:4F:AD:F7:0A:2F:2B:1F:A0:59:B7:F4:17:0C:51:11:8E:15:6C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B540C6C8CB036EBF38A8E8600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.5.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:6c:8c:b0:36:eb:f3:8a:8e:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=aaf78cc6-4fd3-4c14-87fc-2ed347763fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:23:50:02:15:54:3c:69:d3:3c:7b:98:eb: 6d:e9:e9:0b:58:f3:a9:ac:55:f4:b7:04:4d:05:dd: 84:3e:87:c2:51:fc:e0:0d:96:8b:86:4d:76:67:bf: 88:34:72:ab:88:3a:97:67:fe:15:6a:87:28:11:bb: 9e:1f:90:82:ff:5d:27:2c:c7:4c:d7:cb:69:7b:d0: 1d:c7:2a:e5:c2:d5:3a:24:f7:86:b0:13:05:e7:33: 34:96:b6:b6:15:22:54:4e:59:4d:ac:81:37:56:fc: ba:8e:85:c6:9a:b4:5b:9c:50:e0:cd:13:9d:6a:37: 77:86:09:2d:0c:22:1b:f8:39:4d:e5:fc:4f:9d:81: cb:21:34:9a:22:ed:71:d2:5b:65:56:d9:90:25:bb: aa:e2:7f:62:df:be:5c:ea:b3:10:9b:5a:f7:c3:ae: 6b:c7:48:67:ad:8e:57:ca:e1:19:60:47:27:8a:01: b6:95:39:ae:4f:6d:55:56:dd:e8:4a:de:64:44:23: 13:ef:ff:cd:2b:72:55:87:fc:af:9c:13:a7:74:6f: 52:c5:8e:94:e9:ef:bf:fe:82:4e:dd:90:49:8d:50: cc:90:47:09:5e:d0:f9:57:4d:43:1d:7a:82:59:9b: 3a:59:3a:fa:ae:ea:0f:b0:77:08:75:c0:78:7c:30: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EE:4F:AD:F7:0A:2F:2B:1F:A0:59:B7:F4:17:0C:51:11:8E:15:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:af:67:79:23:8b:79:02:46:93:ff:c7:9e:b6:41:41:bb:1e: d1:eb:40:d2:51:86:86:94:d4:7a:18:4d:ad:8b:7f:4e:67:24: f1:ce:25:ef:6f:b9:ad:91:be:ca:70:90:59:e4:35:f2:12:3d: c3:2b:fb:97:fc:32:a1:73:d9:dd:18:35:50:7d:83:ea:e1:60: 37:15:38:11:97:56:aa:d8:cc:27:49:2a:35:02:22:56:92:7f: d5:a3:ab:34:3e:0f:16:c6:78:a3:58:c5:7c:3d:b8:d1:84:78: 4e:c9:8d:7c:34:2f:fb:8c:9f:af:38:fb:da:0f:ac:a7:da:dd: 02:c8:f4:c7:26:c5:28:54:81:a4:72:f1:cd:cb:21:78:3b:03: 2c:3a:b3:2a:d5:da:b6:7e:5b:cb:f3:e9:b6:2e:ec:2f:4a:a1: c5:5a:14:db:13:aa:8a:6b:6e:be:82:63:69:b1:4b:39:f6:0d: 08:8a:6c:43:dd:31:57:48:a0:16:52:5d:9b:1b:b9:38:cc:e9: 3c:f6:4b:45:1f:78:f1:61:3a:93:54:a1:82:bb:ff:24:e3:3c: 28:f2:cc:e6:40:9a:a9:29:b1:0b:6d:77:fa:7e:3d:a6:25:df: 32:34:e4:d9:dc:df:ff:de:2a:d5:90:79:45:33:07:33:de:45: e3:d0:1d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGyMsDbr84qOhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YWFmNzhjYzYtNGZkMy00YzE0LTg3ZmMtMmVkMzQ3NzYzZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nEjUAIVVDxp0zx7mOtt6ekLWPOprFX0twRN Bd2EPofCUfzgDZaLhk12Z7+INHKriDqXZ/4VaocoEbueH5CC/10nLMdM18tpe9Ad xyrlwtU6JPeGsBMF5zM0lra2FSJUTllNrIE3Vvy6joXGmrRbnFDgzROdajd3hgkt DCIb+DlN5fxPnYHLITSaIu1x0ltlVtmQJbuq4n9i375c6rMQm1r3w65rx0hnrY5X yuEZYEcnigG2lTmuT21VVt3oSt5kRCMT7//NK3JVh/yvnBOndG9SxY6U6e+//oJO 3ZBJjVDMkEcJXtD5V01DHXqCWZs6WTr6ruoPsHcIdcB4fDAzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHuT633Ci8rH6BZt/QXDFERjhVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWFiMTE3MmYtY2Q2YS0z MWY2LWE5ZDUtYzQ5NjhkZjliMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACvZ3kji3kCRpP/x562QUG7HtHrQNJRhoaU1HoYTa2Lf05nJPHOJe9v ua2RvspwkFnkNfISPcMr+5f8MqFz2d0YNVB9g+rhYDcVOBGXVqrYzCdJKjUCIlaS f9WjqzQ+DxbGeKNYxXw9uNGEeE7JjXw0L/uMn684+9oPrKfa3QLI9McmxShUgaRy 8c3LIXg7Ayw6syrV2rZ+W8vz6bYu7C9KocVaFNsTqoprbr6CY2mxSzn2DQiKbEPd MVdIoBZSXZsbuTjM6Tz2S0UfePFhOpNUoYK7/yTjPCjyzOZAmqkpsQttd/p+PaYl 3zI05Nnc3//eKtWQeUUzBzPeRePQHeg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:37 2025 by rpki-client