$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6e9c651-5883-3d8c-a740-d6f478529c9a.roa File: b6e9c651-5883-3d8c-a740-d6f478529c9a.roa (raw, json) Hash identifier: sZ3jQ5CrGkObilrY3LOqvXp6rUVrqCP4gycDxkYN/jU= Subject key identifier: 68:20:52:99:3A:19:79:02:AB:E9:CA:9D:85:47:05:B0:13:C5:34:27 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D1F4A6E330A42D3EDF4DD8100 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6e9c651-5883-3d8c-a740-d6f478529c9a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 54113 IP address blocks: 157.5.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:6e:33:0a:42:d3:ed:f4:dd:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=2eb6240d-1f59-4eb8-b507-b52ea31ea3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:c1:e6:77:6f:5b:dd:22:7f:00:4b:39:08: 58:54:2f:fc:4a:0b:83:ad:3e:aa:35:f2:bd:c9:68: 65:3d:ac:5f:2a:6b:e1:fb:40:9c:2d:ac:79:4a:18: 36:3b:aa:10:98:33:55:d6:00:d1:46:f2:c9:55:f1: 71:48:88:73:d9:9b:52:25:ad:82:7b:65:66:ad:bb: 5f:c8:15:b7:ff:22:1f:74:87:6f:23:09:fe:07:cb: bb:c6:a1:d5:ea:a9:1d:f4:14:bb:25:06:36:ac:68: 8d:2e:d3:fb:8a:4a:8b:35:26:73:f4:e6:b3:59:5c: 49:3e:33:09:68:05:e5:1f:63:25:86:6c:48:09:78: 47:6d:34:ef:03:5c:15:12:9b:18:f6:37:d1:1f:46: 92:88:fc:8c:8d:a8:cf:22:eb:60:2a:05:1b:f8:8a: 60:06:e7:88:93:d2:9b:df:5d:68:49:3f:fc:3f:0b: 20:f8:92:f5:5a:08:89:f2:6e:ed:85:31:cc:26:16: ce:eb:57:10:01:67:55:ed:89:ac:6a:52:c0:ab:6e: 40:cf:96:3b:0f:24:4c:5a:d4:82:87:88:e8:94:b3: 95:e1:eb:a7:cf:fa:58:86:df:6c:92:44:70:ff:04: 06:97:89:c8:63:57:66:18:17:97:02:4d:bc:4d:79: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:20:52:99:3A:19:79:02:AB:E9:CA:9D:85:47:05:B0:13:C5:34:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6e9c651-5883-3d8c-a740-d6f478529c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ac:3d:12:ea:29:ac:ee:48:3d:ef:b6:ed:2e:ff:3f:92:1d: 4f:ee:b9:85:92:49:cf:3a:45:ba:97:23:5a:0c:84:0c:de:80: 7c:51:9f:9c:14:77:a5:f1:0e:52:47:6f:f3:89:1f:b1:f4:78: 7c:19:ff:da:f1:0e:2a:0c:d8:ef:3b:95:76:89:34:34:46:47: 9b:0a:26:18:bb:9c:d4:67:a2:45:11:e4:52:d5:af:ad:1d:7d: 5d:06:90:8c:e7:dc:b7:dc:76:ad:36:f7:d2:d8:e4:40:e0:b0: 0a:73:53:06:16:ce:a0:e4:38:73:1a:e4:d8:34:a0:e5:1d:3b: 9a:31:7f:db:b0:04:63:5e:82:a7:07:fa:ad:22:a8:8d:48:7a: df:a0:38:43:c6:be:e1:fe:bf:aa:23:a4:81:6f:4e:ba:cf:da: 62:1a:b3:ab:ee:7e:08:3d:04:59:74:a8:c3:7f:e7:7f:14:85: f5:83:50:47:1e:d2:be:a5:d9:26:1b:81:56:ec:ca:a0:db:d3: 17:6c:02:b9:3f:b2:cd:97:7e:d8:4f:64:ce:70:b7:cc:fc:a1: 7f:e6:ba:54:60:38:f2:29:ae:65:cb:66:4a:7d:02:f0:70:1d: 93:68:7d:48:f7:cd:17:6a:bc:a4:2c:59:6b:d5:5c:d8:e9:d7: 0f:9c:66:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSm4zCkLT7fTdgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MmViNjI0MGQtMWY1OS00ZWI4LWI1MDctYjUyZWEzMWVhM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYHB5ndvW90ifwBLOQhYVC/8SguDrT6qNfK9 yWhlPaxfKmvh+0CcLax5Shg2O6oQmDNV1gDRRvLJVfFxSIhz2ZtSJa2Ce2Vmrbtf yBW3/yIfdIdvIwn+B8u7xqHV6qkd9BS7JQY2rGiNLtP7ikqLNSZz9OazWVxJPjMJ aAXlH2MlhmxICXhHbTTvA1wVEpsY9jfRH0aSiPyMjajPIutgKgUb+IpgBueIk9Kb 311oST/8Pwsg+JL1WgiJ8m7thTHMJhbO61cQAWdV7YmsalLAq25Az5Y7DyRMWtSC h4jolLOV4eunz/pYht9skkRw/wQGl4nIY1dmGBeXAk28TXnbJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGggUpk6GXkCq+nKnYVHBbATxTQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjZlOWM2NTEtNTg4My0z ZDhjLWE3NDAtZDZmNDc4NTI5YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOsPRLqKazuSD3vtu0u/z+SHU/uuYWSSc86RbqXI1oMhAzegHxRn5wU d6XxDlJHb/OJH7H0eHwZ/9rxDioM2O87lXaJNDRGR5sKJhi7nNRnokUR5FLVr60d fV0GkIzn3Lfcdq0299LY5EDgsApzUwYWzqDkOHMa5Ng0oOUdO5oxf9uwBGNegqcH +q0iqI1Iet+gOEPGvuH+v6ojpIFvTrrP2mIas6vufgg9BFl0qMN/538UhfWDUEce 0r6l2SYbgVbsyqDb0xdsArk/ss2XfthPZM5wt8z8oX/mulRgOPIprmXLZkp9AvBw HZNofUj3zRdqvKQsWWvVXNjp1w+cZhE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:05 2026 by rpki-client