$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa File: b4af9c38-642f-3034-a2cc-d6c945b1e743.roa (raw, json) Hash identifier: K3UiqQzN+/biypEpPx3cux17XAn9anCI9+R6lcrfykE= Subject key identifier: 49:B5:B4:4E:ED:83:A4:25:58:93:F0:DD:A5:28:96:71:C9:13:B5:D4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B540C6CE9591EC252CA6D3BA0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.5.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:6c:e9:59:1e:c2:52:ca:6d:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=1b77427f-f8e8-4b3a-9668-f5435f30a5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:b2:e1:6e:27:9d:f5:6e:e3:06:62:fd:74: 3e:18:d8:ef:b5:11:f9:84:e7:81:dc:dc:60:ec:b3: e3:b7:ee:96:ee:54:20:cc:0e:9d:4e:2b:f8:52:fa: 1a:32:7e:14:d5:91:00:0c:a7:e8:59:ee:7d:5c:b4: 6b:fa:2b:58:66:44:75:2d:8d:98:bb:04:e3:e4:6a: 60:cc:3b:16:b6:42:d0:e3:5f:90:70:2c:2f:46:df: 38:24:22:d8:71:bd:45:16:ab:fe:8b:45:4b:49:f7: d3:17:e7:dc:c8:30:05:72:6b:35:82:00:dd:81:10: ae:6f:19:f5:cc:93:f3:24:74:18:b5:88:5f:a2:6c: f5:0f:d8:44:0a:16:56:ae:a8:94:0c:e6:41:21:59: 56:7e:08:75:ec:53:f7:06:f1:e0:b4:03:56:11:9d: 43:90:8b:1a:bd:30:12:e9:2c:cd:ff:4a:62:5b:b5: 91:9a:30:f0:43:2e:13:db:e9:1c:dc:0f:8f:d6:77: 11:de:f2:bb:e9:d5:70:8e:90:5e:55:ab:f8:a0:b9: 04:2f:c7:06:44:58:9a:9f:46:a5:3a:1a:62:66:59: 6a:95:6e:22:e8:ea:90:17:1c:19:97:8d:45:c9:89: 81:d1:c0:e3:56:1d:ad:1a:b7:47:77:dd:8f:a9:65: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B5:B4:4E:ED:83:A4:25:58:93:F0:DD:A5:28:96:71:C9:13:B5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0c:0e:1f:21:6f:3b:75:7d:ff:be:ac:b2:09:05:7f:95:9d: c5:76:ea:de:fe:1a:b5:a7:31:a8:d5:c7:5a:e7:79:dd:0a:ff: f0:4d:e8:6d:31:51:c3:68:2a:27:d0:e4:5b:49:cf:47:50:74: a8:c7:71:19:c1:a1:1d:08:8f:69:4d:cd:94:72:56:2f:d9:aa: 86:82:c5:09:b2:8e:1d:0c:3a:44:c1:10:ca:01:0b:12:b5:87: 09:a6:e0:c9:b6:9c:80:c9:32:ac:77:31:29:44:77:d4:b7:f0: 39:9c:1b:37:ed:d7:37:32:cb:8a:2a:c8:35:bb:f0:95:30:f6: 22:62:d0:0a:39:47:7a:54:8a:23:a5:2a:4c:99:1e:56:28:80: 63:bb:a8:23:81:70:e2:b6:d9:b4:7e:9a:ee:68:86:8e:40:fe: 5b:38:c2:8b:61:c8:5d:bc:8e:49:0c:74:d8:e8:b2:9b:a7:7c: 88:16:bf:ab:e4:6e:54:97:16:52:9d:8f:03:c8:c8:81:0e:34: 02:4e:30:27:92:89:65:81:b0:58:1b:c5:e6:20:5b:bb:d0:e1: 01:e6:d0:76:de:95:12:90:8b:ba:a5:a3:03:54:40:97:c6:74: 38:62:37:aa:35:75:7e:ac:0f:4e:f6:56:75:2a:42:29:a9:b6: 99:f4:24:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGzpWR7CUsptO6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MWI3NzQyN2YtZjhlOC00YjNhLTk2NjgtZjU0MzVmMzBhNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuay4W4nnfVu4wZi/XQ+GNjvtRH5hOeB3Nxg 7LPjt+6W7lQgzA6dTiv4UvoaMn4U1ZEADKfoWe59XLRr+itYZkR1LY2YuwTj5Gpg zDsWtkLQ41+QcCwvRt84JCLYcb1FFqv+i0VLSffTF+fcyDAFcms1ggDdgRCubxn1 zJPzJHQYtYhfomz1D9hEChZWrqiUDOZBIVlWfgh17FP3BvHgtANWEZ1DkIsavTAS 6SzN/0piW7WRmjDwQy4T2+kc3A+P1ncR3vK76dVwjpBeVav4oLkEL8cGRFian0al OhpiZllqlW4i6OqQFxwZl41FyYmB0cDjVh2tGrdHd92PqWWpuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm1tE7tg6QlWJPw3aUolnHJE7XUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjRhZjljMzgtNjQyZi0z MDM0LWEyY2MtZDZjOTQ1YjFlNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkMDh8hbzt1ff++rLIJBX+VncV26t7+GrWnMajVx1rned0K//BN6G0x UcNoKifQ5FtJz0dQdKjHcRnBoR0Ij2lNzZRyVi/ZqoaCxQmyjh0MOkTBEMoBCxK1 hwmm4Mm2nIDJMqx3MSlEd9S38DmcGzft1zcyy4oqyDW78JUw9iJi0Ao5R3pUiiOl KkyZHlYogGO7qCOBcOK22bR+mu5oho5A/ls4wothyF28jkkMdNjospunfIgWv6vk blSXFlKdjwPIyIEONAJOMCeSiWWBsFgbxeYgW7vQ4QHm0HbelRKQi7qlowNUQJfG dDhiN6o1dX6sD072VnUqQimptpn0JJU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:37 2025 by rpki-client