$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa File: 21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa (raw, json) Hash identifier: nooBP8FLqyW8shxA2gy/JhpUX5olKz4KC1F/kebL0fM= Subject key identifier: B7:A9:58:09:A5:58:F3:23:CE:FC:D9:0B:FF:0E:2E:E6:2E:A0:24:C1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4984B1FDF258906883143280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b1:fd:f2:58:90:68:83:14:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b2677cac-7430-4ca4-83f1-62a2456788a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1e:ae:2d:48:5c:56:5b:82:00:ce:3a:1e:6c: 7c:d0:8a:a8:fd:ad:d9:9e:35:da:6d:61:cd:ee:26: 57:61:60:88:55:6c:05:5b:fb:20:d2:b0:1b:3c:c3: a2:ec:87:27:39:fc:38:b4:85:cf:fb:b6:b9:a6:0f: 18:05:46:42:0b:71:a7:bd:71:5e:0a:c6:a7:19:bc: d9:e7:36:aa:e6:66:c2:6b:2f:09:e8:74:75:64:dc: c0:40:7a:f8:b5:83:b9:c5:cf:6a:05:6d:83:11:b8: 5f:c3:fc:04:9f:b0:56:a1:61:91:72:3a:e2:0a:7c: ef:4c:7a:35:dd:a7:d8:06:c5:44:83:44:cb:a3:e1: aa:bd:c4:41:5a:da:7b:3c:c9:41:3c:79:f8:73:da: da:a2:b0:29:15:cd:4f:88:db:c1:e7:e3:72:67:04: c6:40:6f:ee:c3:a0:f1:41:56:7b:7c:83:fc:e4:64: 4a:db:96:96:5b:89:81:5b:f4:a9:3e:d9:1b:f3:99: d1:80:fe:63:20:62:30:84:b5:b7:17:c6:b0:00:af: 22:b3:40:94:c6:93:9b:bd:1f:d6:67:2b:d1:cf:01: 2f:86:67:a5:9b:2d:c7:dd:e1:8c:c1:2b:03:9b:88: c8:b0:7d:56:b3:b0:94:d1:f5:b4:9f:6d:04:1f:bf: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A9:58:09:A5:58:F3:23:CE:FC:D9:0B:FF:0E:2E:E6:2E:A0:24:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21c3c0e8-fd72-3e4d-a10a-e1fe0421ec90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2c:82:5a:4c:17:4a:bb:c3:e7:c6:d6:33:8e:36:81:81:1b: 2f:e1:22:4d:3a:ca:3e:a4:2a:75:e2:2b:cc:5c:9b:46:b1:1a: aa:40:b9:1c:67:cd:07:d3:20:3f:8a:8d:8b:b9:cf:d1:6d:82: 3b:d7:d4:bd:0e:a4:3a:b5:ce:3a:7e:98:e0:17:98:c2:d9:f9: 19:1c:f5:93:d0:3e:91:08:91:e5:93:09:8d:57:ce:77:92:1e: 2b:45:e4:e0:64:11:83:3f:3f:7f:86:ed:bc:50:4e:6f:9e:86: c8:2a:70:23:e5:99:d7:a7:fa:04:3a:59:43:49:9c:f1:dd:7e: 45:fa:b4:9e:27:57:63:06:ea:a7:7e:b6:23:7e:bf:cb:37:40: 32:99:88:f0:e6:06:28:ea:b5:41:20:b5:9c:27:c0:b0:7b:14: a5:b2:26:7d:75:57:8e:ac:b6:a9:8e:b0:ba:13:8d:74:e5:1b: e2:a8:0c:0a:de:af:f5:f2:f0:ca:56:e5:9d:95:09:6c:01:4e: 1f:f3:10:7c:eb:df:69:9a:46:91:14:e5:b3:51:72:fc:32:e5: b8:c2:9c:b3:f1:c9:ca:e7:75:b7:da:b8:99:8f:1e:c1:b8:27: b3:9b:64:1a:32:6c:8e:a5:7f:47:76:88:65:50:a3:fa:a5:fc: 0f:fe:68:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLH98liQaIMUMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjI2NzdjYWMtNzQzMC00Y2E0LTgzZjEtNjJhMjQ1Njc4OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h6uLUhcVluCAM46Hmx80Iqo/a3ZnjXabWHN 7iZXYWCIVWwFW/sg0rAbPMOi7IcnOfw4tIXP+7a5pg8YBUZCC3GnvXFeCsanGbzZ 5zaq5mbCay8J6HR1ZNzAQHr4tYO5xc9qBW2DEbhfw/wEn7BWoWGRcjriCnzvTHo1 3afYBsVEg0TLo+GqvcRBWtp7PMlBPHn4c9raorApFc1PiNvB5+NyZwTGQG/uw6Dx QVZ7fIP85GRK25aWW4mBW/SpPtkb85nRgP5jIGIwhLW3F8awAK8is0CUxpObvR/W ZyvRzwEvhmelmy3H3eGMwSsDm4jIsH1Ws7CU0fW0n20EH7+V1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLepWAmlWPMjzvzZC/8OLuYuoCTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjFjM2MwZTgtZmQ3Mi0z ZTRkLWExMGEtZTFmZTA0MjFlYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQsglpMF0q7w+fG1jOONoGBGy/hIk06yj6kKnXiK8xcm0axGqpAuRxn zQfTID+KjYu5z9FtgjvX1L0OpDq1zjp+mOAXmMLZ+Rkc9ZPQPpEIkeWTCY1XzneS HitF5OBkEYM/P3+G7bxQTm+ehsgqcCPlmden+gQ6WUNJnPHdfkX6tJ4nV2MG6qd+ tiN+v8s3QDKZiPDmBijqtUEgtZwnwLB7FKWyJn11V46stqmOsLoTjXTlG+KoDAre r/Xy8MpW5Z2VCWwBTh/zEHzr32maRpEU5bNRcvwy5bjCnLPxycrndbfauJmPHsG4 J7ObZBoybI6lf0d2iGVQo/ql/A/+aKM= -----END CERTIFICATE-----Generated at Fri Sep 25 07:46:53 2026 by rpki-client