$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c0d3fd22-a8f2-3544-b48f-5578441e6129.roa File: c0d3fd22-a8f2-3544-b48f-5578441e6129.roa (raw, json) Hash identifier: RW4k0NRQAV8ISRuGpu5ehHeLlyO4xuzUT7P6QfYLAcs= Subject key identifier: DB:AA:75:92:FB:93:D2:CD:EE:BE:A3:62:43:F4:62:2D:EA:ED:6C:2C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D815497CE1C1B31177500 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c0d3fd22-a8f2-3544-b48f-5578441e6129.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:81:54:97:ce:1c:1b:31:17:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=3899c79e-c94c-4689-8e78-37e8f8350dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:54:5d:15:70:7e:58:ca:f3:6f:47:c8:18: 42:e5:2f:09:82:48:b4:b4:18:5f:2d:91:f6:e5:84: 8e:dd:b0:cf:ee:d1:ec:88:06:8a:b6:06:ee:df:3f: 86:04:79:8e:d9:16:a8:be:f8:54:ba:cd:c0:69:7a: 1e:3d:85:9a:a0:c7:6c:f7:37:26:a1:64:94:11:80: bd:c9:a2:75:b4:23:0c:8a:d8:88:a2:29:f5:a5:f2: 96:df:5c:aa:04:5a:87:ee:37:24:74:ef:a5:95:c6: 3f:59:7c:e2:03:2f:79:8a:ce:a2:7f:69:4e:f6:f2: 74:62:ca:0d:71:16:3a:52:27:87:46:98:91:bd:b3: 74:90:f7:ef:e2:4d:c6:ec:d0:a9:2b:ce:5b:5b:a3: 13:23:fc:50:37:4e:1a:36:b1:d7:b2:b8:2b:f8:12: 82:7b:39:45:29:8d:b9:6c:98:af:02:a6:09:28:d3: d2:36:32:f4:86:38:0f:eb:bb:ce:06:6f:09:c0:a8: b8:78:ef:55:b1:4d:41:f2:ff:9b:a9:f2:20:41:e6: 68:66:11:06:d0:9f:a9:8a:cd:7d:16:e6:35:a8:52: dd:38:aa:6d:2c:28:d6:d0:43:67:f4:e3:03:48:bc: 70:22:53:8e:2f:ac:6b:e5:0a:fa:f8:0d:13:9d:42: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AA:75:92:FB:93:D2:CD:EE:BE:A3:62:43:F4:62:2D:EA:ED:6C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c0d3fd22-a8f2-3544-b48f-5578441e6129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:df:ad:61:d0:15:d3:15:2f:ec:da:e3:76:0f:cf:fd:ac:6a: 57:60:dc:ca:e5:fe:55:25:f6:60:59:2d:fb:33:9d:83:a1:a1: 06:c0:cf:d6:85:79:7c:fb:00:f3:c7:12:6d:1a:a6:dc:c1:ef: b6:21:5c:2f:13:8d:9d:cf:44:0c:49:1b:f3:c1:ab:84:88:e1: 8d:8e:f6:f7:30:96:50:c3:a6:de:4f:a4:bb:83:7c:40:fe:0b: 8d:18:b4:05:06:4b:2c:08:e8:8b:e6:a5:90:f0:24:01:45:ed: ef:58:bb:84:de:92:f0:00:cb:af:20:1f:3b:2c:cf:76:c8:f1: 39:d7:2c:61:e4:f9:7c:b5:2e:10:c3:7d:f0:b5:cf:cb:5d:0f: 8e:88:b4:2f:68:f0:60:78:4a:77:9a:5d:c7:44:a0:4a:9a:22: e2:7c:6e:d7:be:d9:9b:49:12:21:6b:29:f5:39:06:aa:49:0e: be:bd:6f:23:22:41:d8:96:18:64:3a:d4:63:d9:61:da:f6:ef: b5:e0:1f:b1:87:53:a6:5e:9d:f4:24:0d:b1:95:ee:fa:da:a7: 41:40:6f:41:02:a3:f9:84:ae:c7:2c:0e:63:89:3c:a9:0e:7c: 6a:c3:cf:a0:3a:63:91:27:88:13:92:69:af:54:5f:b1:1e:2e: b8:1b:ed:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYFUl84cGzEXdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Mzg5OWM3OWUtYzk0Yy00Njg5LThlNzgtMzdlOGY4MzUwZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKNUXRVwfljK829HyBhC5S8Jgki0tBhfLZH2 5YSO3bDP7tHsiAaKtgbu3z+GBHmO2RaovvhUus3AaXoePYWaoMds9zcmoWSUEYC9 yaJ1tCMMitiIoin1pfKW31yqBFqH7jckdO+llcY/WXziAy95is6if2lO9vJ0YsoN cRY6UieHRpiRvbN0kPfv4k3G7NCpK85bW6MTI/xQN04aNrHXsrgr+BKCezlFKY25 bJivAqYJKNPSNjL0hjgP67vOBm8JwKi4eO9VsU1B8v+bqfIgQeZoZhEG0J+pis19 FuY1qFLdOKptLCjW0ENn9OMDSLxwIlOOL6xr5Qr6+A0TnUJMLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuqdZL7k9LN7r6jYkP0Yi3q7WwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzBkM2ZkMjItYThmMi0z NTQ0LWI0OGYtNTU3ODQ0MWU2MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbfrWHQFdMVL+za43YPz/2saldg3Mrl/lUl9mBZLfsznYOhoQbAz9aF eXz7APPHEm0aptzB77YhXC8TjZ3PRAxJG/PBq4SI4Y2O9vcwllDDpt5PpLuDfED+ C40YtAUGSywI6IvmpZDwJAFF7e9Yu4TekvAAy68gHzssz3bI8TnXLGHk+Xy1LhDD ffC1z8tdD46ItC9o8GB4SneaXcdEoEqaIuJ8bte+2ZtJEiFrKfU5BqpJDr69byMi QdiWGGQ61GPZYdr277XgH7GHU6ZenfQkDbGV7vrap0FAb0ECo/mErscsDmOJPKkO fGrDz6A6Y5EniBOSaa9UX7EeLrgb7a0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:18 2026 by rpki-client