$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa File: bad93590-57d3-32f3-bd80-03113a54a6eb.roa (raw, json) Hash identifier: XNlsmazy54a21QBSrIBua+PMtXiphp/RaX7tONlNfhY= Subject key identifier: 70:89:38:B5:B3:6E:10:D6:51:F9:4E:29:C8:A0:85:63:53:D9:C4:A7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F49849720486E558277D0E260 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:97:20:48:6e:55:82:77:d0:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=304f1a42-ae9b-4a94-88a4-eaf84c81ddc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:b7:32:2b:fe:7c:17:14:f9:4e:3e:21:17: 2b:6b:e7:39:6f:c7:08:c9:a6:72:e5:38:c3:c5:b9: 24:0e:17:78:b9:f1:1c:49:2f:37:54:cc:ed:c1:15: 10:2e:9a:bf:16:12:73:74:62:d5:fc:cb:b2:43:c0: f2:78:19:46:8d:68:48:ab:75:49:c6:6f:df:f2:ca: a5:a1:a2:3c:f9:c9:91:cf:a3:61:f5:2d:70:38:cc: 42:9f:e9:fa:6b:8b:69:71:fc:cf:f4:5a:9e:f7:90: d9:2a:3b:fa:01:89:21:57:8b:32:74:55:5d:07:09: 48:15:85:2e:fc:6d:b0:c2:ab:a0:5f:12:d1:4c:28: 30:14:d4:a3:c9:5d:30:83:d4:ea:c2:fc:91:c1:fa: b3:da:57:9d:16:bc:70:e3:d0:14:56:46:80:67:a9: 2f:eb:71:13:b7:30:6d:c3:4e:2c:cd:ab:7a:04:f7: cc:3e:2f:08:80:02:38:da:f5:df:58:e2:9e:46:21: d9:3b:87:43:45:fd:db:e4:28:c9:53:6b:11:bd:d2: 90:21:4e:e5:c4:ca:e5:29:0c:47:19:10:fa:bb:36: 32:d6:03:b2:75:c2:ae:35:b2:fa:49:72:e4:6b:87: 9c:de:09:8e:b5:e0:f8:c2:f0:f6:22:67:e4:e9:4b: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:89:38:B5:B3:6E:10:D6:51:F9:4E:29:C8:A0:85:63:53:D9:C4:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:83:09:25:cb:a3:aa:1e:b8:8c:df:f2:5e:69:78:a6:ed:0a: 96:46:5e:6b:85:b6:91:d2:33:16:14:fd:49:6b:3a:06:70:03: 2e:43:c3:86:c4:96:d4:84:69:4c:d1:02:20:21:54:a5:98:3f: 30:53:91:39:5c:f0:c2:36:30:5e:82:22:df:24:37:2f:20:e4: b6:5a:2a:2f:62:be:33:cc:cb:26:e8:9d:ad:72:33:de:16:1c: b0:31:40:eb:04:73:30:0d:db:ae:d0:d8:e3:50:bd:5c:b2:84: da:f3:12:94:b9:4b:64:68:0f:a4:6d:12:93:a9:99:c0:54:76: f0:ca:e6:2f:19:fb:70:3e:3a:7c:5b:83:96:fd:20:d1:96:b9: 75:f3:25:4b:03:ea:7c:bb:78:10:c2:65:5d:fa:58:72:73:57: c4:47:d6:6c:89:d5:5f:86:8a:b6:97:8f:23:54:42:b2:e6:b3: e1:57:47:c7:e9:1f:30:3e:41:45:2e:d2:33:4e:b5:76:81:40: 44:ef:81:5a:10:86:c0:ad:31:eb:7a:8f:e3:d0:48:48:74:ea: b1:8d:f8:00:57:94:34:36:0f:a2:5e:3b:0e:34:c3:80:50:57: 12:ef:28:4c:63:11:84:db:5b:31:e3:69:73:5c:2b:75:44:2b: 9c:b6:bb:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhJcgSG5VgnfQ4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzA0ZjFhNDItYWU5Yi00YTk0LTg4YTQtZWFmODRjODFkZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHK3Miv+fBcU+U4+IRcra+c5b8cIyaZy5TjD xbkkDhd4ufEcSS83VMztwRUQLpq/FhJzdGLV/MuyQ8DyeBlGjWhIq3VJxm/f8sql oaI8+cmRz6Nh9S1wOMxCn+n6a4tpcfzP9Fqe95DZKjv6AYkhV4sydFVdBwlIFYUu /G2wwqugXxLRTCgwFNSjyV0wg9TqwvyRwfqz2ledFrxw49AUVkaAZ6kv63ETtzBt w04szat6BPfMPi8IgAI42vXfWOKeRiHZO4dDRf3b5CjJU2sRvdKQIU7lxMrlKQxH GRD6uzYy1gOydcKuNbL6SXLka4ec3gmOteD4wvD2Imfk6Uv8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCJOLWzbhDWUflOKcighWNT2cSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmFkOTM1OTAtNTdkMy0z MmYzLWJkODAtMDMxMTNhNTRhNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICDCSXLo6oeuIzf8l5peKbtCpZGXmuFtpHSMxYU/UlrOgZwAy5Dw4bE ltSEaUzRAiAhVKWYPzBTkTlc8MI2MF6CIt8kNy8g5LZaKi9ivjPMyybona1yM94W HLAxQOsEczAN267Q2ONQvVyyhNrzEpS5S2RoD6RtEpOpmcBUdvDK5i8Z+3A+Onxb g5b9INGWuXXzJUsD6ny7eBDCZV36WHJzV8RH1myJ1V+GiraXjyNUQrLms+FXR8fp HzA+QUUu0jNOtXaBQETvgVoQhsCtMet6j+PQSEh06rGN+ABXlDQ2D6JeOw40w4BQ VxLvKExjEYTbWzHjaXNcK3VEK5y2u9c= -----END CERTIFICATE-----Generated at Fri Sep 25 08:05:10 2026 by rpki-client