$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa File: ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa (raw, json) Hash identifier: H6GyKSQoanfBeGCcNUaFJowET8uReIUjuHlsIL5NPkI= Subject key identifier: 66:C0:F2:63:9A:95:8E:8F:0F:3A:1C:F8:37:FE:59:51:04:56:A2:BA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D82A16DFAA1574E511C80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:82:a1:6d:fa:a1:57:4e:51:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=215f04f7-5666-43d7-b847-abc80a171564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e4:1e:1b:3f:11:cd:9d:1e:42:ae:66:be:ce: f7:70:33:8b:04:b7:0e:a4:e7:e5:42:6e:c8:b3:0f: 39:2c:cb:13:34:99:ba:23:dd:25:3f:85:e2:35:35: 3c:50:b0:e0:17:36:37:7a:16:37:5c:f0:80:9a:a9: 79:a7:2b:55:b6:7a:1a:24:c2:53:ab:9a:15:aa:b7: 2b:76:c6:bd:96:0e:c9:26:6b:5a:b5:27:c4:11:00: 66:e4:3b:02:a7:5e:6b:18:5d:8a:ea:22:15:f6:fa: 24:63:38:cf:29:07:56:e0:0c:e2:d9:9e:2d:16:67: 12:16:36:31:4a:fa:8b:c4:41:be:47:b3:c9:e2:42: 27:ad:f3:5a:43:02:57:96:3e:29:b3:4c:b6:7f:d8: 78:29:ff:4a:a5:cb:c9:e4:c0:49:91:dd:fc:dc:33: 6a:9d:ca:3d:6b:70:21:f0:95:5c:71:d9:b8:87:01: 34:15:3f:22:f6:74:b8:47:6d:f9:a7:91:76:73:b6: 1c:da:26:8d:77:b1:d2:e7:94:b1:e3:00:3b:ab:93: d2:98:af:50:a4:a1:f3:77:2a:cc:98:ff:1a:89:45: 77:ad:1c:23:1a:36:5b:b2:5c:47:0e:77:2b:98:4e: 13:40:57:8a:4b:ab:d1:38:64:aa:1b:a9:0c:c1:40: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C0:F2:63:9A:95:8E:8F:0F:3A:1C:F8:37:FE:59:51:04:56:A2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3e3769-bd0b-360c-b7a7-1ac65a852ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2d:a1:1a:72:c6:8d:fd:79:23:ed:34:77:01:05:1e:c4:8d: 97:1e:52:ef:c9:63:46:3e:3b:60:bd:54:99:64:e3:94:67:7b: 1b:b7:ed:e9:fa:35:ae:81:d0:5e:80:e8:46:2d:f1:01:47:59: fc:40:7c:bd:85:40:94:00:73:8d:18:14:5b:af:7a:81:f4:a4: cb:16:67:54:a9:64:0b:4e:21:39:02:b9:5d:fe:28:1b:fa:f9: 18:60:54:00:0b:cb:5f:0b:ce:cd:67:8a:28:96:cc:b4:a2:c8: 13:9a:dc:b4:a3:43:89:33:da:f9:8b:7e:41:1c:11:c3:86:97: 9a:01:70:dc:44:9b:b1:38:46:b9:35:7c:f4:d7:2e:96:3b:e1: ae:9b:66:c1:44:b9:59:64:6a:4e:a7:d6:20:d5:e4:00:56:79: 55:1e:80:81:39:4c:6f:a2:3a:7c:2a:1c:03:f2:9b:62:4f:17: 21:fc:6c:24:bb:c1:0e:c5:66:aa:d7:80:6e:a1:a7:4f:f6:ec: 6d:21:b6:aa:4b:67:32:c6:4a:4c:98:80:0a:ff:34:aa:06:e5: 99:bd:16:c0:c1:3b:45:52:c8:74:a6:27:ee:b8:df:8a:22:4a: c7:a7:5f:67:a4:09:20:07:12:1a:b1:e6:42:74:b2:4e:af:2d: 61:3f:37:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYKhbfqhV05RHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MjE1ZjA0ZjctNTY2Ni00M2Q3LWI4NDctYWJjODBhMTcxNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheQeGz8RzZ0eQq5mvs73cDOLBLcOpOflQm7I sw85LMsTNJm6I90lP4XiNTU8ULDgFzY3ehY3XPCAmql5pytVtnoaJMJTq5oVqrcr dsa9lg7JJmtatSfEEQBm5DsCp15rGF2K6iIV9vokYzjPKQdW4Azi2Z4tFmcSFjYx SvqLxEG+R7PJ4kInrfNaQwJXlj4ps0y2f9h4Kf9KpcvJ5MBJkd383DNqnco9a3Ah 8JVccdm4hwE0FT8i9nS4R235p5F2c7Yc2iaNd7HS55Sx4wA7q5PSmK9QpKHzdyrM mP8aiUV3rRwjGjZbslxHDncrmE4TQFeKS6vROGSqG6kMwUDSWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbA8mOalY6PDzoc+Df+WVEEVqK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2EzZTM3NjktYmQwYi0z NjBjLWI3YTctMWFjNjVhODUyY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGotoRpyxo39eSPtNHcBBR7EjZceUu/JY0Y+O2C9VJlk45Rnexu37en6 Na6B0F6A6EYt8QFHWfxAfL2FQJQAc40YFFuveoH0pMsWZ1SpZAtOITkCuV3+KBv6 +RhgVAALy18Lzs1niiiWzLSiyBOa3LSjQ4kz2vmLfkEcEcOGl5oBcNxEm7E4Rrk1 fPTXLpY74a6bZsFEuVlkak6n1iDV5ABWeVUegIE5TG+iOnwqHAPym2JPFyH8bCS7 wQ7FZqrXgG6hp0/27G0htqpLZzLGSkyYgAr/NKoG5Zm9FsDBO0VSyHSmJ+6434oi SsenX2ekCSAHEhqx5kJ0sk6vLWE/Nxw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:58 2026 by rpki-client