$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa File: 1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa (raw, json) Hash identifier: U5QnkuzNJaucIm5VDRCAGsTAxIK7ewQsQoBo38E8E2M= Subject key identifier: 6C:95:46:CA:3E:2D:25:66:7C:97:BE:9E:B2:B4:7B:03:D0:D3:C5:E4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EA7966E0E0F0618A40EA1FB00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54113 IP address blocks: 157.5.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:6e:0e:0f:06:18:a4:0e:a1:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b52cabb4-f2cb-42c5-8a40-ed3f01be041a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:5e:a5:14:4d:35:16:70:ef:b3:2c:25:ae: 7d:aa:59:ce:76:57:63:e9:4f:36:d7:a0:a8:56:4c: d5:f2:f6:6e:69:06:1d:4a:ca:88:f1:e2:65:67:8e: 93:30:67:76:6e:07:7c:eb:bf:81:0a:6b:c5:d9:8b: e0:5b:07:e0:c5:b9:d1:54:d8:52:17:63:58:89:26: ff:fb:f5:40:1b:76:26:1d:1d:4c:0a:77:30:1f:69: e5:c9:3c:33:08:d1:f4:be:aa:d7:75:75:77:3b:8e: 43:98:f5:5e:cd:f8:a8:27:81:ab:e0:82:27:56:e7: 53:71:1b:e6:0d:61:6e:6b:e0:8c:8c:c6:cd:ec:1e: 76:aa:13:ae:a9:46:5a:a9:9f:13:db:31:eb:85:1f: 94:57:c2:6b:74:57:81:ee:2c:3e:4d:84:1c:24:05: 79:dd:2e:d0:53:28:e4:0d:c2:00:a1:15:2c:5f:35: 79:1d:8a:ea:ec:ca:70:dd:98:bd:10:f7:f2:21:e7: de:49:8b:ab:b8:88:1e:99:e3:1f:61:23:49:9d:92: db:7f:09:4f:d3:ee:7a:31:1e:72:38:cf:8e:ce:8c: 1d:98:58:eb:37:3b:56:65:6c:b5:db:1d:41:2d:24: 24:f4:0b:d0:70:14:67:05:6b:24:47:9e:83:4a:51: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:95:46:CA:3E:2D:25:66:7C:97:BE:9E:B2:B4:7B:03:D0:D3:C5:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:61:63:19:81:92:18:bc:11:30:0d:c2:f5:53:7c:26:f8:a6: 4a:85:da:ef:ae:fc:99:fc:04:f4:a1:59:cd:ee:32:29:cb:18: a1:ab:c5:71:fa:98:4b:92:11:22:94:56:47:0b:45:83:24:f3: cc:57:4e:e3:bc:03:b8:b9:e3:12:02:c7:23:4c:83:dd:03:39: cc:ad:4c:0f:9f:3c:4f:3e:f3:e5:e5:36:fa:b6:16:8a:0c:40: 79:b9:89:48:7f:6f:80:5e:20:33:83:10:a0:b9:79:e9:67:b2: e7:29:4e:6c:9e:4c:1b:10:80:ea:56:d5:6d:be:6e:87:94:01: 90:46:95:66:ee:27:a3:bc:12:07:ce:0c:f7:f2:1f:aa:93:cb: 36:0e:d2:87:89:3e:59:06:d6:08:10:de:74:c8:97:bb:69:1e: e7:5e:3f:d6:2f:9b:35:81:a7:35:5e:2b:91:bc:e9:c5:48:6b: 5a:05:87:e6:2e:05:4a:7e:92:1d:36:56:e3:3a:1b:1b:9e:42: 3e:fd:b9:a3:1e:de:03:36:d1:a8:9f:7e:43:4b:46:96:03:b9: 6c:a3:7f:42:ec:8e:ec:b2:b6:58:ae:96:28:1a:07:f7:3f:42: 86:0d:55:60:fe:9b:a6:89:4c:4f:aa:eb:1a:24:a6:99:cd:bf: 57:df:09:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlm4ODwYYpA6h+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjUyY2FiYjQtZjJjYi00MmM1LThhNDAtZWQzZjAxYmUwNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrJepRRNNRZw77MsJa59qlnOdldj6U8216Co VkzV8vZuaQYdSsqI8eJlZ46TMGd2bgd867+BCmvF2YvgWwfgxbnRVNhSF2NYiSb/ +/VAG3YmHR1MCncwH2nlyTwzCNH0vqrXdXV3O45DmPVezfioJ4Gr4IInVudTcRvm DWFua+CMjMbN7B52qhOuqUZaqZ8T2zHrhR+UV8JrdFeB7iw+TYQcJAV53S7QUyjk DcIAoRUsXzV5HYrq7Mpw3Zi9EPfyIefeSYuruIgemeMfYSNJnZLbfwlP0+56MR5y OM+OzowdmFjrNztWZWy12x1BLSQk9AvQcBRnBWskR56DSlEzxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyVRso+LSVmfJe+nrK0ewPQ08XkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWFiMTE3MmYtY2Q2YS0z MWY2LWE5ZDUtYzQ5NjhkZjliMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVhYxmBkhi8ETANwvVTfCb4pkqF2u+u/Jn8BPShWc3uMinLGKGrxXH6 mEuSESKUVkcLRYMk88xXTuO8A7i54xICxyNMg90DOcytTA+fPE8+8+XlNvq2FooM QHm5iUh/b4BeIDODEKC5eelnsucpTmyeTBsQgOpW1W2+boeUAZBGlWbuJ6O8EgfO DPfyH6qTyzYO0oeJPlkG1ggQ3nTIl7tpHudeP9YvmzWBpzVeK5G86cVIa1oFh+Yu BUp+kh02VuM6GxueQj79uaMe3gM20aiffkNLRpYDuWyjf0LsjuyytliuligaB/c/ QoYNVWD+m6aJTE+q6xokppnNv1ffCVU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:00:02 2026 by rpki-client