$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa File: 1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa (raw, json) Hash identifier: TQoNT4CL9bKYWlTz4QeOOMOBd07L9zUmLzfvdIcYwlg= Subject key identifier: 22:FB:70:5D:D5:E0:83:0F:89:63:B6:57:25:77:03:41:62:21:6D:64 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A7350A34B4B3864E1A6973300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 157.5.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a3:4b:4b:38:64:e1:a6:97:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=2450b4e7-fe95-4993-ae29-b2f6aeafa034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:8c:e9:1c:dd:06:a1:7b:37:b6:32:d9:e9: f3:d6:2f:b2:34:fa:8f:ec:16:ef:c3:0e:86:37:31: af:fa:b6:4a:ea:ff:88:bf:e4:d1:64:c6:03:63:ce: 27:2a:a3:b4:14:44:48:34:c7:eb:0b:8f:a1:46:54: ec:86:09:c8:fc:8b:9b:ca:ce:8f:06:53:d9:bc:03: 5f:7f:d0:18:94:49:dd:26:d1:79:c2:70:f9:a0:24: cd:b4:b1:cb:33:ee:f8:ee:28:72:c7:a6:51:bd:0d: 0c:22:b6:ea:14:14:d3:81:79:77:73:ff:b6:68:54: e5:eb:4e:65:60:d1:9e:56:0c:13:f8:38:0f:5c:61: 5d:f1:0b:94:ad:fc:5d:a6:c3:d7:ef:50:39:50:9a: aa:15:fc:e1:ef:2d:94:b2:35:dd:eb:20:6a:af:14: c8:ea:59:40:03:11:fb:71:7b:94:b1:fb:a1:67:1b: 80:10:e3:da:c8:e6:97:bf:1e:93:f4:52:e4:85:ce: 36:3b:c5:b3:45:8e:47:f4:72:c0:2f:c9:67:95:57: 1b:3e:4f:f4:a2:b2:74:39:fb:e3:22:9f:43:73:36: e8:e1:bf:b7:e2:84:e5:a3:98:4e:9a:d4:ff:32:76: ab:81:9a:27:35:05:d8:c2:ec:e2:be:41:b7:1e:3f: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FB:70:5D:D5:E0:83:0F:89:63:B6:57:25:77:03:41:62:21:6D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c3:30:3a:f1:9d:fb:3e:25:0b:f3:b4:d5:da:26:58:07:21: 12:dc:3f:f6:61:6b:53:e4:af:3c:dd:3f:81:c9:b7:73:69:2a: 0b:d7:e2:a5:c7:13:52:14:e6:72:41:9f:10:3b:96:2f:65:d4: fc:12:f1:0a:63:51:27:64:8b:24:94:b3:8e:fe:bc:0d:b4:98: 7a:00:23:61:45:5e:cf:c7:4a:2d:6a:1d:d8:a7:f5:48:d3:58: 19:e3:0c:ff:ca:a1:58:a0:ff:4d:84:76:3a:bf:cb:36:6c:89: 18:dc:6d:2c:cc:1d:6c:28:68:ba:c8:24:54:7f:f7:90:d1:d6: 1e:1c:b8:88:4a:5b:68:18:d4:d8:8a:7b:91:bc:0c:84:11:25: 35:6a:63:e3:4d:3e:bf:46:f0:ab:2a:3e:6c:b9:23:1b:c4:40: 73:6c:b5:57:f6:10:aa:78:4d:92:0c:64:a4:89:fb:db:19:ec: 83:5e:21:18:e0:6a:15:48:0d:e5:cc:9d:71:b4:23:68:cb:4f: 14:58:81:50:10:1b:fd:4b:02:d0:50:37:ba:62:cb:d6:b7:10: 78:2e:3e:cb:8c:29:76:1a:d8:3b:4b:2c:c0:a8:d7:ce:f6:e4: 36:12:6b:6f:c8:28:f8:61:9c:8c:13:03:3d:44:62:46:7a:cd: 40:59:b5:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKNLSzhk4aaXMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MjQ1MGI0ZTctZmU5NS00OTkzLWFlMjktYjJmNmFlYWZhMDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQOM6RzdBqF7N7Yy2enz1i+yNPqP7Bbvww6G NzGv+rZK6v+Iv+TRZMYDY84nKqO0FERINMfrC4+hRlTshgnI/Iubys6PBlPZvANf f9AYlEndJtF5wnD5oCTNtLHLM+747ihyx6ZRvQ0MIrbqFBTTgXl3c/+2aFTl605l YNGeVgwT+DgPXGFd8QuUrfxdpsPX71A5UJqqFfzh7y2UsjXd6yBqrxTI6llAAxH7 cXuUsfuhZxuAEOPayOaXvx6T9FLkhc42O8WzRY5H9HLAL8lnlVcbPk/0orJ0Ofvj Ip9Dczbo4b+34oTlo5hOmtT/MnargZonNQXYwuzivkG3Hj+PdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL7cF3V4IMPiWO2VyV3A0FiIW1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWFiMTE3MmYtY2Q2YS0z MWY2LWE5ZDUtYzQ5NjhkZjliMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbDMDrxnfs+JQvztNXaJlgHIRLcP/Zha1PkrzzdP4HJt3NpKgvX4qXH E1IU5nJBnxA7li9l1PwS8QpjUSdkiySUs47+vA20mHoAI2FFXs/HSi1qHdin9UjT WBnjDP/KoVig/02Edjq/yzZsiRjcbSzMHWwoaLrIJFR/95DR1h4cuIhKW2gY1NiK e5G8DIQRJTVqY+NNPr9G8KsqPmy5IxvEQHNstVf2EKp4TZIMZKSJ+9sZ7INeIRjg ahVIDeXMnXG0I2jLTxRYgVAQG/1LAtBQN7piy9a3EHguPsuMKXYa2DtLLMCo1872 5DYSa2/IKPhhnIwTAz1EYkZ6zUBZtQY= -----END CERTIFICATE-----Generated at Tue Jul 8 23:31:22 2025 by rpki-client