$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa File: 1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa (raw, json) Hash identifier: 7A47tLX7p79VQW7MlghR2RAGXU4zvqXN5XaVRu/qzQU= Subject key identifier: B3:EA:AD:66:FD:E0:53:C2:8E:27:5E:90:BD:19:56:BA:21:01:55:2B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4984AEBFF8CE38FE7C98AA40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ae:bf:f8:ce:38:fe:7c:98:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=72b230db-7408-4e61-acbe-d4ca8af4b5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:f5:d8:c6:2d:c2:46:c5:50:59:81:df:dd: d6:b9:01:4c:7f:19:b2:7a:e8:b3:e2:03:ae:0b:ac: d6:f7:fc:0c:b5:da:06:36:24:39:73:56:ac:34:24: 7d:29:ff:93:2e:9b:37:9c:f7:c2:aa:2f:65:55:04: a8:ed:4b:49:5c:e4:34:ee:02:8b:2e:dc:cb:fc:31: b6:6e:85:b2:9f:62:cf:84:60:24:6d:f9:00:f6:a7: ab:51:f0:bf:bf:37:ba:2e:34:7e:a2:53:49:66:87: 32:eb:93:83:21:ed:d0:9d:70:93:84:3b:dc:21:4f: f8:d4:93:13:84:b3:31:2a:a3:88:eb:90:77:5e:84: 88:32:b6:16:b1:e7:b1:50:da:bf:78:3e:43:16:18: 31:92:21:47:ac:72:0f:16:a4:3e:71:7e:79:97:fa: d3:fb:be:11:e1:35:b6:6d:1a:1d:42:a6:2d:a7:33: 14:46:5b:66:7c:65:ea:fe:fc:40:8e:af:fc:1d:b5: d7:6d:67:4d:dc:ce:e9:35:46:a3:1a:15:50:a5:93: b5:66:a3:e5:41:c2:ee:24:cf:96:73:b4:d4:71:d2: 7b:70:bb:ff:ac:d3:3b:f9:ca:89:65:15:d2:f2:a8: 26:1a:7d:1f:1b:1a:46:16:44:8b:20:b3:d2:b2:fb: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:AD:66:FD:E0:53:C2:8E:27:5E:90:BD:19:56:BA:21:01:55:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f2:b3:67:3c:bd:73:02:69:a6:9d:3c:d3:77:eb:14:6e:b1: 83:07:a0:35:64:fa:cb:94:91:a0:c4:10:ec:48:39:a4:89:52: 4f:37:92:0a:5d:15:b7:47:e0:5c:ff:4a:4a:f1:a2:c5:fc:d2: 1b:6a:9c:2e:92:83:bd:d6:99:45:b0:c6:84:09:6b:29:c6:79: 33:f6:e4:4b:4b:c4:cf:66:3e:06:5c:a3:bc:03:53:82:ce:22: 9f:1c:8d:35:0c:80:d8:cc:ed:ff:80:c2:60:67:81:1d:bb:de: d2:20:b8:56:83:c5:2c:95:e3:e4:0b:bc:a5:a1:a7:3c:5d:77: cd:85:39:c2:fd:66:d9:b4:e0:78:8e:93:4a:9c:12:15:84:e9: f1:d3:ba:e8:55:8b:67:21:ce:b1:c5:5a:8a:3f:00:dd:15:68: db:54:8e:18:e7:83:6f:42:ae:9d:77:c4:12:c7:ea:67:e0:b5: 40:47:27:8b:0c:db:0d:c5:db:e4:9e:3c:b6:62:76:e2:8c:79: 47:63:e7:6c:79:7b:a3:e0:75:49:0c:b6:ba:1f:8d:ea:39:ca: 21:e1:5a:08:83:66:eb:27:20:78:cf:dd:42:3f:a1:ce:aa:45: f4:b0:e4:80:65:b1:6e:9f:a3:f3:4c:61:3e:9e:83:1b:f2:c8: 90:af:38:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhK6/+M44/nyYqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzJiMjMwZGItNzQwOC00ZTYxLWFjYmUtZDRjYThhZjRiNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+312MYtwkbFUFmB393WuQFMfxmyeuiz4gOu C6zW9/wMtdoGNiQ5c1asNCR9Kf+TLps3nPfCqi9lVQSo7UtJXOQ07gKLLtzL/DG2 boWyn2LPhGAkbfkA9qerUfC/vze6LjR+olNJZocy65ODIe3QnXCThDvcIU/41JMT hLMxKqOI65B3XoSIMrYWseexUNq/eD5DFhgxkiFHrHIPFqQ+cX55l/rT+74R4TW2 bRodQqYtpzMURltmfGXq/vxAjq/8HbXXbWdN3M7pNUajGhVQpZO1ZqPlQcLuJM+W c7TUcdJ7cLv/rNM7+cqJZRXS8qgmGn0fGxpGFkSLILPSsvtFZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPqrWb94FPCjidekL0ZVrohAVUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWVjNGUxYjEtMzZkMC0z NTlmLTlhZjMtN2M3NzMyMmMyOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjys2c8vXMCaaadPNN36xRusYMHoDVk+suUkaDEEOxIOaSJUk83kgpd FbdH4Fz/SkrxosX80htqnC6Sg73WmUWwxoQJaynGeTP25EtLxM9mPgZco7wDU4LO Ip8cjTUMgNjM7f+AwmBngR273tIguFaDxSyV4+QLvKWhpzxdd82FOcL9Ztm04HiO k0qcEhWE6fHTuuhVi2chzrHFWoo/AN0VaNtUjhjng29Crp13xBLH6mfgtUBHJ4sM 2w3F2+SePLZiduKMeUdj52x5e6PgdUkMtrofjeo5yiHhWgiDZusnIHjP3UI/oc6q RfSw5IBlsW6fo/NMYT6egxvyyJCvOOs= -----END CERTIFICATE-----Generated at Fri Sep 25 09:12:06 2026 by rpki-client