$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3e4f1dc6-6ddc-36ff-997f-362a547c153d.roa File: 3e4f1dc6-6ddc-36ff-997f-362a547c153d.roa (raw, json) Hash identifier: pXbcB+eQk/pkqWyegp/zq3uup3eWRHN2cEdQaTSUPZA= Subject key identifier: F9:3A:E8:4B:F0:CF:30:C9:29:90:9D:A5:79:1D:0D:10:B3:9C:DE:D2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F497C7B7B7F8EC764C41850F0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3e4f1dc6-6ddc-36ff-997f-362a547c153d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:7b:7b:7f:8e:c7:64:c4:18:50:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b40d6bfa-d70a-4ccd-85ce-cce77a666ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:78:eb:57:df:24:35:cb:df:5d:30:2d:df: b6:18:a1:0c:b2:ed:f5:f9:40:af:0a:b7:08:b9:ae: fe:88:7a:b9:d3:8f:3e:67:a3:7a:d8:1d:4b:b0:6e: 25:66:fa:df:d4:b0:7a:66:a8:78:62:0a:ff:b8:7b: 25:e6:fc:9f:9c:66:78:10:a7:6f:45:f1:55:ce:38: 9b:e0:ac:07:81:5b:40:b9:a7:a3:44:92:3d:3e:26: 28:9f:0a:b0:80:be:47:96:d7:4c:61:e4:7a:49:69: 03:27:ed:de:6f:6e:52:82:f8:d6:c9:e4:0d:f5:ab: 1b:08:bb:0a:0f:c8:84:cf:ea:f3:6e:45:ab:48:0b: 86:21:13:08:06:1b:fb:c0:9c:51:8c:61:aa:55:01: 36:1c:2c:c8:4c:0e:d0:da:f8:97:f9:2f:86:0c:ff: 08:42:d2:ec:93:35:47:4b:cd:4b:31:b6:3c:72:38: 88:ed:8b:41:d4:13:dc:bd:61:74:ca:e2:1a:60:ca: 99:23:32:d9:78:10:a1:e2:c4:d3:cf:0e:ef:40:12: 99:d2:fa:fb:24:1a:c6:1b:b3:36:d4:c5:8a:da:50: fb:0e:a9:f2:ee:ba:2f:1d:e8:51:2e:99:d6:59:91: 1f:d1:21:13:c9:5d:ed:3a:dc:a1:44:fe:ad:e9:83: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3A:E8:4B:F0:CF:30:C9:29:90:9D:A5:79:1D:0D:10:B3:9C:DE:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3e4f1dc6-6ddc-36ff-997f-362a547c153d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9e:fb:94:86:2a:f2:e9:df:d5:b1:23:e8:92:fd:93:c3:ac: e0:6f:39:cc:a6:39:91:8a:10:2a:4d:25:f2:bc:9d:27:67:60: 69:bc:2a:59:14:e4:1c:10:49:b4:76:ea:75:e2:cd:2f:5f:b4: 29:b5:49:59:7c:c7:02:10:25:75:9b:ed:06:82:81:07:e0:9b: 9e:8b:d2:83:8a:84:4e:8e:b8:40:6b:35:f8:fe:57:da:7f:f8: 1a:48:1a:0c:a9:aa:f1:42:73:7a:bd:d6:9e:86:1e:56:92:88: 3c:ce:22:a5:a3:e2:d4:9d:8e:ce:74:95:c0:ea:f4:8c:a1:9c: a4:1c:6c:34:ae:a3:17:52:d3:e9:6d:d0:46:a6:0b:ef:6b:bc: d7:52:b2:52:e9:13:eb:0d:9d:7f:68:b5:39:c4:f2:21:f4:a5: 59:b3:66:72:a5:ca:f3:b8:53:94:a6:23:99:b3:c2:29:a3:43: 87:4c:c1:d6:c8:bd:55:60:d6:cc:55:33:76:c8:81:e7:99:08: 39:8b:41:f6:e6:54:ee:ae:9f:c4:65:b3:c2:43:d1:f5:71:23: e8:4e:5b:84:31:67:71:f4:89:a6:56:3f:56:d5:3c:2a:5a:99: ce:4a:f5:dc:a7:48:e5:89:8a:45:c0:71:77:7e:9f:e7:32:6d: 1c:ea:05:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfHt7f47HZMQYUPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjQwZDZiZmEtZDcwYS00Y2NkLTg1Y2UtY2NlNzdhNjY2ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIN461ffJDXL310wLd+2GKEMsu31+UCvCrcI ua7+iHq5048+Z6N62B1LsG4lZvrf1LB6Zqh4Ygr/uHsl5vyfnGZ4EKdvRfFVzjib 4KwHgVtAuaejRJI9PiYonwqwgL5HltdMYeR6SWkDJ+3eb25SgvjWyeQN9asbCLsK D8iEz+rzbkWrSAuGIRMIBhv7wJxRjGGqVQE2HCzITA7Q2viX+S+GDP8IQtLskzVH S81LMbY8cjiI7YtB1BPcvWF0yuIaYMqZIzLZeBCh4sTTzw7vQBKZ0vr7JBrGG7M2 1MWK2lD7Dqny7rovHehRLpnWWZEf0SETyV3tOtyhRP6t6YN+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk66EvwzzDJKZCdpXkdDRCznN7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2U0ZjFkYzYtNmRkYy0z NmZmLTk5N2YtMzYyYTU0N2MxNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADae+5SGKvLp39WxI+iS/ZPDrOBvOcymOZGKECpNJfK8nSdnYGm8KlkU 5BwQSbR26nXizS9ftCm1SVl8xwIQJXWb7QaCgQfgm56L0oOKhE6OuEBrNfj+V9p/ +BpIGgypqvFCc3q91p6GHlaSiDzOIqWj4tSdjs50lcDq9IyhnKQcbDSuoxdS0+lt 0EamC+9rvNdSslLpE+sNnX9otTnE8iH0pVmzZnKlyvO4U5SmI5mzwimjQ4dMwdbI vVVg1sxVM3bIgeeZCDmLQfbmVO6un8Rls8JD0fVxI+hOW4QxZ3H0iaZWP1bVPCpa mc5K9dynSOWJikXAcXd+n+cybRzqBYI= -----END CERTIFICATE-----Generated at Fri Sep 25 07:57:56 2026 by rpki-client