$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e46f58f1-1fa2-3803-a6d6-d30edc180150.roa File: e46f58f1-1fa2-3803-a6d6-d30edc180150.roa (raw, json) Hash identifier: 0EE4nzkOryHMNOBl6mxasv2cWFtL8h6tzEuaQoEE7rc= Subject key identifier: 0F:E5:1C:75:B6:51:51:E4:99:00:3C:41:8C:9C:41:DA:C3:DD:C8:5F Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D83D3B8436CDC7D982680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e46f58f1-1fa2-3803-a6d6-d30edc180150.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:83:d3:b8:43:6c:dc:7d:98:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e54a1040-4da1-4fd4-9581-1ae915478926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:71:f1:21:2e:32:a4:b4:e1:4e:a4:13:00: ed:61:62:6f:1a:23:95:13:a7:02:04:7c:6c:1c:87: a7:e0:1d:00:7b:46:e5:e1:de:4e:13:a8:18:36:5a: 46:8f:0d:1b:ed:3d:03:72:cd:1a:6f:26:85:33:f8: 20:91:a3:8d:0c:ab:f3:f3:cd:75:63:32:76:d2:24: 24:4e:01:4b:65:54:4f:b3:5d:5c:17:0f:95:44:9d: 56:8d:48:b0:9e:19:71:92:f6:40:f9:2e:53:35:8f: af:b1:b0:aa:bf:71:f7:55:3a:4a:5f:ab:0b:68:39: 60:23:06:7f:84:17:0a:69:7d:53:39:cf:f4:40:3e: e0:63:29:fa:5b:02:43:6b:16:13:82:75:24:75:c0: 35:f5:f2:cf:04:5f:fd:10:67:17:8f:f9:96:bd:b3: bd:d9:27:db:c9:f6:c4:3a:c0:64:47:34:e4:e6:e9: da:c2:99:42:98:8c:c0:b3:45:22:c1:8a:ef:9c:44: 8f:b0:0d:8e:53:eb:9f:c3:ab:89:65:8c:9f:33:8f: 4a:c6:bb:86:55:58:3c:2b:cb:35:7b:a3:46:ef:87: df:ae:19:a7:f2:c2:87:98:ca:b1:2c:6d:8e:f2:31: 01:de:c9:5e:be:e3:8c:e3:dd:65:d4:17:55:9b:71: 62:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:1C:75:B6:51:51:E4:99:00:3C:41:8C:9C:41:DA:C3:DD:C8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e46f58f1-1fa2-3803-a6d6-d30edc180150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9e:0a:49:f7:4d:fc:9f:18:4a:72:e0:26:cd:b1:99:77:5c: 8d:97:ed:77:78:5b:1c:42:b5:e6:e8:fb:cd:a1:96:02:f3:c2: 15:10:b3:71:8d:68:ab:22:de:d4:ae:ff:bb:86:7d:82:8b:fb: 2a:56:b8:82:92:46:b3:07:86:3e:fd:27:69:a4:10:b1:0a:a5: 07:ff:71:75:82:f8:e6:89:0c:c0:07:c1:e0:f8:b2:ef:07:e0: f3:0a:b8:eb:5e:8e:27:8b:32:5b:fb:2c:f5:fa:2c:bc:1e:85: 61:7d:e8:eb:21:d8:b8:64:c3:f0:dc:c0:93:57:d1:bf:79:de: da:ed:62:95:d2:db:01:c1:54:69:32:e0:64:3a:af:31:2a:10: b7:ab:5e:f3:b1:ff:71:2d:70:e9:7c:fa:98:e2:34:f5:b9:45: ba:df:04:ab:b5:ae:6d:94:8d:6a:b6:7f:6e:2c:4b:b4:9b:ad: 3f:de:97:5b:eb:78:81:dd:e4:99:72:97:c4:df:43:12:e1:b4: 1c:85:0b:e1:52:94:fe:a5:d9:a2:64:bb:b7:d1:a6:7a:a4:f7: e7:da:53:a2:21:18:45:c6:58:e1:eb:80:41:3a:bd:ac:7b:03: c1:d0:aa:66:0b:9b:53:f9:18:1b:b1:91:1f:6c:02:4f:96:71: 59:85:3b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYPTuENs3H2YJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTU0YTEwNDAtNGRhMS00ZmQ0LTk1ODEtMWFlOTE1NDc4OTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uFx8SEuMqS04U6kEwDtYWJvGiOVE6cCBHxs HIen4B0Ae0bl4d5OE6gYNlpGjw0b7T0Dcs0abyaFM/ggkaONDKvz8811YzJ20iQk TgFLZVRPs11cFw+VRJ1WjUiwnhlxkvZA+S5TNY+vsbCqv3H3VTpKX6sLaDlgIwZ/ hBcKaX1TOc/0QD7gYyn6WwJDaxYTgnUkdcA19fLPBF/9EGcXj/mWvbO92SfbyfbE OsBkRzTk5unawplCmIzAs0UiwYrvnESPsA2OU+ufw6uJZYyfM49KxruGVVg8K8s1 e6NG74ffrhmn8sKHmMqxLG2O8jEB3slevuOM491l1BdVm3FiCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/lHHW2UVHkmQA8QYycQdrD3chfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTQ2ZjU4ZjEtMWZhMi0z ODAzLWE2ZDYtZDMwZWRjMTgwMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+eCkn3TfyfGEpy4CbNsZl3XI2X7Xd4WxxCtebo+82hlgLzwhUQs3GN aKsi3tSu/7uGfYKL+ypWuIKSRrMHhj79J2mkELEKpQf/cXWC+OaJDMAHweD4su8H 4PMKuOtejieLMlv7LPX6LLwehWF96Osh2Lhkw/DcwJNX0b953trtYpXS2wHBVGky 4GQ6rzEqELerXvOx/3EtcOl8+pjiNPW5RbrfBKu1rm2UjWq2f24sS7SbrT/el1vr eIHd5Jlyl8TfQxLhtByFC+FSlP6l2aJku7fRpnqk9+faU6IhGEXGWOHrgEE6vax7 A8HQqmYLm1P5GBuxkR9sAk+WcVmFOx0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:04 2026 by rpki-client