$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa File: 25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa (raw, json) Hash identifier: pKQ6l1vE0vT+IZa7DgAagRrsC5E7vmOW9LtpTjF3FiU= Subject key identifier: B6:F1:16:C7:B4:0F:38:0E:C4:FA:C2:02:89:9D:7C:51:00:A2:C2:1D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A7E7B8777A0E5E7B3D6A553C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 157.5.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:87:77:a0:e5:e7:b3:d6:a5:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=79bfbacd-0681-4e6d-b591-050bb856e8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e6:09:ad:81:e9:2e:f2:b0:80:dc:5d:98:d3: 77:9b:48:e5:16:28:ae:45:16:55:d8:83:64:ff:cc: a5:47:f0:0e:e7:fd:68:44:d9:e8:dd:28:e5:7d:d4: d9:58:5a:57:ba:51:1c:88:49:55:2a:a5:c6:a1:d8: c9:19:70:e7:37:39:75:4d:2c:30:85:29:d4:eb:73: 21:d9:28:d4:48:32:79:26:52:f8:5e:59:7f:58:5b: f0:35:cd:0b:5e:ba:07:34:4e:be:0b:4f:0e:7b:d1: 1e:7c:a6:99:14:47:1d:ef:cc:ec:dd:cd:69:f8:4f: ef:e7:88:78:39:49:ad:e4:b1:6d:35:23:2d:a2:ac: 54:20:58:16:55:2d:b6:55:a9:09:a0:30:e4:5e:f1: 36:e5:3d:30:42:89:8b:4f:08:09:36:a2:fa:a4:a6: 6c:1f:38:03:04:58:9c:86:5c:06:87:ed:fd:0f:d5: 09:58:fc:f3:0f:9a:ca:82:a4:89:4e:26:1f:54:5d: 81:48:a2:ae:80:7f:fe:fb:5e:19:a9:3e:51:65:e2: 33:49:96:2b:96:7e:68:41:e7:aa:30:7b:45:0b:55: c2:d7:9e:3d:06:aa:17:6e:55:42:1b:74:91:34:ed: 15:66:05:07:58:a3:4a:ef:12:a1:4e:69:63:da:62: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F1:16:C7:B4:0F:38:0E:C4:FA:C2:02:89:9D:7C:51:00:A2:C2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:21:ec:ad:e4:d0:0a:dc:ce:88:a7:39:f6:56:0c:52:c9:70: 65:09:b4:dd:d7:de:6e:14:52:86:ba:7a:79:d9:b8:b9:bc:9d: 69:7b:2e:cf:88:36:9e:26:7b:66:b3:f2:71:5f:9a:b1:a2:9f: b1:89:88:42:f7:df:8c:d6:85:c5:85:d3:95:fc:1f:fc:f8:7f: e8:91:92:40:b5:dc:cf:f2:3b:7a:f7:c7:0b:5e:b3:6b:a6:90: cd:c8:f9:c0:bf:46:dc:fb:c0:f0:d1:70:09:31:dc:ad:bb:d1: 2b:49:52:ff:7d:6d:91:f0:85:21:8b:f4:b7:81:8c:7a:5e:cf: 3b:9a:4e:18:48:55:f2:e2:03:fc:58:c5:0a:bd:28:e5:0e:a5: 2d:48:a9:f4:5c:8b:16:7a:3f:1c:86:9e:82:38:10:4a:cf:d5: a9:e0:4f:2d:0d:d8:8f:72:6e:ec:b7:65:cd:37:f1:88:e0:8d: b0:f8:39:81:03:e9:e7:e7:d9:85:dc:1d:b9:87:db:0e:b1:1a: c0:fb:95:28:a4:5a:6b:39:16:9a:85:a8:43:68:cd:04:96:41: 76:f0:19:e4:f7:06:80:0f:42:7a:e4:98:f6:94:ef:c2:c8:ac: a0:e3:27:4d:b3:e3:83:dc:29:81:d0:b2:e5:a9:48:96:f4:d5: ee:41:5f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4d3oOXns9alU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NzliZmJhY2QtMDY4MS00ZTZkLWI1OTEtMDUwYmI4NTZlOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOYJrYHpLvKwgNxdmNN3m0jlFiiuRRZV2INk /8ylR/AO5/1oRNno3SjlfdTZWFpXulEciElVKqXGodjJGXDnNzl1TSwwhSnU63Mh 2SjUSDJ5JlL4Xll/WFvwNc0LXroHNE6+C08Oe9EefKaZFEcd78zs3c1p+E/v54h4 OUmt5LFtNSMtoqxUIFgWVS22VakJoDDkXvE25T0wQomLTwgJNqL6pKZsHzgDBFic hlwGh+39D9UJWPzzD5rKgqSJTiYfVF2BSKKugH/++14ZqT5RZeIzSZYrln5oQeeq MHtFC1XC1549BqoXblVCG3SRNO0VZgUHWKNK7xKhTmlj2mIPywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbxFse0DzgOxPrCAomdfFEAosIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjVhOGY4NGQtNzI3Yi0z NGY5LWFjNWMtN2IyN2M4YTNhYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIh7K3k0ArczoinOfZWDFLJcGUJtN3X3m4UUoa6ennZuLm8nWl7Ls+I Np4me2az8nFfmrGin7GJiEL334zWhcWF05X8H/z4f+iRkkC13M/yO3r3xwtes2um kM3I+cC/Rtz7wPDRcAkx3K270StJUv99bZHwhSGL9LeBjHpezzuaThhIVfLiA/xY xQq9KOUOpS1IqfRcixZ6PxyGnoI4EErP1angTy0N2I9ybuy3Zc038YjgjbD4OYED 6efn2YXcHbmH2w6xGsD7lSikWms5FpqFqENozQSWQXbwGeT3BoAPQnrkmPaU78LI rKDjJ02z44PcKYHQsuWpSJb01e5BXxc= -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:12 2025 by rpki-client