$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa File: bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa (raw, json) Hash identifier: 3x0lTGjskAiQBPX7btwRZahni0Jl3mL4qVc/5OM//9g= Subject key identifier: A6:E5:2A:83:E1:44:21:9E:59:5D:DF:83:D9:FE:DC:56:9A:04:66:21 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B540C6E2087C379656DB0E940 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.5.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:6e:20:87:c3:79:65:6d:b0:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=77913ab9-3386-4c29-85c5-677fb441fd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:70:5a:bc:41:e2:d4:de:3d:cb:91:7a:45: 69:1f:2d:59:f5:6c:b7:16:97:00:9a:92:86:c3:e7: 62:eb:63:07:c3:98:5b:95:1a:cb:9e:5f:69:db:6a: 09:25:28:63:29:19:dc:9e:00:0f:8f:37:82:e8:f7: 99:aa:a9:17:ad:10:68:6d:b0:60:08:25:c5:74:0c: ff:1d:75:db:cc:a2:cc:e2:9e:65:7d:18:94:7d:09: 47:e7:f2:88:7e:8d:41:a1:8a:17:04:c9:90:b8:13: 70:e5:10:e5:e8:bf:db:da:46:b4:f5:d0:77:41:e7: 88:69:c2:24:aa:85:28:07:18:22:85:a0:39:85:0b: 49:9b:46:f1:7e:61:5a:11:88:80:f9:0d:6e:13:8a: 20:3b:b7:86:55:f9:12:92:94:a8:39:48:25:07:e1: da:a7:4c:8c:bc:1b:ab:b3:5c:1b:d7:10:6b:8a:a0: 4d:07:45:18:e4:a4:07:b1:dc:cf:94:e5:b9:c9:e5: f2:f8:18:5e:10:7f:87:35:8f:8c:c7:4e:cd:6a:76: 58:ac:3d:e6:19:c6:ea:80:0b:67:0e:29:6b:32:6b: 72:44:19:c0:9f:6d:96:12:78:79:5d:e8:91:2a:23: dc:de:5a:f6:fb:0b:54:af:0a:a4:b8:46:11:aa:dd: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E5:2A:83:E1:44:21:9E:59:5D:DF:83:D9:FE:DC:56:9A:04:66:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a1:b5:9d:b5:38:4c:1c:da:4c:cd:12:e3:41:13:bc:dc:a9: 43:08:4b:ba:68:36:84:f9:6f:18:c5:70:45:fe:c4:39:05:f5: 33:87:33:ee:87:e7:f1:40:9f:c2:fc:bc:aa:43:6a:d4:de:ff: 18:54:f5:9f:28:80:27:63:dd:75:32:89:fb:eb:6a:64:5d:9e: 2e:ed:64:86:71:fb:c2:5b:c2:31:c1:02:65:44:e0:58:6d:77: ca:3f:7c:83:94:db:44:a9:ee:78:1d:ae:97:8e:ba:58:e3:07: bd:6f:6e:22:fe:0f:af:e4:9d:7d:cf:dd:6e:0d:09:75:d6:2e: cd:de:52:5b:b5:c5:31:93:dd:5d:8f:57:14:cf:8e:e8:9c:16: 1a:e8:cf:b4:ee:03:c7:b3:63:e0:c3:76:38:8c:0f:a7:e2:20: d5:18:19:8e:58:b8:0d:5a:fd:04:75:d7:bc:f3:93:93:de:29: 28:e1:c3:73:82:71:19:46:0f:c9:3a:83:9c:76:8b:5e:3f:e4: b1:7a:e3:b3:d2:b6:0e:b9:db:a1:62:93:0e:61:4a:a3:be:e4: 84:ab:8a:23:d7:fb:60:1f:d3:2a:8a:8c:d5:9e:37:7f:10:d5: f4:65:96:4c:84:64:57:34:bb:c7:f1:02:fa:dc:2b:5b:54:82: 69:c9:f1:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDG4gh8N5ZW2w6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk Nzc5MTNhYjktMzM4Ni00YzI5LTg1YzUtNjc3ZmI0NDFmZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS5wWrxB4tTePcuRekVpHy1Z9Wy3FpcAmpKG w+di62MHw5hblRrLnl9p22oJJShjKRncngAPjzeC6PeZqqkXrRBobbBgCCXFdAz/ HXXbzKLM4p5lfRiUfQlH5/KIfo1BoYoXBMmQuBNw5RDl6L/b2ka09dB3QeeIacIk qoUoBxgihaA5hQtJm0bxfmFaEYiA+Q1uE4ogO7eGVfkSkpSoOUglB+Hap0yMvBur s1wb1xBriqBNB0UY5KQHsdzPlOW5yeXy+BheEH+HNY+Mx07NanZYrD3mGcbqgAtn DilrMmtyRBnAn22WEnh5XeiRKiPc3lr2+wtUrwqkuEYRqt1+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKblKoPhRCGeWV3fg9n+3FaaBGYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmJmNWY5ZDktNDgyMS0z NmQ0LTlkMzktYjU2MDA4MzZmNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADShtZ21OEwc2kzNEuNBE7zcqUMIS7poNoT5bxjFcEX+xDkF9TOHM+6H 5/FAn8L8vKpDatTe/xhU9Z8ogCdj3XUyifvramRdni7tZIZx+8JbwjHBAmVE4Fht d8o/fIOU20Sp7ngdrpeOuljjB71vbiL+D6/knX3P3W4NCXXWLs3eUlu1xTGT3V2P VxTPjuicFhroz7TuA8ezY+DDdjiMD6fiINUYGY5YuA1a/QR117zzk5PeKSjhw3OC cRlGD8k6g5x2i14/5LF647PStg6526Fikw5hSqO+5ISriiPX+2Af0yqKjNWeN38Q 1fRllkyEZFc0u8fxAvrcK1tUgmnJ8eo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:46 2025 by rpki-client