$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/82b442c4-a0b6-3b4e-a016-71d4e2227096.roa File: 82b442c4-a0b6-3b4e-a016-71d4e2227096.roa (raw, json) Hash identifier: 8B0HRfWWDz2ABJeBzDQ68SQG2YcnBzC23KC62aEx/bY= Subject key identifier: B3:8D:EA:AE:3F:6C:75:AA:23:7E:6B:7D:25:62:CC:FB:18:7E:DE:C9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D823C0A38162E72083A00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/82b442c4-a0b6-3b4e-a016-71d4e2227096.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:82:3c:0a:38:16:2e:72:08:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=307af1ab-462a-4749-aee2-f28c40e8476c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:19:57:40:6d:fa:b0:70:c5:51:06:67:20: 2b:d5:e9:b5:47:ef:df:5e:57:c1:cd:08:fc:75:bb: 28:b5:54:2e:b2:d9:84:ac:0f:1b:f3:92:28:0d:80: 54:96:29:23:ed:1a:fe:0b:3b:9c:ba:33:98:55:d8: a7:ee:4c:ba:92:c1:7d:e0:da:0f:5d:84:85:65:c2: 01:1f:92:b0:db:7a:04:7f:ad:c0:14:ad:d4:a7:39: 75:de:9b:17:b5:03:1c:85:20:25:d8:b1:18:df:3b: 82:20:9c:5b:78:27:5e:81:33:fc:a5:8f:fa:83:ce: 90:d5:32:40:ce:6f:a8:43:58:24:12:3f:d6:72:3a: 2f:e3:1d:63:18:f2:89:57:55:b8:a5:b6:da:69:b3: f3:79:38:30:11:b9:ef:7f:9b:a4:4a:2e:83:20:01: e2:12:68:1c:40:e9:9d:e0:a6:95:11:6b:5d:ba:4f: bb:0b:36:a8:e4:0d:41:56:2a:43:b0:04:dd:0a:e3: 8c:6b:2b:07:3d:da:08:aa:0a:04:8b:15:b5:81:ea: bf:8d:9c:16:7d:f2:98:21:5f:70:ae:6a:bc:2e:6b: 08:2d:e7:e1:cf:a8:31:ec:30:85:88:ed:5c:66:e8: db:1a:c0:ee:b0:d5:50:c9:a3:92:df:64:50:3a:cf: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8D:EA:AE:3F:6C:75:AA:23:7E:6B:7D:25:62:CC:FB:18:7E:DE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/82b442c4-a0b6-3b4e-a016-71d4e2227096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e4:e3:eb:c3:5e:9f:55:db:6d:3e:b4:d1:76:6f:22:91:72: db:4f:e2:aa:a7:19:40:2d:49:75:34:62:c0:e8:85:1a:4d:ca: 5b:2b:b0:04:ff:9b:db:55:08:06:6c:9b:56:67:72:f2:ed:c6: 7a:cb:7c:71:7d:46:d2:b5:c6:05:a0:9d:74:51:78:86:b6:4a: 55:19:70:8c:93:03:fb:90:85:93:55:53:fb:46:5c:c5:62:15: ff:7e:5d:40:59:eb:ae:47:50:33:73:f9:57:e4:88:25:46:9d: dd:4a:ab:9f:02:29:71:29:18:d4:d0:e0:ed:f2:d9:78:cb:54: 7f:8a:08:18:e0:f2:01:46:15:66:c5:84:60:c6:74:37:54:0f: 3a:2f:56:c1:5b:ed:57:97:5e:59:b7:74:3e:ee:e3:e2:21:9a: eb:0d:9f:55:0f:b0:b0:41:bb:1e:1e:50:ed:93:92:c6:30:c9: 86:57:2a:e8:9a:7f:3b:5e:50:06:7b:e5:c8:54:5d:e7:51:87: da:f5:9f:6e:88:d9:87:dd:b3:ed:1e:4a:16:15:7a:bd:84:49: 00:a1:29:00:c5:1c:55:d7:0d:66:e9:3b:b0:c4:66:22:a5:5d: c3:ea:5a:8d:60:88:c0:38:e9:e8:a4:d4:33:ec:93:6a:a9:b6: 4a:e9:2a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYI8CjgWLnIIOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MzA3YWYxYWItNDYyYS00NzQ5LWFlZTItZjI4YzQwZTg0NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/8ZV0Bt+rBwxVEGZyAr1em1R+/fXlfBzQj8 dbsotVQustmErA8b85IoDYBUlikj7Rr+CzucujOYVdin7ky6ksF94NoPXYSFZcIB H5Kw23oEf63AFK3Upzl13psXtQMchSAl2LEY3zuCIJxbeCdegTP8pY/6g86Q1TJA zm+oQ1gkEj/Wcjov4x1jGPKJV1W4pbbaabPzeTgwEbnvf5ukSi6DIAHiEmgcQOmd 4KaVEWtduk+7Czao5A1BVipDsATdCuOMaysHPdoIqgoEixW1geq/jZwWffKYIV9w rmq8LmsILefhz6gx7DCFiO1cZujbGsDusNVQyaOS32RQOs+ATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLON6q4/bHWqI35rfSVizPsYft7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODJiNDQyYzQtYTBiNi0z YjRlLWEwMTYtNzFkNGUyMjI3MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7k4+vDXp9V220+tNF2byKRcttP4qqnGUAtSXU0YsDohRpNylsrsAT/ m9tVCAZsm1ZncvLtxnrLfHF9RtK1xgWgnXRReIa2SlUZcIyTA/uQhZNVU/tGXMVi Ff9+XUBZ665HUDNz+VfkiCVGnd1Kq58CKXEpGNTQ4O3y2XjLVH+KCBjg8gFGFWbF hGDGdDdUDzovVsFb7VeXXlm3dD7u4+IhmusNn1UPsLBBux4eUO2TksYwyYZXKuia fzteUAZ75chUXedRh9r1n26I2Yfds+0eShYVer2ESQChKQDFHFXXDWbpO7DEZiKl XcPqWo1giMA46eik1DPsk2qptkrpKgs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:36 2026 by rpki-client