$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e46f58f1-1fa2-3803-a6d6-d30edc180150.roa File: e46f58f1-1fa2-3803-a6d6-d30edc180150.roa (raw, json) Hash identifier: NgauqfifAhbqIscF8uaAbdNdk8dyK91L9R5nepgfpHM= Subject key identifier: BB:3D:49:C7:19:26:43:3B:48:E5:CE:42:0A:CE:21:11:A2:4D:68:EE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A7350A535536E9E5A7C51F880 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e46f58f1-1fa2-3803-a6d6-d30edc180150.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 157.5.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a5:35:53:6e:9e:5a:7c:51:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=fac0f355-18c3-46ae-a2e7-e2c608eebdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:ad:36:32:94:cd:fa:f8:dd:5e:b5:a1:b8: e8:7f:53:eb:18:73:23:22:89:72:44:36:41:72:3f: 66:ba:38:99:fa:93:cb:4f:d6:c1:5f:f1:17:df:df: 01:9a:1f:51:fa:b1:f8:0a:27:5c:ba:dc:9d:c4:c6: 1b:ff:3f:4c:db:d2:37:82:0b:4f:39:3a:8e:2e:1d: 31:31:1e:5a:7d:0a:8d:08:f0:34:65:c5:a3:06:c4: 80:38:85:7d:54:a6:ec:25:e0:f5:39:25:69:3e:07: bd:7c:71:20:c8:1c:ae:66:67:f8:7d:ff:f4:02:04: 44:c3:5f:6a:4a:7b:e2:97:56:b0:9a:8f:d0:08:1f: 18:ba:d8:58:7e:9f:e1:06:22:3b:d4:48:6e:66:64: 3e:bf:e1:a6:4b:69:be:7e:a5:ce:56:90:1d:bb:35: 85:a1:75:c1:a9:85:87:2a:7a:59:b1:10:f8:e6:d9: 0c:76:ce:12:35:ce:1d:14:27:85:92:9b:e0:6b:9f: 2a:b5:89:65:b6:92:c1:0c:46:ed:3c:57:91:d0:b1: ae:cd:15:2b:eb:22:fb:6d:04:1d:3f:b7:94:bb:23: 4a:38:32:c2:31:d6:6b:70:c1:97:d7:60:8e:20:36: a3:08:46:eb:80:ac:d5:09:4a:05:c4:1f:98:6c:26: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3D:49:C7:19:26:43:3B:48:E5:CE:42:0A:CE:21:11:A2:4D:68:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e46f58f1-1fa2-3803-a6d6-d30edc180150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:89:50:c3:fb:ce:5b:85:9c:16:4a:d4:e8:a0:9c:9b:2f:b6: 35:6d:6e:7f:37:ed:b1:c4:a1:07:ac:db:8e:a3:f9:66:df:74: 14:d8:f0:7b:6e:d3:e8:fb:3a:98:58:6d:bd:71:30:19:69:d7: b7:80:96:43:cb:ca:f2:aa:31:33:72:1b:f6:c0:f9:44:9b:a9: 53:64:44:e0:8b:1e:bb:c2:21:e4:47:55:6a:b9:84:3e:53:bb: 63:59:85:cc:f0:48:0b:9e:08:fe:1c:c6:00:81:5f:c8:e4:b9: 93:9a:60:e8:f5:b9:fb:0f:cd:bf:fd:00:5e:00:0c:c2:76:52: 8d:2e:5a:57:ad:14:b8:60:2f:82:20:88:31:dc:41:ed:a1:48: c5:e7:1b:9c:9d:b4:0f:ac:84:bc:11:48:09:2f:a3:7c:8f:a8: 29:3a:44:20:b3:5f:78:c8:fa:57:96:d8:c8:e8:43:96:c8:07: 80:6f:53:6d:50:9d:06:5d:cb:4b:81:4c:97:42:ab:a9:54:c6: 92:1e:6d:74:0b:5c:59:9c:92:d0:05:90:35:5d:08:48:ed:6f: 3e:5c:21:73:9b:fe:d4:3b:d2:ab:03:57:e3:0b:13:ad:b9:f2: b0:fe:d4:8e:82:ba:cc:1c:13:32:c7:8f:98:6e:dd:ed:25:26: 39:59:1a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKU1U26eWnxR+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZmFjMGYzNTUtMThjMy00NmFlLWEyZTctZTJjNjA4ZWViZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBatNjKUzfr43V61objof1PrGHMjIolyRDZB cj9mujiZ+pPLT9bBX/EX398Bmh9R+rH4CidcutydxMYb/z9M29I3ggtPOTqOLh0x MR5afQqNCPA0ZcWjBsSAOIV9VKbsJeD1OSVpPge9fHEgyByuZmf4ff/0AgREw19q Snvil1awmo/QCB8YuthYfp/hBiI71EhuZmQ+v+GmS2m+fqXOVpAduzWFoXXBqYWH KnpZsRD45tkMds4SNc4dFCeFkpvga58qtYlltpLBDEbtPFeR0LGuzRUr6yL7bQQd P7eUuyNKODLCMdZrcMGX12COIDajCEbrgKzVCUoFxB+YbCYScQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs9SccZJkM7SOXOQgrOIRGiTWjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTQ2ZjU4ZjEtMWZhMi0z ODAzLWE2ZDYtZDMwZWRjMTgwMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICJUMP7zluFnBZK1OignJsvtjVtbn837bHEoQes246j+WbfdBTY8Htu 0+j7OphYbb1xMBlp17eAlkPLyvKqMTNyG/bA+USbqVNkROCLHrvCIeRHVWq5hD5T u2NZhczwSAueCP4cxgCBX8jkuZOaYOj1ufsPzb/9AF4ADMJ2Uo0uWletFLhgL4Ig iDHcQe2hSMXnG5ydtA+shLwRSAkvo3yPqCk6RCCzX3jI+leW2MjoQ5bIB4BvU21Q nQZdy0uBTJdCq6lUxpIebXQLXFmcktAFkDVdCEjtbz5cIXOb/tQ70qsDV+MLE625 8rD+1I6CuswcEzLHj5hu3e0lJjlZGhs= -----END CERTIFICATE-----Generated at Wed Jul 9 00:10:14 2025 by rpki-client