$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa File: 9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa (raw, json) Hash identifier: fgAVWrhF+QhAE5YLlMrf/pFpIRPjPMl/opQxZy0r6AA= Subject key identifier: EF:C7:3A:62:A0:0B:C4:08:13:28:38:C3:DE:8B:45:73:B2:66:39:6A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B5F375AF249105EE17822B680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 54113 IP address blocks: 157.5.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:5a:f2:49:10:5e:e1:78:22:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=aae2b22b-e34f-410f-8ca9-77b6cdd2d984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:79:93:d4:be:38:c2:17:1b:c3:86:ab:8a: 21:c7:5b:dd:02:73:a3:dc:6e:5a:ba:0f:c1:4d:6b: 9e:c7:cd:78:0c:87:38:86:48:72:aa:c3:a2:17:f4: 9c:43:2f:e4:87:bf:45:71:31:0f:f3:df:80:7a:47: 3d:cc:1e:88:04:10:c8:6f:3f:83:f6:97:e6:61:80: 6e:73:bf:47:bd:ca:db:8e:e9:cc:39:26:80:93:99: ff:0b:ad:df:2d:5f:98:47:a4:60:9a:7c:08:3f:d0: 67:7c:3a:60:ad:e7:36:25:b6:55:a0:ea:4c:eb:c3: 67:a1:88:be:86:1e:c0:e7:cd:39:b8:74:91:02:a1: ad:50:b7:b8:3f:23:88:18:33:83:ad:da:ec:87:24: e0:b1:e1:34:91:0e:c3:b5:30:32:01:a2:71:33:17: 2d:58:4a:39:b8:90:6b:15:aa:43:17:ef:f6:a8:3c: 9a:15:4c:c1:21:dd:1e:4f:92:5b:fa:60:3d:df:f8: 32:d4:10:27:f7:00:48:43:9c:03:19:a6:01:ac:c0: 2c:43:e8:0b:ad:e3:30:e2:af:e3:d1:93:cf:20:0a: b3:4c:29:1b:87:eb:3a:14:47:e5:f9:56:ff:26:e9: c9:95:d4:ab:d9:a3:49:29:37:b7:85:d3:6d:0f:a9: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C7:3A:62:A0:0B:C4:08:13:28:38:C3:DE:8B:45:73:B2:66:39:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b1:a0:34:93:92:06:93:eb:ee:5a:9b:43:36:6d:9d:d7:df: a3:e7:0e:fc:dd:72:b9:fb:37:88:9e:72:85:2a:d4:c4:4a:c9: 73:fc:3b:3d:f7:b7:df:0a:11:e3:f7:92:6a:e4:28:9a:5e:f3: 99:62:82:51:2e:d5:ff:31:03:d4:93:e0:99:59:ba:fa:04:29: 48:bb:5e:b0:cc:fe:58:c6:de:2f:c5:b3:e1:82:4f:aa:94:e4: 60:3e:39:d4:0c:09:97:05:60:a2:5b:8c:5b:32:9f:cd:1e:87: 08:9b:2d:68:ff:cc:c4:6e:a9:77:47:a1:fc:78:33:9f:02:98: b6:fd:d1:33:a3:44:21:dd:45:b8:cb:98:0d:1f:5d:12:c2:02: 59:d9:f5:3c:ec:9b:1e:96:86:04:59:93:6f:ca:d3:28:49:cc: f2:fa:2c:ff:df:9e:1a:a2:ce:14:10:fc:17:c6:6f:20:51:cc: 7f:90:3b:41:f6:5a:bb:36:67:b0:e0:3d:af:03:83:64:a0:2b: 0c:37:df:b7:af:6e:30:1b:e1:4f:31:97:37:9c:27:0d:c9:46: ae:1b:24:a9:f0:48:91:f6:bf:9b:1d:d4:d2:44:ef:53:eb:7f: 40:63:99:1b:0c:0c:bb:3c:94:72:f1:7e:3d:ef:7e:76:7e:d9: 71:8e:97:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN1rySRBe4XgitoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YWFlMmIyMmItZTM0Zi00MTBmLThjYTktNzdiNmNkZDJkOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja95k9S+OMIXG8OGq4ohx1vdAnOj3G5aug/B TWuex814DIc4hkhyqsOiF/ScQy/kh79FcTEP89+Aekc9zB6IBBDIbz+D9pfmYYBu c79HvcrbjunMOSaAk5n/C63fLV+YR6RgmnwIP9BnfDpgrec2JbZVoOpM68NnoYi+ hh7A5805uHSRAqGtULe4PyOIGDODrdrshyTgseE0kQ7DtTAyAaJxMxctWEo5uJBr FapDF+/2qDyaFUzBId0eT5Jb+mA93/gy1BAn9wBIQ5wDGaYBrMAsQ+gLreMw4q/j 0ZPPIAqzTCkbh+s6FEfl+Vb/JunJldSr2aNJKTe3hdNtD6lYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/HOmKgC8QIEyg4w96LRXOyZjlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWVkNjY2ZDktZDZkNy0z MTAyLTgwZWEtYTRmNjQzYWQ4NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqxoDSTkgaT6+5am0M2bZ3X36PnDvzdcrn7N4iecoUq1MRKyXP8Oz33 t98KEeP3kmrkKJpe85liglEu1f8xA9ST4JlZuvoEKUi7XrDM/ljG3i/Fs+GCT6qU 5GA+OdQMCZcFYKJbjFsyn80ehwibLWj/zMRuqXdHofx4M58CmLb90TOjRCHdRbjL mA0fXRLCAlnZ9Tzsmx6WhgRZk2/K0yhJzPL6LP/fnhqizhQQ/BfGbyBRzH+QO0H2 Wrs2Z7DgPa8Dg2SgKww337evbjAb4U8xlzecJw3JRq4bJKnwSJH2v5sd1NJE71Pr f0BjmRsMDLs8lHLxfj3vfnZ+2XGOl0o= -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:32 2025 by rpki-client