$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b4994ea-a528-3061-bca7-5c93955b0376.roa File: 7b4994ea-a528-3061-bca7-5c93955b0376.roa (raw, json) Hash identifier: xc4c+j6pb49/PRPTFOwXRsgc66p0tk2BHUaMXop9p54= Subject key identifier: F9:30:3D:D7:4F:16:7D:A8:CA:E8:2D:08:7D:3C:6B:32:88:60:93:F6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B5F37592AE387F9C7B2DED530 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b4994ea-a528-3061-bca7-5c93955b0376.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 54113 IP address blocks: 157.5.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:59:2a:e3:87:f9:c7:b2:de:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=5f601800-9d8d-4d31-9bfe-3a057453f922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:c0:b2:a2:dc:a6:cd:da:bf:a3:6e:02:2c: bc:e3:36:3b:96:7d:26:7c:ce:f0:21:7d:30:29:81: f6:fa:61:39:59:05:4d:b7:4d:b2:9d:7c:cd:3a:bd: e6:a1:c4:bb:8c:ed:bc:2c:43:22:43:d4:71:fc:ba: 57:b4:e3:d6:c7:32:c4:14:ab:c5:d9:87:4d:ab:40: 96:bc:7d:0d:eb:8b:47:ba:ee:6d:dc:90:d4:f8:47: 60:98:f4:ae:dd:c8:06:94:bf:24:2b:85:b5:2a:6d: 6f:69:60:5f:3b:d9:c6:c7:d9:9e:eb:a7:ba:5b:2b: c6:c4:a1:d2:5b:d8:85:91:c5:85:54:60:5e:01:6f: 5d:f9:26:5b:8a:67:27:c1:ab:49:95:7f:da:6b:73: 4c:d9:15:3d:bb:f9:17:dc:31:94:86:9e:66:a0:d9: 46:c6:8e:b2:1e:56:8a:57:34:6f:97:09:56:53:6c: af:87:3a:96:9e:27:e3:10:92:0e:c3:ec:4d:0e:4d: ff:48:03:c5:7e:b8:c7:fa:49:82:21:5e:2c:9c:a7: 0f:37:27:17:80:f8:62:32:b9:d6:91:72:38:61:5d: a6:51:4e:c1:9f:d9:72:1b:dc:9b:e0:39:c9:3a:6e: e8:3c:7c:6b:2b:eb:04:cf:66:6a:1f:57:a3:b3:9b: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:30:3D:D7:4F:16:7D:A8:CA:E8:2D:08:7D:3C:6B:32:88:60:93:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b4994ea-a528-3061-bca7-5c93955b0376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4b:d6:da:94:a7:7c:d7:96:11:11:c1:20:c5:0b:5e:c5:fa: 20:2b:3e:d0:24:b0:5c:98:4f:ca:fa:7b:a6:e4:c1:c4:64:9f: 4e:66:d4:59:a6:24:6d:b1:02:31:77:fe:80:f3:f9:6c:19:1e: 86:55:26:2c:22:54:8d:cc:10:a3:a2:78:ba:5d:c7:d7:c4:64: 48:f9:3a:1e:5e:54:96:8a:b6:7c:b7:31:48:7b:76:1b:6a:a7: 9f:d6:a8:de:f6:82:14:53:35:9b:de:27:3c:6b:0d:44:6e:46: 2a:70:e6:36:de:b0:d0:fe:6b:04:e6:f1:6e:9a:67:d2:64:9f: aa:fe:7e:eb:84:cc:b7:05:1f:79:fc:ea:4f:02:25:76:99:f1: fe:3b:3e:aa:e6:67:f6:54:d3:97:c6:ed:b0:bc:9f:91:be:10: d9:da:4a:cd:64:95:08:ab:df:ea:56:45:c7:95:3e:a8:e1:76: cd:3b:13:c1:65:bd:db:6b:8d:3e:40:08:18:b7:21:0e:0d:d9: b8:a3:22:31:b0:64:ca:f3:1f:a5:5e:64:84:3a:b8:39:57:2f: 7f:a0:bd:a2:71:8a:0f:f5:6b:fc:10:c5:c5:69:a5:6f:d2:c5: b5:da:82:fb:6a:8f:73:bd:12:be:88:71:fc:4a:06:cc:47:3d: c1:9a:62:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN1kq44f5x7Le1TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NWY2MDE4MDAtOWQ4ZC00ZDMxLTliZmUtM2EwNTc0NTNmOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZzAsqLcps3av6NuAiy84zY7ln0mfM7wIX0w KYH2+mE5WQVNt02ynXzNOr3mocS7jO28LEMiQ9Rx/LpXtOPWxzLEFKvF2YdNq0CW vH0N64tHuu5t3JDU+EdgmPSu3cgGlL8kK4W1Km1vaWBfO9nGx9me66e6WyvGxKHS W9iFkcWFVGBeAW9d+SZbimcnwatJlX/aa3NM2RU9u/kX3DGUhp5moNlGxo6yHlaK VzRvlwlWU2yvhzqWnifjEJIOw+xNDk3/SAPFfrjH+kmCIV4snKcPNycXgPhiMrnW kXI4YV2mUU7Bn9lyG9yb4DnJOm7oPHxrK+sEz2ZqH1ejs5slgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkwPddPFn2oyugtCH08azKIYJP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2I0OTk0ZWEtYTUyOC0z MDYxLWJjYTctNWM5Mzk1NWIwMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxL1tqUp3zXlhERwSDFC17F+iArPtAksFyYT8r6e6bkwcRkn05m1Fmm JG2xAjF3/oDz+WwZHoZVJiwiVI3MEKOieLpdx9fEZEj5Oh5eVJaKtny3MUh7dhtq p5/WqN72ghRTNZveJzxrDURuRipw5jbesND+awTm8W6aZ9Jkn6r+fuuEzLcFH3n8 6k8CJXaZ8f47PqrmZ/ZU05fG7bC8n5G+ENnaSs1klQir3+pWRceVPqjhds07E8Fl vdtrjT5ACBi3IQ4N2bijIjGwZMrzH6VeZIQ6uDlXL3+gvaJxig/1a/wQxcVppW/S xbXagvtqj3O9Er6IcfxKBsxHPcGaYhQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:47 2025 by rpki-client