$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa File: 9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa (raw, json) Hash identifier: kJKYzuGlOIUBMJTuVeLdO9UHnnBbJc9y2wtbMeKQiTk= Subject key identifier: 89:D9:29:34:DB:2F:FA:3A:A4:58:F2:40:32:F7:BC:80:61:46:AD:28 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D1F4A6FA29185001E05CD6100 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 54113 IP address blocks: 157.5.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:6f:a2:91:85:00:1e:05:cd:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=b131ced4-5218-4257-ae62-d224a1fee0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:97:c1:2f:2a:9e:2b:a0:23:26:f1:9f:47: 96:20:ca:28:bc:77:de:2b:1d:1e:3f:15:4d:75:86: d2:62:32:60:e5:0d:d5:b9:21:0a:ac:b6:f2:d9:cc: ba:a1:ea:68:56:8d:cf:97:61:6e:9c:ef:ed:32:e2: 4a:5a:f4:31:26:75:1a:0d:59:1a:06:b5:a8:37:88: a2:d7:d5:ef:df:3b:1c:8d:63:3b:9b:0f:91:49:5b: fe:c3:fe:14:fa:69:aa:48:35:03:d5:f4:36:a3:01: de:cb:e9:59:ba:a7:25:5e:8d:c7:50:cc:0f:0f:d6: 44:fc:f4:2c:36:8a:bd:42:cb:15:f5:d8:36:b2:58: 47:dd:74:e7:4d:af:02:c6:00:a1:07:d2:07:c6:d2: 7d:86:9f:c1:f2:72:09:63:5f:a1:55:e2:dd:69:c8: d2:19:50:8f:c2:95:5b:7e:d4:c1:39:65:fb:a9:98: e5:ea:a7:c7:bb:c7:aa:28:c2:8f:d5:ea:58:f6:d8: 1f:c6:9f:b8:f2:de:4a:f4:a4:2f:04:37:be:8c:ea: 2f:a1:c4:b4:ed:61:31:0f:00:96:ef:10:fe:18:24: 3f:ec:7e:d1:f3:d6:87:c8:73:b6:4b:15:6d:c9:4c: ff:36:54:4d:51:90:ac:79:6b:12:c9:24:03:93:14: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D9:29:34:DB:2F:FA:3A:A4:58:F2:40:32:F7:BC:80:61:46:AD:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:76:b6:4a:15:c1:c0:e1:a9:77:6e:d8:cf:5e:5c:d9:8c:44: 9e:dc:14:15:18:dd:f6:42:ef:04:fb:72:f1:8b:30:c4:b9:74: c4:36:a1:fe:2f:b0:69:91:63:df:5b:f3:da:d7:be:67:86:52: dd:02:4a:04:36:3d:3e:0d:5e:ff:d9:16:72:f8:4b:ca:38:ce: b0:8f:b0:0e:04:d7:e5:49:68:33:0b:b1:a7:51:f4:c1:7c:0c: 05:9b:93:5c:96:eb:23:ac:60:e1:48:d9:af:26:28:36:a6:ba: 0c:7c:fc:b2:d3:67:3b:31:a5:53:b3:86:91:fb:9f:a6:32:7c: c7:71:4a:69:76:30:cd:89:44:59:95:f3:e9:7f:53:42:62:31: 84:52:2e:1f:09:55:1f:f4:45:78:7b:8a:37:9a:71:6d:a5:54: d9:e1:ea:a6:51:14:bc:1f:f4:f8:63:c7:c6:45:f7:99:01:38: 57:66:3e:b2:3c:da:43:74:4e:a3:05:64:72:c2:f4:7e:f6:59: 31:6f:47:74:1c:a1:74:87:9f:0d:e1:67:2b:2e:fd:8c:57:2a: cb:f1:06:a5:e7:74:a3:f9:88:d8:62:ac:e2:1d:36:7c:2c:10: b3:72:42:e2:d1:7e:72:76:a5:0f:f2:5a:1c:b1:90:d5:ed:a1: 06:ef:d4:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSm+ikYUAHgXNYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YjEzMWNlZDQtNTIxOC00MjU3LWFlNjItZDIyNGExZmVlMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+yXwS8qniugIybxn0eWIMoovHfeKx0ePxVN dYbSYjJg5Q3VuSEKrLby2cy6oepoVo3Pl2FunO/tMuJKWvQxJnUaDVkaBrWoN4ii 19Xv3zscjWM7mw+RSVv+w/4U+mmqSDUD1fQ2owHey+lZuqclXo3HUMwPD9ZE/PQs Noq9QssV9dg2slhH3XTnTa8CxgChB9IHxtJ9hp/B8nIJY1+hVeLdacjSGVCPwpVb ftTBOWX7qZjl6qfHu8eqKMKP1epY9tgfxp+48t5K9KQvBDe+jOovocS07WExDwCW 7xD+GCQ/7H7R89aHyHO2SxVtyUz/NlRNUZCseWsSySQDkxTyAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInZKTTbL/o6pFjyQDL3vIBhRq0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWVkNjY2ZDktZDZkNy0z MTAyLTgwZWEtYTRmNjQzYWQ4NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC12tkoVwcDhqXdu2M9eXNmMRJ7cFBUY3fZC7wT7cvGLMMS5dMQ2of4v sGmRY99b89rXvmeGUt0CSgQ2PT4NXv/ZFnL4S8o4zrCPsA4E1+VJaDMLsadR9MF8 DAWbk1yW6yOsYOFI2a8mKDamugx8/LLTZzsxpVOzhpH7n6YyfMdxSml2MM2JRFmV 8+l/U0JiMYRSLh8JVR/0RXh7ijeacW2lVNnh6qZRFLwf9Phjx8ZF95kBOFdmPrI8 2kN0TqMFZHLC9H72WTFvR3QcoXSHnw3hZysu/YxXKsvxBqXndKP5iNhirOIdNnws ELNyQuLRfnJ2pQ/yWhyxkNXtoQbv1HU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:31 2026 by rpki-client