$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa File: c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa (raw, json) Hash identifier: 1O1HwqzgtCasGxgb8I0Bky25aPnCobukjkFHfLXe9T4= Subject key identifier: 31:0A:E7:C0:AC:34:91:42:89:C4:2E:71:49:6C:14:62:1F:32:B7:A2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4984AFD8417F06AE59CDF880 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 157.5.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:af:d8:41:7f:06:ae:59:cd:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=24327764-3a21-48c9-b2a0-4822ad92b585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7e:1c:b1:c9:c9:77:7c:d4:eb:10:0e:85:5e: 1e:6a:d9:59:84:c9:86:27:4a:e6:46:c7:29:90:46: 2e:c1:04:eb:a9:96:a6:97:46:37:65:27:d0:3d:98: 10:29:ec:8c:3c:7f:e0:22:ce:96:91:63:2a:ab:13: de:36:61:e1:c6:3d:81:4a:84:12:cf:4c:b6:ee:45: f6:9b:f1:04:8e:70:35:d2:53:65:42:3d:c4:0a:52: 3e:e0:33:48:eb:07:73:c3:b3:31:5b:b5:f3:26:58: c5:25:87:40:57:34:9e:70:91:87:7f:4d:46:a4:6a: 59:70:ca:81:fb:b0:d9:de:99:0b:2f:10:06:89:1b: ae:df:d0:42:4e:38:b9:22:7c:ba:d9:86:f0:48:89: 9b:29:f9:5e:33:88:e8:70:36:86:71:31:55:1c:a3: 86:3c:a2:84:73:e2:b3:fe:02:be:d6:f4:19:73:f4: 74:c7:47:7c:91:05:f7:e8:6e:85:d4:b9:2b:ee:76: 65:ee:8d:1d:49:32:95:81:81:56:09:17:5b:9f:a3: 88:52:8d:12:c6:6f:6d:97:13:3a:86:e3:78:80:a2: 1d:61:cb:ec:6f:08:d0:d9:0f:d5:54:97:e4:d7:14: e0:f9:7e:48:7a:b0:f6:33:4d:5c:f2:65:e6:80:55: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:E7:C0:AC:34:91:42:89:C4:2E:71:49:6C:14:62:1F:32:B7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:41:13:c3:e1:8e:c1:00:41:84:80:41:a8:89:b1:09:de:80: 6d:b0:e7:4a:6f:2d:b5:93:63:e1:85:3f:76:a1:46:35:18:71: d8:3f:c7:23:50:ea:ea:26:c2:70:b9:e2:90:ed:b3:b6:4b:c2: 29:2e:9b:e2:1d:58:f6:5f:fc:50:af:f7:d3:d1:2e:ba:24:d2: 82:8f:07:84:6f:2a:5b:be:ba:ed:80:40:91:54:1a:5a:70:dd: d0:18:ad:a1:a2:dd:a0:99:aa:f1:c0:18:91:d7:bb:ea:89:6d: 6a:be:27:6f:28:a8:a5:c0:b2:05:c2:71:8c:54:f9:78:86:99: e4:fc:30:fe:a1:ba:84:44:37:1d:64:34:6c:dc:0d:e6:68:95: f6:e4:7b:37:3b:f7:70:86:ba:4a:6e:34:1f:92:c5:56:6f:22: 8f:2e:c4:4d:4b:a7:02:e3:5d:3f:e1:5a:1e:65:63:83:80:a1: 1d:ac:4e:7c:7b:b2:3d:f0:b1:89:49:9a:c0:00:cf:ce:9c:b3: 95:f1:46:74:85:2d:f6:98:56:10:97:ff:93:3d:75:08:08:11: 8c:8e:20:b0:48:d7:26:59:54:b7:cd:0e:37:a4:42:48:f5:51: 16:4a:7c:74:30:f5:9f:4f:4e:a0:da:0d:2f:d7:97:38:76:d8: 02:12:ea:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhK/YQX8GrlnN+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjQzMjc3NjQtM2EyMS00OGM5LWIyYTAtNDgyMmFkOTJiNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn4cscnJd3zU6xAOhV4eatlZhMmGJ0rmRscp kEYuwQTrqZaml0Y3ZSfQPZgQKeyMPH/gIs6WkWMqqxPeNmHhxj2BSoQSz0y27kX2 m/EEjnA10lNlQj3EClI+4DNI6wdzw7MxW7XzJljFJYdAVzSecJGHf01GpGpZcMqB +7DZ3pkLLxAGiRuu39BCTji5Iny62YbwSImbKfleM4jocDaGcTFVHKOGPKKEc+Kz /gK+1vQZc/R0x0d8kQX36G6F1Lkr7nZl7o0dSTKVgYFWCRdbn6OIUo0Sxm9tlxM6 huN4gKIdYcvsbwjQ2Q/VVJfk1xTg+X5IerD2M01c8mXmgFXRywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEK58CsNJFCicQucUlsFGIfMreiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzdlNTQzYmItNmY2Ni0z YWE1LThkMTUtZmJiNTBkZDdhMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABBE8PhjsEAQYSAQaiJsQnegG2w50pvLbWTY+GFP3ahRjUYcdg/xyNQ 6uomwnC54pDts7ZLwikum+IdWPZf/FCv99PRLrok0oKPB4RvKlu+uu2AQJFUGlpw 3dAYraGi3aCZqvHAGJHXu+qJbWq+J28oqKXAsgXCcYxU+XiGmeT8MP6huoRENx1k NGzcDeZolfbkezc793CGukpuNB+SxVZvIo8uxE1LpwLjXT/hWh5lY4OAoR2sTnx7 sj3wsYlJmsAAz86cs5XxRnSFLfaYVhCX/5M9dQgIEYyOILBI1yZZVLfNDjekQkj1 URZKfHQw9Z9PTqDaDS/Xlzh22AIS6mQ= -----END CERTIFICATE-----Generated at Fri Sep 25 09:43:42 2026 by rpki-client