$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa File: b4af9c38-642f-3034-a2cc-d6c945b1e743.roa (raw, json) Hash identifier: 2StPKwFgQE7kICphOp2T9mEaxb5sJmv5eLCNL4dZ5Tc= Subject key identifier: 56:81:12:45:53:37:96:E3:2B:1A:EB:2D:56:FE:7A:55:BC:21:DE:B8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A7350A3DB7CA5ABB4B850D940 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 157.5.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a3:db:7c:a5:ab:b4:b8:50:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=65bb244f-8f05-483e-a7d4-5138246a85e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2c:22:d5:c0:ef:5b:06:c9:9e:26:e4:1a:d1: fa:36:30:dc:c0:4b:57:2e:5d:d7:54:dd:88:aa:bc: dd:01:2d:c5:c6:ea:4a:f2:71:39:8c:de:9d:3d:cf: 48:7a:75:bb:49:7f:5a:2c:43:ba:c3:02:4e:f1:07: 37:1d:e8:7a:99:3c:72:fc:75:54:41:b1:91:76:e6: bc:53:32:2a:42:f2:11:72:47:1a:cb:b6:14:f2:42: d7:24:eb:d9:c3:56:16:f4:0b:1b:2c:0b:14:d1:06: 15:c6:44:3c:06:0a:7c:36:92:63:07:ab:67:2a:d4: dd:7e:b8:f2:37:04:1d:e7:c0:80:d8:d9:eb:85:d3: 92:ab:d8:55:ab:bb:f5:83:95:1f:9e:c4:aa:ef:76: e0:33:d6:a0:d0:ec:42:78:be:14:cf:bb:2a:66:16: 26:00:5d:be:59:71:17:aa:13:f8:89:90:1a:45:c3: f0:58:4e:de:80:45:1d:b0:ea:a5:40:fa:0b:73:30: c8:15:eb:e9:96:3c:d3:f5:e8:0b:46:d4:0c:33:11: 84:80:5a:16:54:b7:e8:c8:01:a9:d4:ac:23:05:c2: 75:a9:9b:d7:5c:3f:2a:ee:8b:d3:8b:43:74:4a:9a: f4:7d:97:52:ed:0f:b6:8c:e2:8d:c0:ac:59:fe:bd: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:81:12:45:53:37:96:E3:2B:1A:EB:2D:56:FE:7A:55:BC:21:DE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fa:f2:65:18:e5:0d:14:44:aa:a6:3c:7e:52:7c:00:a9:30: 87:20:dc:1e:d8:c4:79:f9:20:d0:e7:2b:67:69:7d:67:1d:c7: ba:9d:9b:92:5c:a3:ed:4d:8d:f9:85:9d:bd:b0:12:4b:43:6c: 23:32:09:50:e1:99:39:fd:dc:45:c6:d8:ac:c2:bd:7d:db:1e: 64:0e:77:29:6f:5c:8e:16:bb:25:1c:9a:16:aa:75:6a:56:4e: 5d:78:8c:b0:3c:cc:9a:ee:c9:7c:05:ad:84:99:7e:24:6d:15: f1:30:5e:61:6d:57:34:c1:c8:7e:ce:db:05:06:7f:f7:fc:f6: d1:3d:a5:9a:b0:de:ac:00:e6:e3:b1:df:53:a1:67:b3:bd:24: 44:b1:61:c5:be:eb:0f:98:93:93:7f:1a:8e:c4:38:12:95:2d: 55:1c:a1:b4:87:d5:9e:7f:9c:3b:1f:74:29:c2:e3:bb:c9:da: a7:4d:b8:ef:e8:06:e0:15:56:03:e5:d0:ce:e2:97:04:ca:d5: 13:76:23:67:a4:02:03:69:28:9c:99:fc:c0:f5:bc:15:25:61: 7a:d8:2a:42:ea:ee:43:64:6a:1b:80:c0:86:c1:c5:f6:83:a0: 91:ed:fb:28:de:81:b1:32:5f:c6:3f:3b:dc:82:67:12:23:48: 15:80:2d:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKPbfKWrtLhQ2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk NjViYjI0NGYtOGYwNS00ODNlLWE3ZDQtNTEzODI0NmE4NWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiwi1cDvWwbJnibkGtH6NjDcwEtXLl3XVN2I qrzdAS3FxupK8nE5jN6dPc9IenW7SX9aLEO6wwJO8Qc3Heh6mTxy/HVUQbGRdua8 UzIqQvIRckcay7YU8kLXJOvZw1YW9AsbLAsU0QYVxkQ8Bgp8NpJjB6tnKtTdfrjy NwQd58CA2NnrhdOSq9hVq7v1g5UfnsSq73bgM9ag0OxCeL4Uz7sqZhYmAF2+WXEX qhP4iZAaRcPwWE7egEUdsOqlQPoLczDIFevpljzT9egLRtQMMxGEgFoWVLfoyAGp 1KwjBcJ1qZvXXD8q7ovTi0N0Spr0fZdS7Q+2jOKNwKxZ/r2EvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaBEkVTN5bjKxrrLVb+elW8Id64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjRhZjljMzgtNjQyZi0z MDM0LWEyY2MtZDZjOTQ1YjFlNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH68mUY5Q0URKqmPH5SfACpMIcg3B7YxHn5INDnK2dpfWcdx7qdm5Jc o+1NjfmFnb2wEktDbCMyCVDhmTn93EXG2KzCvX3bHmQOdylvXI4WuyUcmhaqdWpW Tl14jLA8zJruyXwFrYSZfiRtFfEwXmFtVzTByH7O2wUGf/f89tE9pZqw3qwA5uOx 31OhZ7O9JESxYcW+6w+Yk5N/Go7EOBKVLVUcobSH1Z5/nDsfdCnC47vJ2qdNuO/o BuAVVgPl0M7ilwTK1RN2I2ekAgNpKJyZ/MD1vBUlYXrYKkLq7kNkahuAwIbBxfaD oJHt+yjegbEyX8Y/O9yCZxIjSBWALbg= -----END CERTIFICATE-----Generated at Tue Jul 8 23:31:22 2025 by rpki-client