$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/64cb975c-196a-3e58-9521-48cd35619ae1.roa File: 64cb975c-196a-3e58-9521-48cd35619ae1.roa (raw, json) Hash identifier: 4XGmOwMzxiRMtPVDWh8FydSId4406WRF7iQcId3K+jg= Subject key identifier: D3:92:2F:3C:9B:2A:5C:74:07:FD:A8:42:1C:16:69:97:31:84:D1:92 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D83A51A3A3A212B6A3680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/64cb975c-196a-3e58-9521-48cd35619ae1.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:83:a5:1a:3a:3a:21:2b:6a:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=86ba4928-946d-4e88-bdbd-2c9b4fef6caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:c1:ce:ed:20:9a:25:34:ce:b2:8f:fe:00: 44:f1:1a:2c:54:0d:f1:0e:38:f6:1e:7f:01:a5:e8: 16:9d:44:ce:c1:be:b9:19:46:a1:10:77:48:db:84: 9f:d3:30:db:42:e7:d7:ee:d7:14:bb:58:f0:df:26: 1f:bb:2c:66:b4:7b:f3:b9:ba:ca:54:9c:1c:16:f5: ea:90:15:9b:48:f3:19:83:f8:79:f2:ff:27:0c:52: 52:4b:f7:04:8c:ae:51:f2:21:3b:9c:d9:e7:6e:4c: 66:e3:de:48:5b:41:19:e0:98:9a:e4:e4:b2:01:79: 01:1e:6d:21:82:c4:81:5f:4f:95:13:84:b1:f5:57: 4b:10:7a:47:0c:f8:22:38:c2:e3:16:d4:d2:8a:7f: 50:e0:e9:1b:ea:8b:30:d4:a1:ee:be:71:4f:ad:9b: 05:c7:de:54:1e:1f:bc:cb:55:37:27:1a:9e:50:1c: e7:b4:38:22:96:7d:b8:cf:a4:2b:1a:60:2e:f5:a4: ba:6a:df:5b:bd:93:cc:04:39:b9:78:2d:45:d8:e4: 27:18:b4:6b:b6:c8:41:a4:0c:88:87:92:d3:fd:eb: 11:7f:ac:f4:14:ae:9c:23:db:3a:df:e8:bd:56:39: 53:be:d6:52:49:b7:4b:44:7f:17:04:8c:00:bd:05: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:92:2F:3C:9B:2A:5C:74:07:FD:A8:42:1C:16:69:97:31:84:D1:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/64cb975c-196a-3e58-9521-48cd35619ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:33:50:3d:3a:d4:1f:50:e0:94:72:0b:2d:98:0f:e8:d4:4e: 27:4c:bb:87:79:6e:0c:9e:07:90:41:ec:e0:61:55:0f:7a:e0: 95:ed:9c:b0:bf:c5:3d:34:21:5c:c3:18:e7:33:5c:b4:16:01: 5d:c8:b3:9e:bb:27:de:f3:b7:ff:50:9c:ea:c5:01:40:7d:46: 63:b7:c3:37:fb:2c:c5:9f:57:4d:1f:b8:40:98:4c:37:e4:d5: 0c:5e:ec:85:19:4e:c9:78:f7:a6:0b:ed:b2:e8:45:d5:59:e8: 78:29:ce:f2:df:f7:42:85:46:bc:a5:8d:4f:14:03:d0:8c:15: 1d:55:92:f9:86:26:08:59:f5:fb:4b:c1:da:ad:34:09:2c:35: c1:fc:5a:c1:e8:1e:49:e7:7a:90:af:13:31:10:22:54:60:fb: c6:29:ef:97:ee:6e:78:02:22:08:de:5d:a0:14:56:18:88:a1: 4a:a4:cd:3a:cc:fd:db:6e:4e:4b:40:d4:17:a3:2e:97:81:4c: ec:bf:26:29:73:11:ff:f3:43:3f:83:27:92:39:3a:7f:ec:af: ca:13:65:60:28:ab:1c:7d:ab:bb:41:54:75:42:d6:8a:89:65: 8d:0b:6b:58:27:fd:f1:96:ba:d3:ce:25:7b:36:f5:e0:09:71: 48:1b:89:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYOlGjo6IStqNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODZiYTQ5MjgtOTQ2ZC00ZTg4LWJkYmQtMmM5YjRmZWY2Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhHBzu0gmiU0zrKP/gBE8RosVA3xDjj2Hn8B pegWnUTOwb65GUahEHdI24Sf0zDbQufX7tcUu1jw3yYfuyxmtHvzubrKVJwcFvXq kBWbSPMZg/h58v8nDFJSS/cEjK5R8iE7nNnnbkxm495IW0EZ4Jia5OSyAXkBHm0h gsSBX0+VE4Sx9VdLEHpHDPgiOMLjFtTSin9Q4Okb6osw1KHuvnFPrZsFx95UHh+8 y1U3JxqeUBzntDgiln24z6QrGmAu9aS6at9bvZPMBDm5eC1F2OQnGLRrtshBpAyI h5LT/esRf6z0FK6cI9s63+i9VjlTvtZSSbdLRH8XBIwAvQXjWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOSLzybKlx0B/2oQhwWaZcxhNGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjRjYjk3NWMtMTk2YS0z ZTU4LTk1MjEtNDhjZDM1NjE5YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABczUD061B9Q4JRyCy2YD+jUTidMu4d5bgyeB5BB7OBhVQ964JXtnLC/ xT00IVzDGOczXLQWAV3Is567J97zt/9QnOrFAUB9RmO3wzf7LMWfV00fuECYTDfk 1Qxe7IUZTsl496YL7bLoRdVZ6HgpzvLf90KFRryljU8UA9CMFR1VkvmGJghZ9ftL wdqtNAksNcH8WsHoHknnepCvEzEQIlRg+8Yp75fubngCIgjeXaAUVhiIoUqkzTrM /dtuTktA1BejLpeBTOy/JilzEf/zQz+DJ5I5On/sr8oTZWAoqxx9q7tBVHVC1oqJ ZY0La1gn/fGWutPOJXs29eAJcUgbiQw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:38:02 2026 by rpki-client