$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa File: cc70bf40-8d8f-3723-a43b-f785998133e4.roa (raw, json) Hash identifier: mMN4WJF1iq6JU9/HzuBeJA9+H9i0r++lNNVHf7SEBkw= Subject key identifier: EF:B8:1E:1D:02:FF:AF:B3:1A:00:6A:38:1D:A3:77:8C:4B:B6:87:3B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4984B209D8E18072647442C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b2:09:d8:e1:80:72:64:74:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7de31caa-2143-4766-9f6b-61b4f08c8bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:8e:f4:eb:b9:8e:58:67:99:2a:dd:fa:12: 03:c1:f0:45:f1:30:6d:3e:e4:0e:cf:8d:11:7f:52: c0:c7:44:bc:cd:2c:7a:dd:ea:99:8b:02:47:b4:c0: cb:1f:cf:72:9f:d8:7c:3f:9a:fd:5d:ec:63:3f:5e: 93:29:70:05:f7:39:e6:22:3f:ee:09:3b:3b:52:60: 63:85:4f:c3:9e:64:76:72:13:c8:c4:3a:9e:f9:73: 8a:87:88:fa:e2:84:6e:87:7b:18:2d:dd:80:c3:d4: 66:0a:32:7d:04:32:4e:3b:4e:31:5a:e8:2d:b6:0e: a9:ca:9f:91:82:85:c1:87:e1:02:92:d1:ff:1b:b4: a5:95:4c:a6:9f:7a:17:eb:69:86:f7:1d:1f:a1:f4: ee:08:b6:5d:d7:03:56:1a:a6:fa:0a:23:96:51:d1: 14:4f:6d:f1:67:67:86:b1:ee:13:f2:ed:e4:7f:e4: 1c:43:25:30:3d:7e:dc:0e:b5:ec:fb:ba:61:56:af: e6:a6:f4:60:96:d0:3e:6b:67:a3:d7:39:28:66:d9: e6:bc:2d:ae:9b:a2:7e:ac:4f:be:7d:b0:31:2e:8e: 33:51:fd:a7:c5:7c:36:83:f1:4c:15:30:07:18:d6: 30:15:b4:8e:77:30:e4:23:57:b3:3b:68:7d:3b:d8: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B8:1E:1D:02:FF:AF:B3:1A:00:6A:38:1D:A3:77:8C:4B:B6:87:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:fb:7d:1a:9f:72:7e:ad:60:01:c5:a8:a7:1b:96:46:90:4b: 4e:43:58:cf:52:31:fb:42:02:e6:e8:e2:7c:0a:ae:38:9d:3c: 02:20:6c:20:63:83:3f:4d:e9:55:5b:20:99:19:0a:91:25:76: 0b:5c:be:89:67:e7:46:1b:56:14:a9:e0:eb:e9:72:c3:6f:c3: 98:8f:2a:2e:a8:76:b9:ea:ef:4e:32:d5:d7:d1:16:61:de:a6: 8e:97:6a:9f:43:18:be:e9:fa:1b:a3:b6:9a:11:b3:2d:f5:4b: 9a:db:3c:6c:b4:1a:cb:05:60:9b:f5:02:7c:2a:ab:ed:0c:62: c0:28:1f:36:30:e1:ba:83:bd:11:48:0b:59:a9:6f:22:b9:eb: 38:52:d0:0e:01:8c:ad:d4:ad:ac:74:12:89:22:84:da:f1:0b: 21:c5:30:b4:60:1d:0a:29:8a:74:87:2d:aa:30:09:0e:bd:b9: c4:f9:dc:8a:e2:79:7b:2b:1d:c3:86:90:1a:2d:95:25:92:b7: 0f:d1:16:f1:33:75:16:e4:24:30:1a:43:24:27:37:f9:c6:45: a8:d5:16:af:c0:82:ef:db:cd:f3:ba:4f:e3:b7:c5:36:74:1e: 06:0e:34:ca:93:8f:d3:f4:bd:78:02:57:2f:ec:a6:0c:de:48: 91:56:22:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLIJ2OGAcmR0QsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RlMzFjYWEtMjE0My00NzY2LTlmNmItNjFiNGYwOGM4YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m2O9Ou5jlhnmSrd+hIDwfBF8TBtPuQOz40R f1LAx0S8zSx63eqZiwJHtMDLH89yn9h8P5r9XexjP16TKXAF9znmIj/uCTs7UmBj hU/DnmR2chPIxDqe+XOKh4j64oRuh3sYLd2Aw9RmCjJ9BDJOO04xWugttg6pyp+R goXBh+ECktH/G7SllUymn3oX62mG9x0fofTuCLZd1wNWGqb6CiOWUdEUT23xZ2eG se4T8u3kf+QcQyUwPX7cDrXs+7phVq/mpvRgltA+a2ej1zkoZtnmvC2um6J+rE++ fbAxLo4zUf2nxXw2g/FMFTAHGNYwFbSOdzDkI1ezO2h9O9hKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+4Hh0C/6+zGgBqOB2jd4xLtoc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2M3MGJmNDAtOGQ4Zi0z NzIzLWE0M2ItZjc4NTk5ODEzM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL7fRqfcn6tYAHFqKcblkaQS05DWM9SMftCAubo4nwKrjidPAIgbCBj gz9N6VVbIJkZCpEldgtcvoln50YbVhSp4OvpcsNvw5iPKi6odrnq704y1dfRFmHe po6Xap9DGL7p+hujtpoRsy31S5rbPGy0GssFYJv1Anwqq+0MYsAoHzYw4bqDvRFI C1mpbyK56zhS0A4BjK3Urax0EokihNrxCyHFMLRgHQopinSHLaowCQ69ucT53Iri eXsrHcOGkBotlSWStw/RFvEzdRbkJDAaQyQnN/nGRajVFq/Agu/bzfO6T+O3xTZ0 HgYONMqTj9P0vXgCVy/spgzeSJFWIuo= -----END CERTIFICATE-----Generated at Sat Sep 26 20:45:18 2026 by rpki-client