$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b274acdf-be48-364a-946d-e96a37ff0e75.roa File: b274acdf-be48-364a-946d-e96a37ff0e75.roa (raw, json) Hash identifier: 20RH3jgsDJ8n/xwIG6Uzn+u/x5nTvNR3BUT61W78na0= Subject key identifier: 64:C3:82:89:6C:6F:64:BA:A1:1C:EB:F3:40:33:16:EB:BC:34:39:F5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D9C241B969AAE69A2C0C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b274acdf-be48-364a-946d-e96a37ff0e75.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9c:24:1b:96:9a:ae:69:a2:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a2423a2e-bc72-4a7a-aa31-68004ac7adc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:bc:cf:09:bb:26:7c:c6:b6:74:67:01:bd: 17:a4:ac:01:ff:fe:1d:03:af:2d:82:d6:eb:48:18: f5:f3:8f:71:2c:e9:02:2d:ff:cf:8d:8e:45:4c:8a: 34:54:a1:c9:56:9f:0a:a6:88:de:f2:a7:57:ae:43: 2e:98:2c:fb:f4:87:d2:a2:65:06:07:de:d0:e0:6b: d8:cf:0d:37:1f:27:76:14:b3:fc:21:91:78:e3:15: 1e:7a:a4:13:8e:9f:06:3e:d7:0a:90:a7:eb:83:06: 2a:45:c1:8b:52:36:aa:0f:ec:97:09:72:32:a3:a1: fd:fc:e0:6e:17:cd:67:d8:90:bc:88:2b:8b:53:5e: 2c:ce:16:a2:e9:99:8b:f9:da:b4:b3:bc:44:2d:47: 09:46:a4:b9:6a:a6:76:91:d5:e8:e8:19:2c:5a:bb: d5:33:05:74:6e:0c:d9:64:29:fa:b4:af:27:ca:4f: 7d:27:9f:30:e7:9a:1e:57:3e:fc:f9:13:db:00:47: 27:f6:65:2f:de:b0:15:90:bb:73:60:18:66:b2:2b: 39:cc:8b:3d:2a:8d:ce:71:05:ec:f1:a9:1a:68:f3: d9:15:b3:d4:dc:14:ea:7b:6f:2a:87:71:55:1a:f3: 5a:af:e9:df:87:fa:69:3b:ae:21:13:df:7b:ae:17: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:82:89:6C:6F:64:BA:A1:1C:EB:F3:40:33:16:EB:BC:34:39:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b274acdf-be48-364a-946d-e96a37ff0e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:63:e1:c9:73:25:a2:f2:0d:c4:6f:51:94:1d:2f:d8:fa:2e: 6d:5f:bc:3c:91:f2:0b:d4:26:81:eb:3e:bb:f3:f6:0b:cc:5c: f5:22:55:b9:33:e8:51:72:61:5c:cc:8b:fe:94:3c:ae:cc:08: de:10:e8:6a:7f:f8:00:15:29:05:ac:28:1c:8b:42:52:74:6d: db:6c:ad:0e:30:89:48:46:8f:5f:5a:44:71:b6:ec:98:08:b1: 0c:a5:71:96:d9:5b:b5:50:2c:5d:09:78:f5:21:3f:1c:bf:ee: 67:01:a9:65:ca:7f:85:fa:9e:df:52:7a:e4:db:38:ce:05:6f: 7b:49:11:93:2b:f6:9d:6f:f3:ac:36:f8:84:d9:1d:cf:0e:d5: 54:f3:df:9e:78:35:64:9d:28:19:07:1c:92:8a:9c:04:bd:d0: 89:08:e9:bc:5b:e0:03:58:3e:bb:88:93:cc:c0:fe:26:2b:25: c5:77:76:81:b5:b7:d7:e9:40:c9:63:08:af:6a:16:c3:87:41: 93:1d:56:7b:b6:bd:26:88:db:97:96:62:aa:32:7b:dd:8f:b2: 63:f7:d6:a3:8e:3d:98:45:3a:d9:b6:d9:ad:a2:1b:09:f6:c8: d5:3f:24:2d:88:f9:68:87:f6:77:eb:16:c9:a7:0c:4e:18:4c: e9:ed:7b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZwkG5aarmmiwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTI0MjNhMmUtYmM3Mi00YTdhLWFhMzEtNjgwMDRhYzdhZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSm8zwm7JnzGtnRnAb0XpKwB//4dA68tgtbr SBj1849xLOkCLf/PjY5FTIo0VKHJVp8Kpoje8qdXrkMumCz79IfSomUGB97Q4GvY zw03Hyd2FLP8IZF44xUeeqQTjp8GPtcKkKfrgwYqRcGLUjaqD+yXCXIyo6H9/OBu F81n2JC8iCuLU14szhai6ZmL+dq0s7xELUcJRqS5aqZ2kdXo6BksWrvVMwV0bgzZ ZCn6tK8nyk99J58w55oeVz78+RPbAEcn9mUv3rAVkLtzYBhmsis5zIs9Ko3OcQXs 8akaaPPZFbPU3BTqe28qh3FVGvNar+nfh/ppO64hE997rhf9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTDgolsb2S6oRzr80AzFuu8NDn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjI3NGFjZGYtYmU0OC0z NjRhLTk0NmQtZTk2YTM3ZmYwZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhj4clzJaLyDcRvUZQdL9j6Lm1fvDyR8gvUJoHrPrvz9gvMXPUiVbkz 6FFyYVzMi/6UPK7MCN4Q6Gp/+AAVKQWsKByLQlJ0bdtsrQ4wiUhGj19aRHG27JgI sQylcZbZW7VQLF0JePUhPxy/7mcBqWXKf4X6nt9SeuTbOM4Fb3tJEZMr9p1v86w2 +ITZHc8O1VTz3554NWSdKBkHHJKKnAS90IkI6bxb4ANYPruIk8zA/iYrJcV3doG1 t9fpQMljCK9qFsOHQZMdVnu2vSaI25eWYqoye92PsmP31qOOPZhFOtm22a2iGwn2 yNU/JC2I+WiH9nfrFsmnDE4YTOnte/s= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:32 2026 by rpki-client