$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a4e5bd-7ffb-3615-abc8-f2a212c24f16.roa File: f8a4e5bd-7ffb-3615-abc8-f2a212c24f16.roa (raw, json) Hash identifier: qvYWJa0nkeFHOO/petAr4i2Mm5KPIYQOvSkEZ9avgeU= Subject key identifier: CA:29:26:31:79:B4:B9:D9:3F:B6:0D:E8:92:3C:EC:20:F9:5E:C4:E7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D143D8429587E4A5DB78DC220 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a4e5bd-7ffb-3615-abc8-f2a212c24f16.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 157.5.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:84:29:58:7e:4a:5d:b7:8d:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=ddbebb3b-f5c8-4ad7-890e-e45f45900187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:51:4f:e7:43:9d:9f:53:97:0b:fb:f9:b3: 1f:0a:80:dc:eb:98:45:b2:5c:fb:c4:8c:a1:08:f0: 41:bb:ab:b5:f5:c6:f2:3d:00:28:62:8c:d7:d3:13: ea:e5:53:91:b2:5d:56:c3:65:04:50:b3:c3:09:55: cd:f5:29:41:9b:83:ce:a8:60:8c:a1:35:93:63:24: ee:b2:45:4f:10:1d:0b:18:bf:dd:7e:0a:be:97:59: 8f:f4:92:23:78:d4:75:73:76:78:af:5c:70:e5:a6: 2c:03:41:b7:82:86:c4:5f:18:5c:fd:a5:10:09:b9: 21:e4:ec:b1:ca:57:bf:77:e0:75:9f:42:4a:1a:d3: 52:74:40:4a:56:68:06:a7:87:71:7f:bf:0b:3f:dd: 81:40:3a:42:fc:45:ac:14:bd:19:9a:10:ed:d0:60: d2:d4:2c:02:12:ce:92:bd:5a:d7:d8:21:c5:ba:47: 6a:67:3f:dc:c4:95:92:6f:ed:af:3b:46:ca:e6:e7: ef:63:51:c1:b3:1a:e5:f7:f1:d5:78:19:5b:91:97: 64:72:00:24:ba:67:48:cf:ae:2f:b3:5d:39:6b:85: b2:38:9e:1f:1b:e6:72:3c:61:55:84:26:9f:df:06: 69:fe:ff:60:31:46:66:2a:06:11:9e:6c:41:42:dc: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:26:31:79:B4:B9:D9:3F:B6:0D:E8:92:3C:EC:20:F9:5E:C4:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a4e5bd-7ffb-3615-abc8-f2a212c24f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:4b:41:52:28:5d:c2:74:2b:1e:b8:c5:5b:06:f5:da:69:f0: 8a:22:c9:9f:4a:87:a4:2d:db:32:53:89:9d:d0:30:3a:e2:de: 25:f3:82:6d:be:8f:0a:06:45:0a:42:82:89:3a:dd:52:6d:f7: 7a:6a:33:c7:c6:a6:fe:2b:d0:fd:cb:89:42:47:53:13:d2:d0: 95:b3:b4:a4:f5:ca:f8:b8:b4:95:45:fc:79:0a:93:4b:5c:f8: a9:40:72:2b:db:c0:fe:99:34:13:14:ac:77:79:3c:14:f9:f7: a5:5d:39:f2:34:ea:81:9e:ae:9f:f2:87:4a:8d:5f:c0:6f:91: ef:87:be:78:99:08:a4:61:70:30:9a:23:93:7e:32:ad:8a:7e: 24:49:ab:e4:99:e5:37:2b:6e:bb:b7:d3:a6:d4:59:0b:d7:b5: 93:23:16:bd:22:cc:81:7a:b5:fb:2e:ff:56:92:ba:79:3e:fa: f5:96:ff:63:64:dd:d8:a0:95:a8:76:3b:5d:88:3b:3b:a3:f0: b1:bc:2c:0d:cf:03:27:1b:8f:fe:c3:6d:d5:01:5e:82:11:5b: c4:bf:1d:00:37:04:f4:b0:e5:54:d8:d7:f6:1f:ae:43:a8:d4: 58:ba:38:73:28:0c:ac:51:b7:87:44:bc:6d:4f:05:57:f2:90: 93:ef:ed:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYQpWH5KXbeNwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGRiZWJiM2ItZjVjOC00YWQ3LTg5MGUtZTQ1ZjQ1OTAwMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHJRT+dDnZ9Tlwv7+bMfCoDc65hFslz7xIyh CPBBu6u19cbyPQAoYozX0xPq5VORsl1Ww2UEULPDCVXN9SlBm4POqGCMoTWTYyTu skVPEB0LGL/dfgq+l1mP9JIjeNR1c3Z4r1xw5aYsA0G3gobEXxhc/aUQCbkh5Oyx yle/d+B1n0JKGtNSdEBKVmgGp4dxf78LP92BQDpC/EWsFL0ZmhDt0GDS1CwCEs6S vVrX2CHFukdqZz/cxJWSb+2vO0bK5ufvY1HBsxrl9/HVeBlbkZdkcgAkumdIz64v s105a4WyOJ4fG+ZyPGFVhCaf3wZp/v9gMUZmKgYRnmxBQtyfxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMopJjF5tLnZP7YN6JI87CD5XsTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjhhNGU1YmQtN2ZmYi0z NjE1LWFiYzgtZjJhMjEyYzI0ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlLQVIoXcJ0Kx64xVsG9dpp8IoiyZ9Kh6Qt2zJTiZ3QMDri3iXzgm2+ jwoGRQpCgok63VJt93pqM8fGpv4r0P3LiUJHUxPS0JWztKT1yvi4tJVF/HkKk0tc +KlAcivbwP6ZNBMUrHd5PBT596VdOfI06oGerp/yh0qNX8Bvke+HvniZCKRhcDCa I5N+Mq2KfiRJq+SZ5Tcrbru306bUWQvXtZMjFr0izIF6tfsu/1aSunk++vWW/2Nk 3diglah2O12IOzuj8LG8LA3PAycbj/7DbdUBXoIRW8S/HQA3BPSw5VTY1/YfrkOo 1Fi6OHMoDKxRt4dEvG1PBVfykJPv7aU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:35:08 2026 by rpki-client