$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/868fcd45-a99d-383c-9433-6b5484312e7d.roa File: 868fcd45-a99d-383c-9433-6b5484312e7d.roa (raw, json) Hash identifier: ekQ8RWAniYJsBTJmwgwDheGx6ee3EfCdgZIp9KBkLlo= Subject key identifier: F2:30:A6:7E:EB:46:8C:12:F1:A0:0E:9C:33:91:03:6B:F9:11:E6:0F Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D83C370C533A6E358F000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/868fcd45-a99d-383c-9433-6b5484312e7d.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:83:c3:70:c5:33:a6:e3:58:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=679c5a8c-88c7-4a3d-9872-ab3c16d9f73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:15:78:8e:f9:9b:a1:a8:78:89:55:69:fa:37: 22:58:b1:c3:b1:ee:66:08:f1:75:28:8c:58:59:09: a0:f3:03:7c:4a:b6:0a:98:65:41:8d:0d:11:c2:6e: 1c:b5:95:17:a7:da:2d:45:37:b6:e9:44:3b:29:3d: e8:11:e9:54:7a:fa:57:a8:ae:b4:9d:8a:42:77:70: 4b:2f:5f:c9:e9:c7:89:14:6b:45:4a:6b:a5:97:16: 0a:9a:c6:52:6a:94:1e:9e:e8:6d:f3:75:1d:c6:f1: f4:05:36:86:38:a6:85:c6:cd:63:bd:6e:bb:ae:b2: 6f:cb:14:3a:84:8b:8a:22:55:b2:d3:60:78:2e:60: 1f:3f:d2:0d:b9:e1:f4:1a:d1:9a:86:22:95:44:31: e2:c5:97:a8:e5:ef:26:31:73:89:90:31:f1:c0:11: 1b:8f:20:e7:f0:0c:b6:7d:d0:37:43:f1:55:ae:43: 73:a7:98:68:03:4a:40:1f:93:c3:f7:8d:e2:06:42: 88:d5:a3:64:b2:91:5f:c8:1b:05:52:f0:9f:5c:51: a9:a1:7a:2e:d5:80:ca:90:da:60:dd:0f:c6:d5:dd: 8b:4f:c9:a0:02:62:68:00:06:38:d6:b1:d1:4a:6c: 9e:f5:91:43:a5:a3:6c:3e:70:43:08:a4:c6:1e:a1: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:30:A6:7E:EB:46:8C:12:F1:A0:0E:9C:33:91:03:6B:F9:11:E6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/868fcd45-a99d-383c-9433-6b5484312e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:2e:90:2e:c8:4e:35:1b:d7:0b:17:72:a2:0f:19:8b:32: d1:1a:d6:39:23:ab:72:5c:7c:61:f3:88:7a:77:f7:ff:7b:28: 61:27:8a:b4:bd:1a:71:53:b8:28:c6:41:dd:36:bf:28:61:9f: 6a:93:a9:d3:a1:fb:f3:8c:28:c3:37:c8:35:49:5c:59:e9:43: 98:aa:db:92:81:18:df:ed:03:5f:67:f5:38:8c:85:32:74:c5: a7:61:fe:df:7b:c4:45:ca:38:31:0e:2c:80:93:e3:b7:10:bd: cb:fb:99:54:87:58:64:ac:23:2d:3f:77:d8:a5:57:7d:de:79: ef:a2:71:77:4d:91:2b:64:b0:fb:00:95:b1:da:a2:84:ac:3e: da:a3:6a:45:7b:40:52:92:11:9b:9f:c2:ec:38:1e:08:4f:10: b9:d0:bc:f1:36:c9:87:03:57:a9:e8:80:b2:ed:27:4d:f2:b3: 47:c8:93:f1:3b:ef:a9:83:a4:d4:65:45:a4:dd:4a:67:ea:6f: 79:f4:48:cd:b9:5b:a2:a7:71:29:be:23:c9:07:13:ff:75:e8: 7e:e0:09:46:3f:39:cf:fd:f9:fc:27:1f:ea:8b:aa:cf:f8:3e: 48:1d:e1:88:34:22:02:67:11:ff:cd:a8:52:a6:48:eb:4b:62: 78:c9:89:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYPDcMUzpuNY8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Njc5YzVhOGMtODhjNy00YTNkLTk4NzItYWIzYzE2ZDlmNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hV4jvmboah4iVVp+jciWLHDse5mCPF1KIxY WQmg8wN8SrYKmGVBjQ0Rwm4ctZUXp9otRTe26UQ7KT3oEelUevpXqK60nYpCd3BL L1/J6ceJFGtFSmullxYKmsZSapQenuht83UdxvH0BTaGOKaFxs1jvW67rrJvyxQ6 hIuKIlWy02B4LmAfP9INueH0GtGahiKVRDHixZeo5e8mMXOJkDHxwBEbjyDn8Ay2 fdA3Q/FVrkNzp5hoA0pAH5PD943iBkKI1aNkspFfyBsFUvCfXFGpoXou1YDKkNpg 3Q/G1d2LT8mgAmJoAAY41rHRSmye9ZFDpaNsPnBDCKTGHqEJoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIwpn7rRowS8aAOnDORA2v5EeYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODY4ZmNkNDUtYTk5ZC0z ODNjLTk0MzMtNmI1NDg0MzEyZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdiLpAuyE41G9cLF3KiDxmLMtEa1jkjq3JcfGHziHp39/97KGEnirS9 GnFTuCjGQd02vyhhn2qTqdOh+/OMKMM3yDVJXFnpQ5iq25KBGN/tA19n9TiMhTJ0 xadh/t97xEXKODEOLICT47cQvcv7mVSHWGSsIy0/d9ilV33eee+icXdNkStksPsA lbHaooSsPtqjakV7QFKSEZufwuw4HghPELnQvPE2yYcDV6nogLLtJ03ys0fIk/E7 76mDpNRlRaTdSmfqb3n0SM25W6KncSm+I8kHE/916H7gCUY/Oc/9+fwnH+qLqs/4 Pkgd4Yg0IgJnEf/NqFKmSOtLYnjJiUQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:41:07 2026 by rpki-client