$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa File: 2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa (raw, json) Hash identifier: w7DHPd9AnyM6V8AYudJm25Q1Rqfp99qA1WkdJdm23XQ= Subject key identifier: 20:89:49:E4:1B:A2:C7:70:AB:73:3D:2D:4B:DF:DF:74:1E:1E:F0:04 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D1F4A6EA5F5A52F9971745F80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 54113 IP address blocks: 157.5.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:6e:a5:f5:a5:2f:99:71:74:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a1de6652-a3a7-4d7a-a068-92911bbfb335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:ab:04:72:23:c1:43:b3:0c:d8:f7:c2:f8: 2a:46:59:0e:45:99:6f:85:d5:45:ef:24:3f:1c:f0: 9c:23:24:f5:be:d2:4b:7e:7a:1b:fa:02:48:22:7f: 66:8d:85:a6:a5:9b:77:5e:5d:2b:fe:e8:6a:fb:fb: 09:18:df:ba:28:52:3d:9a:58:78:20:25:5c:d7:f1: 5d:2e:5b:c1:dd:72:99:43:78:0d:8b:12:02:37:f0: c9:16:85:ea:e0:f5:ff:ad:fc:8b:b2:85:33:35:a0: a4:9d:20:1e:6d:a3:93:67:62:85:dc:00:e1:3f:54: 14:83:e1:90:c9:93:69:ff:47:00:41:e2:dd:04:ff: 22:2f:18:1c:86:93:a3:23:65:72:c5:d9:ea:9f:5d: 26:78:94:6c:2d:26:11:d3:dd:89:5b:b1:cf:8b:b7: 46:dc:94:dc:13:08:78:0d:dd:af:14:83:57:3f:c3: 58:49:ab:54:99:24:10:28:7d:44:6b:f4:bc:be:ee: 4d:d2:81:7e:65:4c:1b:aa:f6:8f:3f:70:22:d9:17: d2:47:92:ba:70:4c:22:a2:0b:a6:68:b0:4b:67:3a: 79:22:81:cd:02:96:8e:84:f1:29:9f:77:2c:d2:f7: b9:67:ea:0d:a2:cf:d1:18:f1:55:ee:39:58:18:93: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:89:49:E4:1B:A2:C7:70:AB:73:3D:2D:4B:DF:DF:74:1E:1E:F0:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d4:9d:9f:71:0f:d6:23:cd:9f:0c:57:a9:68:3e:35:d4:d4: 3b:9e:87:cb:b9:8b:f1:c0:fb:47:1f:8e:ed:31:8c:2f:45:86: 3f:21:54:5f:45:f2:89:f7:c0:d4:17:50:79:27:28:51:68:ee: 29:0a:49:7f:d0:07:10:99:7b:a3:fe:72:d5:7d:59:f0:56:ba: dc:8b:62:a2:fb:6b:60:89:7f:80:90:39:e0:d8:a1:37:b1:20: 28:53:55:34:fb:e9:b4:2e:5f:ba:4a:36:92:38:23:04:dd:41: b7:47:df:a9:aa:ec:cf:7f:08:d5:39:b2:12:70:d5:2f:b9:a5: b7:d6:7d:9b:c0:5e:3d:39:12:5d:87:69:b0:d4:af:cd:24:21: d9:0c:f0:50:66:bd:9b:98:24:fb:63:63:60:1f:53:a2:34:4b: 4d:df:4c:b4:69:86:6e:a9:6c:36:a8:6e:6f:4c:0f:ce:80:6a: 2d:12:d5:70:c2:10:dd:de:0b:d9:a8:f9:2c:37:db:eb:13:30: 8d:55:93:1a:d1:4c:0a:12:94:ef:e9:09:25:3b:0b:eb:17:01: 75:8a:bc:f8:54:41:f9:49:e6:9e:4d:62:62:a7:6c:19:5e:c5: e2:ec:e2:4e:c3:fc:6e:e5:79:69:ac:f2:34:ee:4a:54:ee:72: 7e:b8:73:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSm6l9aUvmXF0X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTFkZTY2NTItYTNhNy00ZDdhLWEwNjgtOTI5MTFiYmZiMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSCrBHIjwUOzDNj3wvgqRlkORZlvhdVF7yQ/ HPCcIyT1vtJLfnob+gJIIn9mjYWmpZt3Xl0r/uhq+/sJGN+6KFI9mlh4ICVc1/Fd LlvB3XKZQ3gNixICN/DJFoXq4PX/rfyLsoUzNaCknSAebaOTZ2KF3ADhP1QUg+GQ yZNp/0cAQeLdBP8iLxgchpOjI2Vyxdnqn10meJRsLSYR092JW7HPi7dG3JTcEwh4 Dd2vFINXP8NYSatUmSQQKH1Ea/S8vu5N0oF+ZUwbqvaPP3Ai2RfSR5K6cEwiogum aLBLZzp5IoHNApaOhPEpn3cs0ve5Z+oNos/RGPFV7jlYGJMKpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCJSeQbosdwq3M9LUvf33QeHvAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmJlMGI1MmUtNzIwMS0z MTE5LWJkNjgtMDhiOGU0ZmY3YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzUnZ9xD9YjzZ8MV6loPjXU1Dueh8u5i/HA+0cfju0xjC9Fhj8hVF9F 8on3wNQXUHknKFFo7ikKSX/QBxCZe6P+ctV9WfBWutyLYqL7a2CJf4CQOeDYoTex IChTVTT76bQuX7pKNpI4IwTdQbdH36mq7M9/CNU5shJw1S+5pbfWfZvAXj05El2H abDUr80kIdkM8FBmvZuYJPtjY2AfU6I0S03fTLRphm6pbDaobm9MD86Aai0S1XDC EN3eC9mo+Sw32+sTMI1VkxrRTAoSlO/pCSU7C+sXAXWKvPhUQflJ5p5NYmKnbBle xeLs4k7D/G7leWms8jTuSlTucn64c9c= -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:48 2026 by rpki-client