$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4121ef3c-4d5d-3072-b6b8-807457165d04.roa File: 4121ef3c-4d5d-3072-b6b8-807457165d04.roa (raw, json) Hash identifier: zqRmKVuxJ66zhSKt4MXc5H6wpsUNmVj73pdCvE2c6wE= Subject key identifier: 35:38:89:BD:8A:05:4C:59:6E:4F:AF:15:F8:D2:51:0B:52:61:0F:30 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B540C6F40F37B52ADF5C16400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4121ef3c-4d5d-3072-b6b8-807457165d04.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.5.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:6f:40:f3:7b:52:ad:f5:c1:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=6fbb4bab-f7db-491f-aa76-cd0289ad578a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:03:5c:16:bf:75:1a:10:16:19:8d:b4:02: 27:c3:c4:2a:56:5c:36:d5:76:f7:21:99:e4:be:87: 70:f6:59:9c:c9:38:a2:0e:8b:4f:9b:96:7a:30:a0: 8c:f0:17:4e:45:b8:f4:21:53:76:72:21:ec:71:d3: 99:6c:4a:93:6a:35:68:06:29:ea:f4:66:f6:93:93: 63:ae:45:37:72:3b:db:99:70:5b:63:bf:a1:18:4d: 87:f3:db:b3:3d:13:5a:32:82:8f:ea:1b:d7:53:fb: be:3b:72:dd:6c:2e:74:b0:11:24:f8:7b:8e:d9:cd: 68:0c:d4:5c:6d:da:ed:f9:5d:e1:9e:8c:13:18:fb: d3:3c:90:3d:4f:a4:db:9e:97:bc:38:19:70:74:e8: e9:98:0f:29:01:22:06:53:ee:70:bc:71:90:0c:64: 51:06:88:0b:dd:d3:c1:56:6f:2c:12:ef:b5:f2:05: dc:d0:44:32:cd:a5:46:5a:5e:f3:af:f8:fa:ef:17: e9:8f:b0:b9:3a:d2:8c:32:41:aa:1f:9b:67:d5:9b: 60:0b:16:25:12:15:b1:45:5c:18:03:93:9d:cf:a0: 92:4e:9e:be:ea:17:50:3c:5b:cc:b8:51:92:db:81: e3:cf:49:62:0a:8d:24:10:bd:c7:0d:e3:0d:86:25: a7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:38:89:BD:8A:05:4C:59:6E:4F:AF:15:F8:D2:51:0B:52:61:0F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4121ef3c-4d5d-3072-b6b8-807457165d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:90:74:bd:04:dd:95:15:26:05:3f:2d:3e:59:a2:2e:4b:d5: be:39:f1:1e:50:cb:89:08:a9:e0:0a:51:df:12:82:3c:a1:3f: 64:0e:af:f1:b1:df:46:13:cb:84:a6:33:b7:38:f8:a5:07:af: 04:a2:2b:ef:22:32:85:9a:ed:61:c4:db:37:27:4e:1e:02:18: bd:90:16:a5:ce:02:11:c9:6a:40:6d:f2:ee:15:a7:f9:63:ef: a0:74:81:48:fb:c9:8b:4b:53:53:be:b3:ce:72:42:8e:09:be: 05:df:26:be:9b:b6:db:20:02:94:91:a2:b1:f3:e6:00:74:38: f2:33:a5:62:45:ca:85:8c:67:8c:68:65:4d:f5:6f:56:e9:7f: 52:d7:eb:c2:f2:28:9d:32:29:a4:78:ff:f8:73:70:42:f1:ac: 7a:85:60:df:61:a0:d2:fa:0d:1b:8b:e7:8b:4f:11:8f:40:e2: 5e:cc:d1:65:dd:0c:46:c8:4b:f7:4b:0f:8e:fa:53:f4:e6:f6: ec:af:ec:ba:52:6f:06:16:cf:a7:32:c6:29:af:94:ff:8f:d6: 66:e8:1f:82:0c:8c:80:3c:ac:49:ea:ba:ef:46:12:6b:5e:77: 4d:29:61:f5:d5:3f:67:69:9e:10:2c:df:56:a5:fa:c2:98:b4: 57:d9:c0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDG9A83tSrfXBZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NmZiYjRiYWItZjdkYi00OTFmLWFhNzYtY2QwMjg5YWQ1NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEgDXBa/dRoQFhmNtAInw8QqVlw21Xb3IZnk vodw9lmcyTiiDotPm5Z6MKCM8BdORbj0IVN2ciHscdOZbEqTajVoBinq9Gb2k5Nj rkU3cjvbmXBbY7+hGE2H89uzPRNaMoKP6hvXU/u+O3LdbC50sBEk+HuO2c1oDNRc bdrt+V3hnowTGPvTPJA9T6Tbnpe8OBlwdOjpmA8pASIGU+5wvHGQDGRRBogL3dPB Vm8sEu+18gXc0EQyzaVGWl7zr/j67xfpj7C5OtKMMkGqH5tn1ZtgCxYlEhWxRVwY A5Odz6CSTp6+6hdQPFvMuFGS24Hjz0liCo0kEL3HDeMNhiWnxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU4ib2KBUxZbk+vFfjSUQtSYQ8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDEyMWVmM2MtNGQ1ZC0z MDcyLWI2YjgtODA3NDU3MTY1ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2QdL0E3ZUVJgU/LT5Zoi5L1b458R5Qy4kIqeAKUd8SgjyhP2QOr/Gx 30YTy4SmM7c4+KUHrwSiK+8iMoWa7WHE2zcnTh4CGL2QFqXOAhHJakBt8u4Vp/lj 76B0gUj7yYtLU1O+s85yQo4JvgXfJr6bttsgApSRorHz5gB0OPIzpWJFyoWMZ4xo ZU31b1bpf1LX68LyKJ0yKaR4//hzcELxrHqFYN9hoNL6DRuL54tPEY9A4l7M0WXd DEbIS/dLD476U/Tm9uyv7LpSbwYWz6cyximvlP+P1mboH4IMjIA8rEnquu9GEmte d00pYfXVP2dpnhAs31al+sKYtFfZwAs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:40 2025 by rpki-client