$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6a43c37f-27a2-376f-861d-998797fb62cf.roa File: 6a43c37f-27a2-376f-861d-998797fb62cf.roa (raw, json) Hash identifier: vTBzFzjXDfOy9VvTOwT/NhK6eRAE2jVpMKNxLTi8P2Q= Subject key identifier: 78:37:7F:4D:0A:1B:74:82:B3:92:F1:A8:3E:A8:E9:76:48:B4:C2:A7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B540C6CBAC223D8137D24B280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6a43c37f-27a2-376f-861d-998797fb62cf.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.5.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:6c:ba:c2:23:d8:13:7d:24:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=bf1fe126-74dc-4c9a-8498-0ed564f0af72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:3a:2e:ad:8a:2a:8a:4f:fb:85:c3:bb:a9: ba:61:c4:80:28:14:73:dc:83:0b:af:9a:dd:09:a2: d9:01:3f:1f:41:cf:f2:88:b6:b5:07:b5:d5:ab:18: a3:a5:ed:bc:38:a5:fb:9a:3e:d8:fd:13:91:48:72: 93:ef:4a:c9:51:5a:97:dc:29:6e:31:82:64:e4:82: 10:b3:2c:d6:96:67:66:d7:81:b3:de:39:1c:d1:a4: e7:48:4d:62:f7:55:97:9b:07:4f:56:3c:ac:54:b2: 60:66:48:80:23:6c:8f:4a:8d:54:7f:c1:e8:f9:1c: dd:f6:ac:c2:82:c0:ab:21:bb:16:6b:64:06:19:27: 6a:ed:3c:13:cd:b0:05:39:33:07:d1:39:ca:17:55: d9:d6:ad:00:ca:d3:87:82:d0:1c:f5:48:f7:ab:40: 18:bd:1c:cd:88:2e:0e:a8:27:1d:64:85:9c:a3:04: 32:f7:9a:90:5b:e9:fb:0c:a1:d1:47:11:7f:93:84: 5a:4a:d9:bb:2d:ba:4a:23:84:67:3a:af:9d:61:c4: 2b:bd:35:da:f7:3b:a8:51:24:0c:14:29:04:38:84: e3:fb:59:57:1a:b7:09:03:bf:23:83:d4:5f:95:99: bc:7e:6a:8e:39:9e:6d:ca:a3:ed:94:ea:30:ea:7f: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:37:7F:4D:0A:1B:74:82:B3:92:F1:A8:3E:A8:E9:76:48:B4:C2:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6a43c37f-27a2-376f-861d-998797fb62cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d8:bf:51:ca:a5:4b:9f:56:60:39:4d:ad:68:32:af:63:70: 3f:78:c4:c4:fd:2c:c7:96:65:6c:8c:9a:4a:65:8b:b0:f1:01: 31:89:c8:95:52:2d:37:77:ac:c6:bb:9d:6f:75:20:af:bc:50: a9:57:40:b9:85:9e:01:f9:df:3f:c9:59:78:76:7a:8f:da:17: 65:2b:94:6b:9e:ef:99:81:a0:12:4e:7c:4f:23:4f:5b:5e:83: 1d:f8:ac:40:9d:69:56:89:24:90:ee:94:63:af:f4:00:c7:b1: d9:f2:1d:a8:19:84:cb:1c:f3:91:c8:7c:43:66:91:6a:61:89: 59:8d:30:61:19:34:98:eb:f0:20:bb:ba:7a:b0:bc:16:f9:95: db:65:fe:6c:83:42:47:4b:47:07:c0:8a:d6:af:87:51:26:49: 9b:0e:ef:4d:d2:be:56:a6:26:f0:7c:dd:ab:4f:d7:a7:17:60: 12:c1:b2:fd:9e:97:63:e2:87:3b:a9:c0:9d:4b:7f:03:38:db: 52:5c:f4:63:02:b0:48:5c:0b:ca:a2:7e:a4:82:e9:52:b6:47: 78:01:32:2c:59:1f:55:c6:9f:43:a6:d4:1f:bc:7a:e7:02:d1: a3:94:42:a8:8a:f7:3a:22:1e:91:41:a5:5b:f3:37:4c:c9:fd: 94:36:9b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGy6wiPYE30ksoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YmYxZmUxMjYtNzRkYy00YzlhLTg0OTgtMGVkNTY0ZjBhZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxg6Lq2KKopP+4XDu6m6YcSAKBRz3IMLr5rd CaLZAT8fQc/yiLa1B7XVqxijpe28OKX7mj7Y/RORSHKT70rJUVqX3CluMYJk5IIQ syzWlmdm14Gz3jkc0aTnSE1i91WXmwdPVjysVLJgZkiAI2yPSo1Uf8Ho+Rzd9qzC gsCrIbsWa2QGGSdq7TwTzbAFOTMH0TnKF1XZ1q0AytOHgtAc9Uj3q0AYvRzNiC4O qCcdZIWcowQy95qQW+n7DKHRRxF/k4RaStm7LbpKI4RnOq+dYcQrvTXa9zuoUSQM FCkEOITj+1lXGrcJA78jg9RflZm8fmqOOZ5tyqPtlOow6n/g1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg3f00KG3SCs5LxqD6o6XZItMKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmE0M2MzN2YtMjdhMi0z NzZmLTg2MWQtOTk4Nzk3ZmI2MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnYv1HKpUufVmA5Ta1oMq9jcD94xMT9LMeWZWyMmkpli7DxATGJyJVS LTd3rMa7nW91IK+8UKlXQLmFngH53z/JWXh2eo/aF2UrlGue75mBoBJOfE8jT1te gx34rECdaVaJJJDulGOv9ADHsdnyHagZhMsc85HIfENmkWphiVmNMGEZNJjr8CC7 unqwvBb5ldtl/myDQkdLRwfAitavh1EmSZsO703SvlamJvB83atP16cXYBLBsv2e l2PihzupwJ1LfwM421Jc9GMCsEhcC8qifqSC6VK2R3gBMixZH1XGn0Om1B+8eucC 0aOUQqiK9zoiHpFBpVvzN0zJ/ZQ2m8s= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:37 2025 by rpki-client