$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa File: 1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa (raw, json) Hash identifier: cQpS53xtGGxQ0Fqlrfq+suJSnDNiWoWu/DMi5xefoWM= Subject key identifier: 1D:E3:9B:A7:3F:CC:CD:AF:C7:9F:BB:81:B1:8B:07:43:A9:EF:81:07 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B5F375879A0410DF6F63FE020 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 54113 IP address blocks: 157.5.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:58:79:a0:41:0d:f6:f6:3f:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=73ee6d65-9b1b-4b39-8b42-3eaeb9b393fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:80:2a:a6:43:de:88:db:ba:f2:79:f1:32: 5c:0c:39:49:5a:b5:c0:47:3a:bc:51:29:b6:e0:3d: ac:b5:93:72:ec:02:da:88:a1:67:83:25:17:3e:4c: a0:57:70:cb:f4:94:ff:6c:1c:d0:04:b3:49:1b:24: 2a:7b:3a:3d:ea:c8:4d:0d:29:55:32:91:89:70:da: e8:ca:c5:07:53:b0:13:d9:28:89:03:dd:e0:30:9c: 06:c6:08:d4:51:70:65:00:0f:dc:c6:02:20:8e:8e: ca:06:de:34:74:a4:07:70:68:11:4b:55:9d:70:69: 40:a4:85:51:7a:9c:29:c8:01:14:c9:69:55:fe:24: 13:f9:1e:ae:fc:ea:c5:10:ba:89:2f:ef:09:d1:4f: e3:02:51:f8:df:6a:77:a7:aa:1b:f1:59:d2:93:3d: 68:a7:ad:a4:35:8c:b1:24:8d:92:88:73:e4:ec:bd: 20:be:c9:46:21:a5:7d:66:5b:44:d3:5a:5d:bd:33: 98:1e:ae:60:47:73:6e:32:9b:fe:13:e2:e0:e1:9d: bf:c0:fd:11:59:27:f2:1a:bc:73:de:c5:ce:d6:84: dc:d9:b2:11:17:4c:fe:80:fc:eb:ab:0c:bf:fa:57: ef:d7:b4:a3:db:b4:f0:0f:8c:ac:1e:2d:3b:32:f3: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E3:9B:A7:3F:CC:CD:AF:C7:9F:BB:81:B1:8B:07:43:A9:EF:81:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ec4e1b1-36d0-359f-9af3-7c77322c28a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:42:fe:7c:f6:b6:76:68:41:2c:6c:06:92:d2:c5:35:41:8c: ee:0f:57:c1:62:41:5f:a3:84:b8:04:aa:14:f2:0c:59:16:36: 6c:9e:d8:2e:e2:2c:9f:df:89:8f:a9:15:43:a8:97:09:0a:64: 1f:ee:13:0f:01:83:b3:a0:9c:52:14:ea:87:8f:6b:47:66:bd: 22:f0:b7:93:70:14:76:9a:88:14:11:5c:57:ca:5c:3b:d6:3d: c6:ed:5b:74:96:b7:b7:3a:63:ca:6c:04:49:36:5d:fd:a6:d2: d2:18:54:b1:5c:4f:72:18:2e:1c:5d:3c:27:a2:92:10:3c:6d: ce:41:1f:67:6d:b0:32:f1:78:55:ed:9a:d1:30:cd:50:cc:fb: ab:a9:b2:84:2f:1c:bf:20:b0:06:44:93:36:05:f6:23:cd:26: d8:bd:0e:be:88:a9:3c:f6:81:ba:bc:6a:b3:5b:05:f1:29:d2: 95:e7:01:40:ff:22:e2:a3:a3:7e:d0:6b:a3:0d:b2:e6:ea:d2: 34:07:86:c9:4f:82:b0:2e:ea:df:0d:e9:d2:6d:d9:87:f0:67: 9d:ce:59:e6:3d:9b:3d:16:b6:38:f1:88:42:a7:2b:bf:b9:b2: a9:98:f1:72:aa:5e:bd:a5:26:78:7e:98:fb:49:e7:38:3c:d5: b2:e9:b3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN1h5oEEN9vY/4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NzNlZTZkNjUtOWIxYi00YjM5LThiNDItM2VhZWI5YjM5M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU+AKqZD3ojbuvJ58TJcDDlJWrXARzq8USm2 4D2stZNy7ALaiKFngyUXPkygV3DL9JT/bBzQBLNJGyQqezo96shNDSlVMpGJcNro ysUHU7AT2SiJA93gMJwGxgjUUXBlAA/cxgIgjo7KBt40dKQHcGgRS1WdcGlApIVR epwpyAEUyWlV/iQT+R6u/OrFELqJL+8J0U/jAlH432p3p6ob8VnSkz1op62kNYyx JI2SiHPk7L0gvslGIaV9ZltE01pdvTOYHq5gR3NuMpv+E+Lg4Z2/wP0RWSfyGrxz 3sXO1oTc2bIRF0z+gPzrqwy/+lfv17Sj27TwD4ysHi07MvNLbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3jm6c/zM2vx5+7gbGLB0Op74EHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWVjNGUxYjEtMzZkMC0z NTlmLTlhZjMtN2M3NzMyMmMyOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNC/nz2tnZoQSxsBpLSxTVBjO4PV8FiQV+jhLgEqhTyDFkWNmye2C7i LJ/fiY+pFUOolwkKZB/uEw8Bg7OgnFIU6oePa0dmvSLwt5NwFHaaiBQRXFfKXDvW PcbtW3SWt7c6Y8psBEk2Xf2m0tIYVLFcT3IYLhxdPCeikhA8bc5BH2dtsDLxeFXt mtEwzVDM+6upsoQvHL8gsAZEkzYF9iPNJti9Dr6IqTz2gbq8arNbBfEp0pXnAUD/ IuKjo37Qa6MNsubq0jQHhslPgrAu6t8N6dJt2YfwZ53OWeY9mz0WtjjxiEKnK7+5 sqmY8XKqXr2lJnh+mPtJ5zg81bLps8I= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:28 2025 by rpki-client