$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa File: 93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa (raw, json) Hash identifier: mPcl7gt1ntyJSbgBZjUu2B3tWFiBG92V/xUaTL/yedU= Subject key identifier: 7F:EB:48:46:0F:20:37:C5:F8:8E:78:85:F3:FD:F6:40:FA:80:2C:F8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B540C8C418F2217E2463B2000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.5.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8c:41:8f:22:17:e2:46:3b:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=29e30e76-2bd9-4ec0-8a74-1b1257988f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:9f:bc:0e:30:84:62:4f:27:75:3b:ec:39: 7d:f6:42:20:a3:f5:53:0f:25:f0:fa:4f:e6:50:04: c1:9a:03:eb:52:92:82:f2:50:c0:06:46:dd:48:5d: cf:df:1f:18:96:45:1d:09:32:c2:60:f3:ba:19:2f: 19:5c:7b:e4:a2:6b:38:7d:52:28:f1:1e:b3:93:6f: 73:e1:7d:13:21:e0:ff:b6:fa:3e:c8:8d:14:d9:b2: e6:41:82:35:ca:10:ff:24:5c:78:84:32:34:d1:8d: 45:9a:70:37:ec:06:dc:0f:50:d2:fe:8a:a5:ea:a1: ca:5b:ab:13:90:c4:09:83:8c:94:57:5a:c7:1b:92: 40:dd:fa:1b:b0:11:fb:24:97:e3:be:d1:66:7e:d2: 9f:21:c1:8d:94:17:57:15:a7:1c:82:85:c0:ed:3d: 38:bc:d9:78:a3:a5:75:f4:f6:dc:89:3b:c1:31:1c: de:c6:0a:69:cb:18:1a:02:e4:db:f0:ce:5b:12:2e: 77:77:b7:06:cd:7b:75:7b:6d:4a:74:d9:3e:76:37: 79:5e:64:38:5c:34:a6:c4:64:e0:b0:48:5a:db:92: 05:3a:60:f8:70:d8:2c:0c:38:63:9e:e1:7f:26:82: f9:6d:c6:b1:59:20:dd:77:18:ef:b3:7d:10:ec:45: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EB:48:46:0F:20:37:C5:F8:8E:78:85:F3:FD:F6:40:FA:80:2C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/93c8ff0a-18cd-38c3-bafe-0e62655e1475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:62:23:22:64:fc:aa:c4:39:43:90:5e:a0:86:40:4e:81:a1: ed:c5:04:09:f6:03:cd:fc:c8:33:14:c8:e1:8b:70:49:27:01: ca:49:27:e8:ae:5f:8e:ce:ce:cf:c7:2c:87:9b:51:31:95:09: c7:1e:e6:19:55:45:1c:4d:87:41:d5:ed:b0:03:a7:a3:0a:de: 51:18:46:89:d4:8c:e8:4d:c7:0a:19:97:89:5c:bc:33:ed:69: 81:ce:45:94:fb:7d:f7:48:eb:a5:ad:20:aa:31:3e:b0:7c:b3: 58:0c:95:09:a7:46:02:a5:08:0c:6e:e3:6c:36:14:8f:43:22: 48:ad:64:e7:d7:8b:2e:17:54:50:f1:70:00:1d:62:c1:67:a8: 20:42:2a:5e:12:48:88:98:6c:80:70:68:86:99:09:7d:48:63: ee:96:d8:2e:0d:5a:5f:dd:38:cc:d5:0e:f7:7c:06:d4:5d:22: 14:2f:28:45:a2:88:2a:83:69:99:4d:97:31:16:63:d9:ba:cf: ba:b7:af:be:1e:96:74:51:f2:6f:68:1d:3f:b2:50:f4:8d:29: 68:69:2d:e9:50:20:0a:b1:6e:ec:a2:0b:36:ee:cf:6b:2a:05: a8:84:ee:77:5e:e4:8a:59:8d:81:40:83:4a:58:33:0c:92:a6: 57:5c:c8:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDIxBjyIX4kY7IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MjllMzBlNzYtMmJkOS00ZWMwLThhNzQtMWIxMjU3OTg4ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ufvA4whGJPJ3U77Dl99kIgo/VTDyXw+k/m UATBmgPrUpKC8lDABkbdSF3P3x8YlkUdCTLCYPO6GS8ZXHvkoms4fVIo8R6zk29z 4X0TIeD/tvo+yI0U2bLmQYI1yhD/JFx4hDI00Y1FmnA37AbcD1DS/oql6qHKW6sT kMQJg4yUV1rHG5JA3fobsBH7JJfjvtFmftKfIcGNlBdXFaccgoXA7T04vNl4o6V1 9PbciTvBMRzexgppyxgaAuTb8M5bEi53d7cGzXt1e21KdNk+djd5XmQ4XDSmxGTg sEha25IFOmD4cNgsDDhjnuF/JoL5bcaxWSDddxjvs30Q7EXJtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/rSEYPIDfF+I54hfP99kD6gCz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTNjOGZmMGEtMThjZC0z OGMzLWJhZmUtMGU2MjY1NWUxNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpiIyJk/KrEOUOQXqCGQE6Boe3FBAn2A838yDMUyOGLcEknAcpJJ+iu X47Ozs/HLIebUTGVCcce5hlVRRxNh0HV7bADp6MK3lEYRonUjOhNxwoZl4lcvDPt aYHORZT7ffdI66WtIKoxPrB8s1gMlQmnRgKlCAxu42w2FI9DIkitZOfXiy4XVFDx cAAdYsFnqCBCKl4SSIiYbIBwaIaZCX1IY+6W2C4NWl/dOMzVDvd8BtRdIhQvKEWi iCqDaZlNlzEWY9m6z7q3r74elnRR8m9oHT+yUPSNKWhpLelQIAqxbuyiCzbuz2sq BaiE7nde5IpZjYFAg0pYMwySpldcyGA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:13 2025 by rpki-client