$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/59368870-c3ca-3da1-bd9b-5968e8a462e6.roa File: 59368870-c3ca-3da1-bd9b-5968e8a462e6.roa (raw, json) Hash identifier: cRBkMvZeeEyNLSEfMZDrKoufLlFStScBa9vjzXG69tg= Subject key identifier: 7A:BA:71:37:9C:53:20:FA:40:93:F9:0C:3F:A5:CA:B0:F0:92:80:5D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D84BA1FA6F74A518B7E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/59368870-c3ca-3da1-bd9b-5968e8a462e6.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:84:ba:1f:a6:f7:4a:51:8b:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=49f910c2-805f-4c2d-b995-9ff637af80b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:2d:0c:32:96:a7:eb:18:62:16:35:d8:01: 1c:ce:73:e6:d9:ce:ae:fa:25:2b:bd:33:2f:e1:76: ea:c1:ba:aa:6e:3e:16:88:ba:1e:00:70:9c:36:93: 5c:12:a7:8d:96:4d:26:e0:23:3e:b7:17:a8:75:c9: f9:8c:f3:d1:2c:30:e3:0e:dd:8b:d5:cf:1c:94:62: 52:58:e2:0f:49:bd:e9:58:70:21:67:43:3c:c2:0f: 6d:27:55:35:aa:96:ed:55:e7:2a:5f:7b:ff:7b:9d: 55:95:e9:b1:61:c0:78:a4:92:d7:09:52:f3:bf:fe: b2:41:b4:26:13:02:57:05:b2:97:0c:d4:b3:e7:df: 58:a0:08:65:3d:96:e2:bb:ac:85:69:0c:6d:4c:59: af:d3:3d:49:1f:41:b0:a4:f4:f8:cb:24:85:cd:6d: 8b:22:a6:b3:1b:55:84:b3:cf:81:40:ad:42:43:18: 70:ea:fc:2e:4c:31:2e:f8:7c:c1:a7:c7:5c:56:6e: f0:d3:b3:bb:6a:1b:d2:40:f2:6e:72:de:c5:76:e2: 20:60:49:77:99:d3:33:62:b9:95:18:cf:87:92:d2: 49:ba:45:17:fa:4d:be:21:33:56:7c:6e:d0:81:ec: 14:38:94:3c:94:53:05:25:6a:a0:5e:33:29:7a:5e: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BA:71:37:9C:53:20:FA:40:93:F9:0C:3F:A5:CA:B0:F0:92:80:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/59368870-c3ca-3da1-bd9b-5968e8a462e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:dd:29:ba:fe:e8:f7:52:aa:2f:47:da:da:9d:af:a8:70:b1: a9:fd:02:3b:67:7a:28:11:92:3b:71:ad:67:93:d9:ac:1d:a5: 16:69:6a:0b:df:76:10:03:94:30:35:96:d0:d5:40:33:a7:30: 08:81:19:7e:75:39:bd:7d:26:84:8d:79:0d:50:20:53:23:c6: 39:44:8a:03:33:0b:80:d3:14:ee:26:04:1f:f7:1b:60:fc:5e: b6:30:c2:b2:74:c0:76:8d:57:4b:55:a3:11:26:e6:3e:4e:56: 06:ea:5f:5b:78:41:5d:fa:b1:22:04:10:ac:69:a9:ba:84:13: 1b:bf:93:31:50:25:8d:b4:7c:29:2c:33:46:2f:0f:cf:fc:b7: de:25:09:47:05:0e:3e:ad:82:1a:83:09:ba:fe:10:7a:11:40: bc:e4:1c:41:62:79:60:65:ad:81:19:68:b4:df:55:78:8c:f0: 41:66:1c:52:b2:3d:bb:51:78:42:41:49:ad:7c:ad:55:c4:3a: 3e:57:b8:1d:1d:77:df:87:24:a9:c0:cd:07:94:14:40:b4:4e: 65:20:d9:e2:00:bc:d0:b5:25:35:96:fa:56:91:83:6e:34:53: 89:15:57:c6:6e:f8:b5:3b:29:64:e9:76:77:b9:87:26:26:3e: b7:c0:62:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYS6H6b3SlGLfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDlmOTEwYzItODA1Zi00YzJkLWI5OTUtOWZmNjM3YWY4MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OctDDKWp+sYYhY12AEcznPm2c6u+iUrvTMv 4Xbqwbqqbj4WiLoeAHCcNpNcEqeNlk0m4CM+txeodcn5jPPRLDDjDt2L1c8clGJS WOIPSb3pWHAhZ0M8wg9tJ1U1qpbtVecqX3v/e51VlemxYcB4pJLXCVLzv/6yQbQm EwJXBbKXDNSz599YoAhlPZbiu6yFaQxtTFmv0z1JH0GwpPT4yySFzW2LIqazG1WE s8+BQK1CQxhw6vwuTDEu+HzBp8dcVm7w07O7ahvSQPJuct7FduIgYEl3mdMzYrmV GM+HktJJukUX+k2+ITNWfG7QgewUOJQ8lFMFJWqgXjMpel7yoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq6cTecUyD6QJP5DD+lyrDwkoBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTkzNjg4NzAtYzNjYS0z ZGExLWJkOWItNTk2OGU4YTQ2MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7dKbr+6PdSqi9H2tqdr6hwsan9AjtneigRkjtxrWeT2awdpRZpagvf dhADlDA1ltDVQDOnMAiBGX51Ob19JoSNeQ1QIFMjxjlEigMzC4DTFO4mBB/3G2D8 XrYwwrJ0wHaNV0tVoxEm5j5OVgbqX1t4QV36sSIEEKxpqbqEExu/kzFQJY20fCks M0YvD8/8t94lCUcFDj6tghqDCbr+EHoRQLzkHEFieWBlrYEZaLTfVXiM8EFmHFKy PbtReEJBSa18rVXEOj5XuB0dd9+HJKnAzQeUFEC0TmUg2eIAvNC1JTWW+laRg240 U4kVV8Zu+LU7KWTpdne5hyYmPrfAYhE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:12 2026 by rpki-client