$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa File: 0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa (raw, json) Hash identifier: J4TCW1Yqy2kebVuxZcsSVFEc1Bk4ReP1unwyP2NnHY0= Subject key identifier: 90:9E:0A:B5:CA:26:A6:4D:CD:57:D7:F0:F6:CA:36:89:D4:39:82:29 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4984B566312D40468452A580 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b5:66:31:2d:40:46:84:52:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=324426c5-83fd-4107-8e7d-a99343b74be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:d1:77:24:73:ed:ac:bf:cc:16:75:3b:3a: a6:9b:db:44:b7:0d:a0:6c:91:85:92:37:aa:2d:93: be:c5:9b:95:55:b2:96:7f:5d:e6:37:a5:a4:2e:c1: 83:44:c6:ff:0c:f3:83:78:ff:a8:9f:8e:4c:f5:f9: 6c:f2:a6:28:d1:b1:99:67:dc:50:43:80:a5:57:4b: 10:4a:f2:32:a5:2f:49:9b:ca:22:35:d4:d6:bc:94: 42:6f:19:32:05:d2:dc:49:62:e3:94:8b:ee:7b:80: f8:53:47:03:79:cd:06:83:e1:13:c9:d4:0b:0b:8e: 71:37:d7:9f:2e:07:df:60:cb:2b:78:bb:da:aa:61: 7d:7f:30:31:3a:15:97:07:be:db:0f:0a:07:d6:be: ce:af:fa:8e:81:24:88:20:0c:46:a5:b9:fa:0f:66: d2:47:95:32:43:94:25:1b:cf:da:9a:34:ca:bc:bb: 2f:98:08:c8:26:6b:cf:c1:89:d5:9b:26:f7:3f:50: ee:83:d9:f7:02:a1:77:bd:cd:60:df:8c:96:dc:e0: 9a:f0:bb:68:dc:73:88:57:0d:fb:66:d6:91:a8:16: 58:66:58:25:22:e7:75:0e:4b:02:1d:fa:ce:23:7d: 1f:97:c9:b7:02:7b:36:f5:9f:0a:2e:fc:a7:97:56: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9E:0A:B5:CA:26:A6:4D:CD:57:D7:F0:F6:CA:36:89:D4:39:82:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ea170da-0a92-3032-9fb2-805aae5ca0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:47:68:34:b5:51:8d:4f:ac:2e:ca:b2:00:10:de:e0:a3:ac: dc:9f:c0:14:93:73:7e:b0:e2:3b:72:c3:74:cf:93:0c:b4:06: 0a:5a:d3:5c:02:1e:56:c1:1c:34:45:54:48:e1:66:85:61:0c: 19:93:08:70:18:71:d4:f8:4b:0b:6a:03:56:8f:88:fa:dc:20: 38:56:e8:5e:76:b5:ad:58:3c:6b:97:34:2d:4c:a8:a9:c4:ab: 33:09:5b:af:8e:89:4e:60:04:34:80:50:d0:b2:79:e1:e5:21: 2b:9c:ef:36:7d:3f:11:9a:f2:b8:ff:72:97:d3:5b:98:22:4c: fe:f7:6e:ab:53:c0:65:cb:42:0f:70:37:0a:88:dd:0a:1b:17: f5:4c:05:84:6a:cf:3a:8d:98:f3:02:a2:0f:e8:51:08:df:9e: df:38:77:d3:cd:b5:e5:ca:8b:47:75:90:3e:3a:ac:f0:32:ae: 51:fa:44:57:22:d4:bb:c8:d5:8f:20:ac:1f:9e:be:98:11:09: e6:ff:c6:da:61:a4:3f:dc:68:59:70:7d:46:74:d6:23:85:d4: 89:5e:07:fe:5b:7e:47:79:21:d2:2c:e5:10:40:a2:26:40:3d: 2f:80:e2:de:91:48:5d:54:93:90:75:f0:02:e8:7b:e7:60:84: c1:e9:e3:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLVmMS1ARoRSpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzI0NDI2YzUtODNmZC00MTA3LThlN2QtYTk5MzQzYjc0YmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBvRdyRz7ay/zBZ1Ozqmm9tEtw2gbJGFkjeq LZO+xZuVVbKWf13mN6WkLsGDRMb/DPODeP+on45M9fls8qYo0bGZZ9xQQ4ClV0sQ SvIypS9Jm8oiNdTWvJRCbxkyBdLcSWLjlIvue4D4U0cDec0Gg+ETydQLC45xN9ef LgffYMsreLvaqmF9fzAxOhWXB77bDwoH1r7Or/qOgSSIIAxGpbn6D2bSR5UyQ5Ql G8/amjTKvLsvmAjIJmvPwYnVmyb3P1Dug9n3AqF3vc1g34yW3OCa8Lto3HOIVw37 ZtaRqBZYZlglIud1DksCHfrOI30fl8m3Ans29Z8KLvynl1aocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCeCrXKJqZNzVfX8PbKNonUOYIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGVhMTcwZGEtMGE5Mi0z MDMyLTlmYjItODA1YWFlNWNhMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRHaDS1UY1PrC7KsgAQ3uCjrNyfwBSTc36w4jtyw3TPkwy0Bgpa01wC HlbBHDRFVEjhZoVhDBmTCHAYcdT4SwtqA1aPiPrcIDhW6F52ta1YPGuXNC1MqKnE qzMJW6+OiU5gBDSAUNCyeeHlISuc7zZ9PxGa8rj/cpfTW5giTP73bqtTwGXLQg9w NwqI3QobF/VMBYRqzzqNmPMCog/oUQjfnt84d9PNteXKi0d1kD46rPAyrlH6RFci 1LvI1Y8grB+evpgRCeb/xtphpD/caFlwfUZ01iOF1IleB/5bfkd5IdIs5RBAoiZA PS+A4t6RSF1Uk5B18ALoe+dghMHp48g= -----END CERTIFICATE-----Generated at Fri Sep 25 12:37:47 2026 by rpki-client