$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa File: 297a0a3a-3c07-379d-94e5-e4192d35bd92.roa (raw, json) Hash identifier: 7DaQPcfR9Nbaw6zQ/YXkOpkarahuTBAgfSZxCPIvroE= Subject key identifier: 99:44:6C:01:FD:B7:90:42:E2:5D:67:1C:2F:95:27:66:C8:7F:35:67 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4984B0A5ADDC86B6A0D4A520 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b0:a5:ad:dc:86:b6:a0:d4:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=46cc9642-3fe6-46cf-8966-0dac032b81e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:64:98:ea:7d:3f:14:5e:1e:f2:06:c2:ee: c7:9a:5d:71:06:28:97:b3:1f:e6:10:f5:c4:e0:7f: 62:73:e7:cf:97:5e:40:ab:50:72:a5:aa:98:17:61: e3:a1:83:03:05:42:18:e4:4a:70:cc:90:aa:00:e6: a1:5f:28:02:6f:67:1c:43:2b:8d:88:d4:a0:52:45: c5:85:1b:32:97:ce:51:06:e0:bb:db:8f:9b:70:09: 66:64:81:92:23:5e:3e:f8:dd:4c:94:7c:7a:21:95: 7e:35:01:a4:d4:5e:6e:a6:47:8b:26:5c:5e:fb:c5: 65:f6:af:39:7c:66:0d:bd:19:91:79:27:7c:5a:1b: 28:73:0a:01:68:e9:a6:e5:71:9b:7d:a7:7f:a6:7d: e5:1d:8e:d4:5e:04:d7:76:8d:b7:35:8d:9d:7e:51: 08:7a:61:9b:70:f3:74:75:b6:e7:0f:d7:61:49:bc: a5:49:74:bb:3b:13:66:e7:ad:5c:21:66:ee:e2:7a: 7b:b2:23:be:f0:79:2f:7c:10:86:c9:10:60:d6:fd: 17:a5:b8:b2:49:56:5b:61:03:ea:bf:aa:5e:70:04: 90:37:15:e7:da:59:47:08:96:16:1f:37:d6:ab:e6: 73:4d:8e:b6:8a:a4:c9:d8:6e:9c:57:4f:ab:1d:89: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:44:6C:01:FD:B7:90:42:E2:5D:67:1C:2F:95:27:66:C8:7F:35:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:af:9a:3d:b5:18:56:26:8d:56:94:aa:04:2c:e5:07:ff:3f: d2:65:d9:0e:e2:11:77:ab:fb:a0:2a:fc:51:d3:0b:9c:8c:2f: 8c:47:c0:33:29:22:55:ee:c5:76:ef:fc:b4:a6:15:4c:45:af: 60:bc:bb:0d:a6:a3:52:c5:7a:49:f8:b6:d1:66:bb:3c:ff:54: 51:f5:6c:41:12:5d:87:84:ab:de:18:26:c9:12:3a:87:fa:9c: 7e:ee:ff:d1:9c:2c:30:10:c4:35:19:45:c0:d7:6c:8e:34:9c: ff:f9:92:be:d5:13:5b:f2:92:11:da:fa:0c:09:5e:cf:89:f2: e3:d1:9b:a2:64:92:89:00:ea:1c:0a:e5:b4:38:2d:56:3c:a4: c8:c4:db:66:4f:58:5e:5c:e8:f8:74:af:68:50:e2:cc:a6:7d: 4f:06:32:5b:ae:54:6e:5f:9a:86:9a:08:f7:71:be:bc:be:58: 93:99:92:28:93:4f:31:de:4a:aa:bf:ea:aa:18:44:ad:ec:c2: bb:b0:14:38:07:13:64:17:8b:22:3e:76:19:ef:cc:25:86:43: a4:10:18:4b:89:f3:33:2b:94:07:35:fc:57:c7:db:c8:2f:84: d7:23:99:f5:15:26:f2:f8:3e:01:c2:55:07:2b:5b:fb:c8:55: fe:3a:02:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLClrdyGtqDUpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDZjYzk2NDItM2ZlNi00NmNmLTg5NjYtMGRhYzAzMmI4MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtJkmOp9PxReHvIGwu7Hml1xBiiXsx/mEPXE 4H9ic+fPl15Aq1BypaqYF2HjoYMDBUIY5EpwzJCqAOahXygCb2ccQyuNiNSgUkXF hRsyl85RBuC724+bcAlmZIGSI14++N1MlHx6IZV+NQGk1F5upkeLJlxe+8Vl9q85 fGYNvRmReSd8WhsocwoBaOmm5XGbfad/pn3lHY7UXgTXdo23NY2dflEIemGbcPN0 dbbnD9dhSbylSXS7OxNm561cIWbu4np7siO+8HkvfBCGyRBg1v0XpbiySVZbYQPq v6pecASQNxXn2llHCJYWHzfWq+ZzTY62iqTJ2G6cV0+rHYle+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlEbAH9t5BC4l1nHC+VJ2bIfzVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjk3YTBhM2EtM2MwNy0z NzlkLTk0ZTUtZTQxOTJkMzViZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGvmj21GFYmjVaUqgQs5Qf/P9Jl2Q7iEXer+6Aq/FHTC5yML4xHwDMp IlXuxXbv/LSmFUxFr2C8uw2mo1LFekn4ttFmuzz/VFH1bEESXYeEq94YJskSOof6 nH7u/9GcLDAQxDUZRcDXbI40nP/5kr7VE1vykhHa+gwJXs+J8uPRm6JkkokA6hwK 5bQ4LVY8pMjE22ZPWF5c6Ph0r2hQ4symfU8GMluuVG5fmoaaCPdxvry+WJOZkiiT TzHeSqq/6qoYRK3swruwFDgHE2QXiyI+dhnvzCWGQ6QQGEuJ8zMrlAc1/FfH28gv hNcjmfUVJvL4PgHCVQcrW/vIVf46AlA= -----END CERTIFICATE-----Generated at Fri Sep 25 12:57:55 2026 by rpki-client